Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A53F00A99F11F0A913FB89DAE4EC9C.roa
File: A8A53F00A99F11F0A913FB89DAE4EC9C.roa (raw, json)
Hash identifier: Ddysf/4KXxAmXdwDJQH+iJYhYTQak/IfFQMJk0naSuk=
Subject key identifier: 38:F0:C7:11:6F:22:02:AB:88:48:83:BA:51:4E:4E:36:12:14:02:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01808A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A53F00A99F11F0A913FB89DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 08:19:25 +0000
ROA not before: Wed 15 Oct 2025 08:19:20 +0000
ROA not after: Mon 17 Nov 2025 08:19:20 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98442 (0x1808a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 08:19:20 2025 GMT
Not After : Nov 17 08:19:20 2025 GMT
Subject: CN=68ef590c-b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:a1:ae:fc:46:00:9f:9d:37:33:12:49:d3:
a9:17:26:c4:5a:78:de:5d:1f:65:aa:5a:d8:5e:61:
a9:ee:6b:18:94:af:26:98:68:37:8a:27:93:9e:f8:
69:6f:53:d2:95:bb:80:ce:13:2e:0f:c5:06:c5:3f:
f4:56:c4:49:36:79:fd:07:58:55:f3:21:7a:e6:65:
1d:cd:70:cd:5a:2c:59:fc:d6:1f:03:6a:4b:09:31:
1a:25:c0:ad:26:76:f3:34:8a:c1:9b:d6:66:c6:2f:
2b:5f:19:84:9e:f6:8e:bc:6a:33:9f:ce:af:6c:43:
fa:63:d3:8c:d4:ac:3b:88:f0:b9:fe:a0:37:61:29:
71:b4:13:8f:c1:33:9d:7d:90:9e:22:f6:d4:0d:a1:
00:ac:5c:8b:29:bb:54:67:59:8d:7f:09:64:58:19:
75:fe:13:a0:5b:5b:dc:a9:ab:e8:8b:76:a5:f8:ef:
a8:6d:3d:9c:31:d7:62:34:78:87:fd:a1:0e:ac:6a:
af:a3:fb:32:60:7a:a9:f1:b5:ce:8d:b6:09:22:cc:
36:56:74:0a:49:ba:42:54:01:a9:e5:29:fc:57:db:
47:ba:b3:5c:80:30:ed:a1:75:89:d0:93:88:50:ba:
29:f4:29:49:26:4b:8b:e8:bf:aa:f6:e9:97:4f:e6:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:C7:11:6F:22:02:AB:88:48:83:BA:51:4E:4E:36:12:14:02:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A53F00A99F11F0A913FB89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
45:77:c7:ca:25:ec:91:00:28:3b:01:a4:f1:b5:73:48:2e:98:
10:c4:35:08:fe:86:56:e0:15:47:65:8c:d3:a1:35:ca:5f:4a:
e2:52:19:da:44:6d:76:b0:8f:69:35:64:1c:03:d7:b2:71:f4:
46:17:0e:8f:2e:17:36:38:c4:54:8a:e4:f4:96:46:8a:d8:63:
95:72:c5:4b:11:71:c6:67:b0:fc:e7:0b:2a:27:e9:ee:c9:92:
cc:d7:44:17:7d:91:dd:04:f7:c8:d0:a7:ea:fe:97:69:60:c4:
2d:12:42:de:23:61:ef:41:b5:a2:e5:af:b5:ac:d4:15:d3:a1:
27:36:62:e0:05:73:d5:ad:82:ad:7c:ba:b5:45:53:fe:ac:92:
d0:10:8c:67:76:de:ee:6d:ea:de:bd:bc:81:da:e3:5c:df:99:
04:c3:d2:2d:36:a0:fb:85:14:33:18:d6:4e:7e:37:39:5b:3e:
4e:31:33:73:88:7c:87:50:df:80:45:36:99:1f:4d:98:65:e5:
e9:35:2b:43:69:e9:1d:df:27:df:de:4b:b1:a5:64:64:36:3b:
08:f7:28:63:37:45:26:cc:ac:ea:0a:a7:ad:f6:d0:90:d3:77:
f9:b0:54:29:4b:f6:65:b8:66:b0:37:04:f6:58:cd:c2:20:22:
e0:62:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:16 2025 by rpki-client