Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA51ECAE9F6311F0826CA9BBDAE4EC9C.roa
File: AA51ECAE9F6311F0826CA9BBDAE4EC9C.roa (raw, json)
Hash identifier: a1+7dEnHx83SzJ18u88g8dA2Zq8C22Xiz/kByoBXw74=
Subject key identifier: 03:1E:8E:2B:03:FB:6A:BB:A7:66:DD:36:57:4D:77:3A:9F:DA:09:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA51ECAE9F6311F0826CA9BBDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 07:44:46 +0000
ROA not before: Thu 02 Oct 2025 07:44:40 +0000
ROA not after: Sat 08 Nov 2025 07:44:40 +0000
asID: 140869
IP address blocks: 45.205.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97881 (0x17e59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 07:44:40 2025 GMT
Not After : Nov 8 07:44:40 2025 GMT
Subject: CN=68de2d6e-31a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:49:36:3e:08:90:a6:bc:21:28:2c:ac:48:
77:0d:81:04:dc:93:a9:1f:f1:91:49:d7:9e:32:b5:
a1:b8:d9:4f:4f:65:de:8b:05:83:56:f8:cd:9e:62:
7d:4d:f9:12:45:9f:17:75:92:4e:30:90:31:c2:59:
69:ad:05:4f:02:2f:6c:60:6f:78:58:f2:d0:f1:6e:
2a:31:85:ea:3a:01:67:bb:e5:9f:3d:a8:ee:eb:7e:
e8:6c:6f:34:63:e2:62:1b:dc:9a:e2:8b:d6:69:6e:
10:99:3c:33:fc:40:1a:ce:46:aa:c2:7c:59:74:a2:
52:a8:08:9a:a0:42:df:48:86:27:2b:ec:21:0f:18:
f5:d8:01:98:25:7a:82:90:78:99:60:a6:0f:fd:cf:
de:c0:06:9b:ba:ce:de:da:bd:b0:68:fb:06:94:0c:
c2:8d:be:3c:90:4f:04:d5:07:b4:4d:fe:b7:33:e6:
88:9e:2c:9f:5c:ba:c5:e0:85:57:fe:e0:94:f8:3c:
d2:0a:86:4f:7e:52:21:3a:dd:0e:0b:7f:6c:c6:a9:
39:77:5c:aa:6b:f8:de:e5:c3:1c:ff:88:7b:1f:7a:
4b:bb:bf:60:be:35:c2:8a:a1:d4:59:e3:a0:f1:48:
de:93:28:7c:79:7c:a2:d8:f9:9a:56:b2:9e:c2:cf:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1E:8E:2B:03:FB:6A:BB:A7:66:DD:36:57:4D:77:3A:9F:DA:09:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA51ECAE9F6311F0826CA9BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.1.0/24
Signature Algorithm: sha256WithRSAEncryption
91:30:53:5a:b3:7c:ad:bd:6f:30:d6:ba:42:aa:85:bb:83:d0:
82:38:7d:91:40:f4:d1:1a:91:5e:bb:e3:2b:6a:ec:cf:22:89:
93:7a:b9:aa:72:28:1f:3e:29:ed:2e:a3:ca:a3:14:96:c6:2b:
7a:92:26:3c:0f:ec:59:12:1d:41:30:d1:6a:a3:99:54:16:31:
db:a4:87:34:cb:f2:52:1b:34:26:a5:4d:f2:b0:20:85:d3:cb:
44:69:59:bc:7a:d6:ad:18:ad:70:cc:37:dc:59:d7:02:24:58:
28:24:3a:95:9f:f9:47:17:60:2a:f4:67:69:24:e6:82:74:04:
06:e5:fa:55:d3:20:79:8e:e2:34:18:38:04:c9:dd:6c:38:15:
e9:2e:54:d6:8d:6e:1d:b8:94:f3:5d:2d:d8:e2:8f:f4:b9:5b:
89:b6:e1:18:09:9e:4d:52:ce:7e:e6:ff:f0:eb:7d:dd:da:ed:
cd:36:2e:16:14:df:1d:ba:f8:3d:e0:2d:cc:7b:7c:0b:18:0d:
0f:f2:a0:d5:43:6e:6c:8f:f9:b3:cd:c3:fa:dd:a4:bc:96:c6:
27:11:53:76:48:bc:84:8e:01:38:33:cf:aa:f2:ae:82:26:c7:
8d:75:e9:4b:ef:db:77:6b:5a:5b:ed:ef:cd:94:31:5c:29:86:
95:74:c0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:39 2025 by rpki-client