Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE33756994511F0BCA1C191DAE4EC9C.roa
File: AEE33756994511F0BCA1C191DAE4EC9C.roa (raw, json)
Hash identifier: cs/IjejfyZROZ1m78nSKEWZJ6Ax7V15F+9yCN7IC1JA=
Subject key identifier: B5:36:E4:1F:DD:95:EF:A0:2B:EF:E7:BF:F3:9C:1A:9B:52:53:8E:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE33756994511F0BCA1C191DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 12:55:02 +0000
ROA not before: Wed 24 Sep 2025 12:54:56 +0000
ROA not after: Mon 27 Oct 2025 12:54:56 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97493 (0x17cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 12:54:56 2025 GMT
Not After : Oct 27 12:54:56 2025 GMT
Subject: CN=68d3ea26-a1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:ad:b9:ac:ff:45:b4:08:9f:ff:da:e1:a2:
3e:89:d5:2e:fc:be:35:16:8c:36:28:ee:87:5f:6a:
86:ea:80:69:21:2d:4c:8c:73:6b:67:56:e0:ce:ad:
b1:1a:2a:bd:97:e1:14:a5:10:e9:8c:a2:b0:c5:d6:
72:8b:a0:52:e3:d4:d2:c9:fb:f9:17:90:44:bc:84:
41:60:2e:24:9a:4f:e8:b2:a3:b4:41:d6:06:0c:a7:
be:0d:57:21:07:47:f9:d3:c0:ee:5c:c2:f0:b1:54:
e9:fe:43:6b:10:23:a1:f2:df:05:98:18:16:cf:d3:
6a:da:3e:8b:67:0d:79:d6:e0:b6:dd:f6:e0:a2:57:
b8:ce:d7:f3:e3:fb:f8:9b:ad:ee:33:fd:c4:8a:ed:
78:9a:31:3b:ab:fa:47:4d:27:ed:94:6a:68:93:8f:
fa:e2:77:96:91:0b:f0:f4:08:94:66:69:02:0d:3a:
c9:7f:a1:5a:d0:76:64:51:6e:33:97:f7:64:84:65:
0a:4c:91:88:e8:cc:c6:f9:68:40:06:6f:00:38:94:
58:a3:59:52:03:df:9e:fe:02:72:72:0e:52:9c:db:
70:fa:dc:74:bc:ab:85:97:cb:85:59:e3:66:a1:ce:
6d:16:80:bd:a0:5e:c3:30:c3:b9:b0:55:31:01:c5:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:E4:1F:DD:95:EF:A0:2B:EF:E7:BF:F3:9C:1A:9B:52:53:8E:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEE33756994511F0BCA1C191DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:33:ef:ee:06:8b:74:1b:f7:16:ba:e6:5d:da:b3:ae:7d:7f:
e1:89:87:c9:ee:a8:79:a4:00:e9:c4:43:cb:ad:03:5d:f3:c6:
bb:6a:93:8d:ce:14:ba:d6:8d:0b:ce:f0:40:1a:39:60:76:75:
55:c1:21:55:fe:7b:7c:08:80:ba:7a:3b:1f:97:ad:4f:85:8f:
15:c0:d6:e4:41:69:d5:54:9f:b3:9d:94:02:62:50:d8:5c:28:
eb:9a:1a:bd:fb:59:98:f1:7c:db:e8:37:e6:8a:69:73:9a:42:
12:e9:4c:c2:8e:63:7d:c2:c9:99:61:f7:63:07:83:e2:6e:06:
3a:8b:c5:ce:d5:d3:bc:67:d8:d3:35:f6:39:f4:ad:c7:ba:81:
29:78:8f:51:c5:35:9c:b8:c6:78:df:1d:00:45:80:64:1f:98:
01:05:e6:91:f6:db:25:c0:de:ab:6c:6d:e8:e7:e6:a5:df:fc:
58:4a:c9:c6:68:10:ed:62:2e:66:de:36:63:8d:f2:38:b1:68:
c9:75:b0:ee:48:7a:a3:74:b9:9a:3c:18:6d:22:ce:4f:f0:d9:
72:9d:be:3d:9b:94:41:80:b8:c3:8f:c7:6b:34:fc:8e:a5:b6:
53:ad:c4:03:c1:f1:23:7d:97:46:ec:4a:94:92:f7:05:39:6c:
85:b4:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:16 2025 by rpki-client