Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5EF1666A03211F0857EE27BDAE4EC9C.roa
File: B5EF1666A03211F0857EE27BDAE4EC9C.roa (raw, json)
Hash identifier: pm8lFVYcqcld06cnz19T7Pw3skMnBlbiagcDMUG06SU=
Subject key identifier: FC:B4:CC:3E:E0:F3:43:C5:9B:70:40:7E:A9:23:94:45:B2:CF:70:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5EF1666A03211F0857EE27BDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 08:26:51 +0000
ROA not before: Fri 03 Oct 2025 08:26:44 +0000
ROA not after: Wed 12 Nov 2025 08:26:44 +0000
asID: 27951
IP address blocks: 45.195.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 Oct 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97965 (0x17ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 3 08:26:44 2025 GMT
Not After : Nov 12 08:26:44 2025 GMT
Subject: CN=68df88cb-cda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:19:7b:ab:f5:38:5d:b3:ec:c2:c8:a6:1b:
1c:71:27:c3:8d:e3:aa:72:3a:32:22:e5:11:33:22:
26:f5:89:96:9b:67:e6:37:3e:2a:bb:8f:9d:51:91:
2b:aa:73:b2:17:7e:47:44:fc:71:c9:e7:f9:ba:21:
f8:08:d2:3f:8e:a0:4f:3e:59:af:12:43:2c:15:1d:
2b:c4:65:74:ce:fc:b7:26:de:4d:5d:d7:34:8e:ad:
ce:bc:3e:29:a7:21:dc:f1:45:b2:0c:e3:f9:92:a1:
71:12:2f:6d:0d:1b:2a:32:5a:34:16:75:bf:d9:d6:
52:71:3f:f9:cc:14:c1:c3:40:90:1f:25:f0:c9:18:
a0:78:7f:d6:70:2c:54:29:ef:ba:98:37:58:b5:29:
f3:e6:14:e9:63:38:c8:4d:7b:0a:5e:1a:e5:f4:46:
69:18:a4:c1:6d:97:b0:59:14:7c:42:4b:22:92:7d:
0f:da:fe:77:fb:be:d5:c8:37:d2:bb:8c:41:5b:e2:
aa:12:6f:47:71:86:03:c6:c1:6f:33:ed:f7:4b:e2:
87:cf:90:19:51:82:ed:bb:97:d3:fc:21:a1:58:08:
41:90:8d:41:9f:be:ac:a9:35:ba:f6:e4:9a:41:b0:
b8:46:b8:e2:0f:1b:7e:7c:72:95:88:15:82:ee:44:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B4:CC:3E:E0:F3:43:C5:9B:70:40:7E:A9:23:94:45:B2:CF:70:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5EF1666A03211F0857EE27BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.68.0/24
Signature Algorithm: sha256WithRSAEncryption
83:54:75:e4:b9:ce:39:0f:75:06:ce:f8:94:80:d6:28:24:17:
7f:8f:d1:66:d2:95:76:50:56:46:1c:3d:5d:0c:54:7d:d6:a7:
18:c2:e5:2c:82:c2:4c:c8:c9:6e:a5:2e:f0:2d:3b:04:ac:ba:
d8:6c:9c:09:06:cb:bf:aa:ad:52:16:cf:d9:7e:d4:e0:b0:db:
f9:fe:d6:d5:8d:19:1c:52:73:8a:11:0f:b0:e3:ff:98:83:c0:
d9:1f:e5:ea:63:c1:f0:91:f5:42:77:be:9f:9f:0d:be:c8:c1:
2e:ad:e5:88:9e:4c:f8:d5:19:41:3b:20:b1:74:ed:55:a0:f1:
5a:43:5d:70:d4:62:dc:c5:85:43:22:7c:2f:84:53:54:c6:a0:
ce:53:b1:14:d7:0a:70:46:7f:e0:bf:ae:94:43:30:13:0a:1c:
42:4a:b5:db:ee:80:e3:99:72:c8:8f:88:8e:83:45:1e:64:36:
f0:ef:90:fa:b4:d2:83:c5:a0:a8:1e:28:b8:e5:02:37:53:6d:
16:10:f8:3f:ef:fa:01:2c:b7:01:84:29:80:d5:3f:25:af:0d:
2c:83:bb:21:2c:f8:15:62:4d:86:e4:41:09:da:9d:02:a1:1a:
07:62:28:0a:31:48:41:0a:e3:17:15:c6:3d:cd:84:9c:05:71:
5f:58:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 12:32:15 2025 by rpki-client