Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA195974A28D11F09EE44AC8DAE4EC9C.roa
File: BA195974A28D11F09EE44AC8DAE4EC9C.roa (raw, json)
Hash identifier: TtlRmSyaNvntqKKtG7QaVg+px/KZj8KK5ucX4CGT41Y=
Subject key identifier: 58:65:F0:7A:A9:8F:68:23:8C:5D:1D:DE:87:8A:9C:EA:2E:90:C5:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA195974A28D11F09EE44AC8DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:23:25 +0000
ROA not before: Mon 06 Oct 2025 08:23:20 +0000
ROA not after: Mon 10 Nov 2025 08:23:20 +0000
asID: 20473
IP address blocks: 45.196.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98030 (0x17eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:23:20 2025 GMT
Not After : Nov 10 08:23:20 2025 GMT
Subject: CN=68e37c7d-33a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:92:5f:f0:87:3f:7e:d8:bb:07:66:2e:88:
e3:84:2c:41:a6:a3:8b:35:cc:66:1e:a0:79:00:c7:
07:2d:5b:1e:7b:74:e3:76:0c:73:09:3e:20:24:9d:
02:ac:00:2a:2b:93:d4:72:04:4f:9d:a6:41:55:83:
0a:2d:58:c8:5c:71:9c:f5:06:33:18:b7:af:43:3f:
57:6c:5a:3d:5a:a9:48:93:01:86:e8:a5:a7:b2:3f:
49:c8:17:74:28:98:e2:ce:57:85:82:dc:d6:25:e1:
ba:12:2c:84:ad:ec:24:87:3d:a7:76:a6:80:6e:d4:
62:7e:aa:e5:b4:7e:11:6e:95:95:fd:33:34:49:87:
cb:81:43:8b:ce:6e:cc:9e:bd:37:96:d6:ad:24:4a:
9a:32:67:75:dd:04:21:61:db:ab:10:5e:8e:78:fc:
e5:fc:21:1e:c9:48:06:10:f4:1b:6f:74:ee:13:75:
d0:ea:f3:f1:eb:58:36:27:63:82:89:36:b2:de:bc:
0a:dc:ad:71:d2:3f:4d:b5:21:00:6e:ae:f9:e3:98:
f3:30:db:1a:0f:1b:28:da:e6:e7:4a:a0:09:45:ea:
d6:b0:4d:9a:5f:cc:90:7f:03:85:da:c8:fb:ee:01:
7e:b2:13:13:eb:9b:ff:83:7e:0a:ab:f1:56:bf:58:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:F0:7A:A9:8F:68:23:8C:5D:1D:DE:87:8A:9C:EA:2E:90:C5:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA195974A28D11F09EE44AC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.200.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b4:67:20:ee:9e:c3:82:c6:ef:c7:75:a5:12:79:bc:d0:25:
40:7f:ea:89:1f:16:4e:91:f8:15:86:e5:33:90:1c:75:1a:ee:
9f:01:4c:58:8b:ae:09:01:2b:0b:01:83:e7:3c:e2:c2:e8:74:
bf:34:fd:12:d1:79:1c:e7:7e:be:cf:99:88:3b:4c:bf:62:8c:
c1:1f:d5:11:cb:77:4e:22:eb:cf:c5:d6:91:45:2e:f3:e3:8f:
e8:be:20:30:61:7a:fb:3c:9a:7f:51:7c:a7:f6:53:70:d4:cc:
bf:b1:36:df:b8:74:53:8b:72:2c:1f:ff:ae:8c:9d:b0:ca:5c:
81:16:0a:b3:58:ce:ff:9b:f5:61:0e:27:93:cf:2a:cc:88:a2:
f1:16:e2:e0:44:78:06:d2:c1:2f:71:10:48:19:0a:ce:e1:d7:
21:4f:be:48:4d:4d:18:d7:d7:8b:27:74:cb:5b:3c:a2:be:90:
eb:ce:d2:89:c7:ea:a1:fe:0f:62:45:5b:b6:ef:52:74:d6:17:
64:df:f2:0e:f8:4d:e0:95:6e:99:42:f2:a0:5b:90:92:73:30:
21:3a:a1:9e:36:27:f4:14:64:27:8c:c6:e0:f7:1c:27:f9:e6:
a3:03:db:53:3b:e3:d4:c7:31:0f:71:76:b2:01:6f:22:e7:00:
d3:cc:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:47 2025 by rpki-client