Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB4CC95A920911F09C5F98C8DAE4EC9C.roa
File: BB4CC95A920911F09C5F98C8DAE4EC9C.roa (raw, json)
Hash identifier: /MgqzEWpmdvCwL7nGQGgbxGzXRs+Z1Yz1yK4Ukt+sEI=
Subject key identifier: 51:BC:3D:88:81:28:B7:5E:67:1C:92:E0:C9:6D:21:1E:BB:3C:B4:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB4CC95A920911F09C5F98C8DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 07:58:15 +0000
ROA not before: Mon 15 Sep 2025 07:58:09 +0000
ROA not after: Mon 20 Oct 2025 07:58:09 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97069 (0x17b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 07:58:09 2025 GMT
Not After : Oct 20 07:58:09 2025 GMT
Subject: CN=68c7c716-44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:d2:28:03:41:cb:c2:25:5a:f7:7d:b0:32:
35:bc:43:ac:f9:3b:8f:91:e7:34:5d:9f:d6:51:e5:
1c:82:39:2b:6b:da:58:c9:ae:6e:b8:d6:ef:49:48:
24:d7:a2:e1:2a:5b:fe:b3:63:b3:b3:c8:e0:52:16:
d1:96:66:04:71:0e:05:46:e2:44:07:e7:c5:3d:70:
e2:7d:73:99:92:43:3b:81:57:bb:eb:b6:25:49:19:
90:c7:19:f7:fd:51:25:5e:4f:36:51:45:8d:3c:05:
7a:1c:59:00:23:64:4d:35:ac:12:51:67:ef:fb:6f:
3c:61:d8:64:30:d2:99:89:62:e2:89:78:ee:6f:36:
f2:0e:1c:8e:6f:fa:56:ef:30:67:8e:ca:3c:16:44:
3a:39:ce:2f:b9:56:2d:e0:7e:52:c3:43:0b:42:65:
ec:1e:38:a7:1a:96:2c:84:84:04:d4:d9:63:cc:94:
f9:83:49:32:07:4f:7d:b2:23:95:f3:76:4a:6a:5a:
33:f0:a9:5e:fd:de:ff:ef:58:9e:8f:9a:48:7f:50:
20:59:f7:9b:cd:f7:30:c4:21:aa:34:05:fe:ff:69:
01:07:cb:96:1b:1c:be:f0:40:68:bc:6d:bc:f2:eb:
99:29:7d:97:fc:70:24:cc:1a:6f:00:c3:cb:35:5e:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:3D:88:81:28:B7:5E:67:1C:92:E0:C9:6D:21:1E:BB:3C:B4:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB4CC95A920911F09C5F98C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
73:31:68:a0:31:78:30:91:41:a5:11:4c:a1:7b:7e:c8:bc:3f:
4e:2c:67:86:03:bc:09:dc:bf:4b:e8:fd:cb:31:18:ae:93:31:
28:97:7c:bd:ae:e8:94:24:8c:a9:74:78:34:ee:08:ca:f6:71:
01:13:bc:fe:2e:8d:3e:7b:f8:af:14:e1:3a:f3:25:bd:4b:ef:
9e:5e:54:6b:6c:b9:68:ff:f7:92:a4:54:22:0d:33:c0:e7:a4:
e5:fe:78:ed:3e:8e:b2:f9:09:40:c1:6f:cb:6e:f2:14:74:05:
6a:81:39:fc:45:aa:a9:43:e2:af:12:4e:98:68:93:1c:de:d2:
f5:c4:f7:54:8b:5a:aa:4a:05:c1:9f:5b:60:4d:b3:52:b6:3f:
4e:17:eb:d6:f0:c3:07:f7:4b:00:e6:f3:fd:6b:86:1c:2e:ea:
09:15:4c:b2:d3:5f:1a:db:7b:ff:98:56:1e:b4:0a:8d:89:2a:
c2:dc:a8:67:ef:83:7d:49:20:d5:19:02:b3:f4:c9:60:9f:07:
60:7a:21:86:56:75:b2:32:f2:80:d7:ab:34:1b:57:50:d0:5a:
0e:0e:38:7f:1d:6a:fb:6c:c1:9a:59:a6:80:68:77:e4:25:2b:
4b:5c:de:05:8e:db:e3:55:4f:47:3a:bc:62:07:c0:59:39:27:
5b:f1:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:55:43 2025 by rpki-client