Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE383AEE83B511F0A1EC2CEFDAE4EC9C.roa
File: BE383AEE83B511F0A1EC2CEFDAE4EC9C.roa (raw, json)
Hash identifier: cxeECSa9vAhD7G8l6DeNYUSDoaOTy3GDRkatcRMpwGo=
Subject key identifier: 09:A9:C6:23:91:49:37:20:B1:20:0A:32:4F:8A:3F:F6:6B:B8:C8:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017234
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE383AEE83B511F0A1EC2CEFDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 02:21:46 +0000
ROA not before: Thu 28 Aug 2025 02:21:39 +0000
ROA not after: Thu 11 Sep 2025 02:21:39 +0000
asID: 205054
IP address blocks: 45.194.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94772 (0x17234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 02:21:39 2025 GMT
Not After : Sep 11 02:21:39 2025 GMT
Subject: CN=68afbd39-75e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:ec:cf:1d:e9:b1:f4:6d:29:04:9c:03:54:
8c:7c:93:6d:60:2f:0d:b7:10:a9:ff:79:37:db:15:
82:ab:27:1d:db:80:a6:d6:49:3e:fd:43:28:9c:d6:
c3:4b:13:11:29:ca:a6:4b:96:72:ff:26:0c:35:83:
c4:a4:11:d6:0d:7f:62:6f:39:bb:ac:be:b5:d3:82:
3f:48:5a:c1:95:1b:15:eb:c2:23:c0:ab:b0:2e:d6:
73:6c:d6:5a:7e:b2:fb:a1:1f:b0:17:fc:36:d3:fe:
91:17:55:7c:f6:eb:38:81:f9:03:92:35:74:08:20:
5c:d3:56:8b:02:f9:90:a4:5a:c6:bd:2a:64:8a:0a:
f8:0a:4e:62:6b:41:83:28:11:c1:0e:00:27:37:85:
96:4d:7a:0b:3c:60:2d:11:7e:ca:1d:a3:48:5d:67:
69:f3:da:ec:09:48:60:6d:33:5c:c9:91:30:df:67:
8e:6e:99:95:82:da:46:d9:5a:aa:a6:13:c8:c6:62:
5c:2b:70:fa:9b:c5:35:78:13:1b:07:b4:ed:bf:fa:
5a:66:24:f4:ef:ea:b6:82:59:fd:f0:11:34:1a:39:
17:ab:9f:9a:c7:a2:fa:5a:a7:d0:f0:d5:2f:75:94:
e6:76:98:7a:d3:c7:4d:ef:e0:b5:9f:e8:36:83:23:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:C6:23:91:49:37:20:B1:20:0A:32:4F:8A:3F:F6:6B:B8:C8:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE383AEE83B511F0A1EC2CEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.67.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e2:a0:68:ec:4b:f7:a1:f8:57:27:35:39:76:f0:54:00:30:
da:2a:98:ce:35:cc:d4:1a:d9:ea:9a:2d:0e:1b:08:30:b0:e3:
22:2e:f0:6c:cc:dd:b4:3e:31:e5:98:99:da:f4:22:6d:ea:f8:
e3:47:ba:7a:28:da:d2:69:c8:82:43:8a:4b:32:aa:8e:de:06:
2f:33:88:ad:5e:13:c6:14:ca:0b:5b:87:f4:aa:ab:94:a7:f4:
fa:8a:59:fe:e4:18:c7:fa:ff:69:6b:de:06:57:6f:e3:8c:c2:
01:6b:4b:a0:d2:aa:93:d6:27:51:e6:94:a8:53:48:90:0d:1f:
32:dc:32:a7:84:6e:a3:40:6b:f5:28:d6:cd:b8:4e:b4:bd:15:
92:01:cc:1d:ad:4f:b8:44:0d:8d:4f:54:89:7d:3d:97:09:b8:
1d:4f:60:d6:d6:c4:e4:e5:ca:8a:9f:eb:9a:5a:0f:4d:6a:9a:
64:40:ca:fd:e1:1f:79:49:10:8c:ec:70:ab:91:13:c0:ce:85:
47:50:e1:24:22:f4:67:85:65:76:46:19:36:f4:90:b5:84:03:
27:af:7e:de:d6:b2:52:03:ad:85:9a:a6:2a:b4:bf:e7:6f:c7:
bf:cb:3d:30:30:ed:86:4d:86:e7:ef:10:e9:72:99:2a:af:e0:
2f:5b:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:00 2025 by rpki-client