Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE4E2C7CA28811F0808CC0A8DAE4EC9C.roa
File: BE4E2C7CA28811F0808CC0A8DAE4EC9C.roa (raw, json)
Hash identifier: rtGfrsl5MP+S3AntQT9WXVZcT4Nx6pALfQwMVLGzLtM=
Subject key identifier: 6C:69:91:1C:0E:26:D3:AE:56:1A:8D:F0:A2:53:2F:CA:28:28:B2:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE4E2C7CA28811F0808CC0A8DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:47:44 +0000
ROA not before: Mon 06 Oct 2025 07:47:38 +0000
ROA not after: Fri 07 Nov 2025 07:47:38 +0000
asID: 211188
IP address blocks: 45.198.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98016 (0x17ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 07:47:38 2025 GMT
Not After : Nov 7 07:47:38 2025 GMT
Subject: CN=68e37420-035a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:0e:fe:7b:b5:49:73:60:6d:87:98:bf:30:
e5:3f:22:8a:d3:e6:22:2b:77:82:05:2e:5d:05:c9:
fe:c7:72:f5:80:00:04:2c:3b:84:7e:c4:e7:ec:4e:
dc:47:4c:63:65:00:7e:8d:2d:48:cc:00:ba:ca:07:
78:9e:80:ee:e9:a4:fd:f6:7c:b4:42:17:da:81:d5:
2e:55:9c:34:ef:42:70:74:64:0f:f4:d2:3d:ab:13:
a8:52:0f:a0:36:d2:fe:cc:6d:12:b5:f2:f6:d4:e5:
c6:8b:d2:09:16:62:6e:ae:fc:73:8b:61:8b:e6:3a:
7d:30:a3:06:fe:94:f0:46:9a:a6:cd:ea:9c:76:9d:
56:63:10:da:d2:72:58:dd:c0:99:d9:ec:46:27:4d:
68:c5:36:32:82:c9:84:5e:18:8d:b1:58:0d:89:8e:
7b:74:35:f8:43:1a:42:09:d3:77:16:8b:4d:40:a8:
6e:84:20:b0:c5:eb:20:8d:3f:66:dc:76:62:20:37:
ce:45:0c:2a:9d:0d:ae:d4:d9:0a:e1:c7:b9:3c:e2:
16:f7:b4:dd:b0:de:a5:14:69:79:9f:57:a4:f9:c4:
b6:11:92:99:b3:40:7a:c0:00:35:38:7f:66:52:33:
81:4b:45:d7:1d:21:3f:4f:6a:23:1a:94:30:fc:76:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:91:1C:0E:26:D3:AE:56:1A:8D:F0:A2:53:2F:CA:28:28:B2:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE4E2C7CA28811F0808CC0A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.251.0/24
Signature Algorithm: sha256WithRSAEncryption
65:29:1c:78:d6:50:71:b4:8c:3d:b7:97:ed:78:e4:e4:01:ce:
cf:77:2e:a2:d0:35:53:df:45:22:12:7f:5a:48:1c:c4:19:a6:
38:30:f8:d8:c7:73:7a:36:59:6b:41:47:b9:fe:8d:52:17:88:
a8:cb:e9:01:01:f1:66:23:b0:6b:19:74:f1:87:f3:de:63:d0:
27:42:cc:3b:8f:34:08:e7:0c:ec:88:ce:03:23:26:27:72:0a:
cc:8c:77:78:5a:af:de:96:75:64:db:28:18:17:eb:b4:70:4e:
a4:4c:3e:12:6b:bc:8d:58:b6:ac:03:30:a4:2d:4f:65:07:2c:
f7:00:ec:bc:58:b6:4f:40:2e:64:a2:05:b8:8f:93:a7:0e:5d:
fe:64:90:43:0a:d1:e9:97:45:85:4d:f3:6a:4e:a8:4a:33:96:
3b:46:2a:cb:bf:8c:8e:6c:49:92:67:32:55:2b:98:19:1a:1d:
f6:b5:b6:cf:a5:ba:99:c2:b7:70:2b:67:77:33:8c:f9:0d:ea:
6c:41:bf:64:8a:15:a2:8b:f2:da:f7:64:d4:80:ff:ba:83:d7:
d5:f0:19:17:55:4a:a7:1f:20:cf:1f:7c:28:38:5f:ac:47:3a:
e6:f3:3d:cc:d2:6f:1b:10:c0:17:8f:a0:2e:96:26:f1:14:65:
76:34:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:10 2025 by rpki-client