Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3889E309AC911F0BB764DEBDAE4EC9C.roa
File: E3889E309AC911F0BB764DEBDAE4EC9C.roa (raw, json)
Hash identifier: gaR+1GCEppCZQuAaNVqBiJu9M6HDL8uCQG4UH2s9CHc=
Subject key identifier: 4E:71:0F:5A:B9:B3:F1:AA:B6:B5:F8:8B:64:E0:9E:6C:2E:C1:B6:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3889E309AC911F0BB764DEBDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 11:13:55 +0000
ROA not before: Fri 26 Sep 2025 11:13:50 +0000
ROA not after: Sun 09 Nov 2025 11:13:50 +0000
asID: 63139
IP address blocks: 45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
45.197.113.0/24 maxlen: 24
45.197.114.0/24 maxlen: 24
45.197.115.0/24 maxlen: 24
45.197.116.0/24 maxlen: 24
45.197.117.0/24 maxlen: 24
45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
45.197.123.0/24 maxlen: 24
45.197.124.0/24 maxlen: 24
45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97663 (0x17d7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 11:13:50 2025 GMT
Not After : Nov 9 11:13:50 2025 GMT
Subject: CN=68d67573-2815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:01:8d:58:50:be:a3:63:59:bd:e0:c2:5d:
2a:ed:fa:ef:67:6e:ba:b0:d3:76:25:06:c5:55:e3:
e8:de:48:48:56:5d:f9:bd:97:17:ea:1d:27:1d:04:
73:5a:7c:53:ec:14:93:a3:9f:cb:a5:39:8d:32:43:
b6:1e:54:6d:ea:13:e6:c3:81:8b:f2:3a:69:f1:86:
bd:a2:90:6e:08:79:4a:ef:39:26:fd:3e:66:f7:f5:
63:6a:52:4e:1e:a2:c8:51:14:c2:8e:b0:30:58:9b:
91:57:50:98:31:30:18:ae:f7:8e:a8:f6:3d:92:a7:
5f:88:01:9e:eb:12:45:50:de:f0:ba:31:e9:aa:ce:
96:44:52:46:ea:92:a9:a8:e5:ba:5f:e3:bc:9f:26:
98:e8:ee:9f:94:19:40:e9:df:49:a9:e5:91:da:00:
a9:32:f5:fa:f7:ab:13:c8:7a:22:7c:36:64:7b:eb:
5c:2e:31:a7:ec:64:40:40:0f:1d:00:e6:5f:31:1f:
5e:b3:1d:f1:ca:8a:b2:98:b7:db:ac:f4:bf:53:29:
ad:04:0d:4f:23:c6:9c:3f:b3:4b:9f:81:c7:e8:8a:
bb:49:83:e1:f5:d6:fe:2b:a1:d0:10:b9:de:19:3f:
72:54:35:20:79:de:a1:5c:b8:8d:05:2b:63:27:89:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:0F:5A:B9:B3:F1:AA:B6:B5:F8:8B:64:E0:9E:6C:2E:C1:B6:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3889E309AC911F0BB764DEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.98.0-45.197.102.255
45.197.113.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
47:a5:df:15:a4:a1:7f:62:64:25:66:e6:3e:11:21:97:ab:5a:
08:c6:d9:75:c4:cd:c3:79:a3:e5:0e:34:25:b2:6c:ee:c2:a8:
4f:6b:b0:32:18:84:87:46:32:57:cb:11:33:b5:00:2c:78:f1:
27:a7:82:e6:b8:15:97:6a:4a:ea:9e:da:b5:cf:c7:fc:0e:8f:
45:17:4d:f4:34:6a:92:17:7a:50:98:9d:9c:6f:5b:d5:02:cc:
34:f7:5e:65:34:30:ed:56:6c:48:7d:20:7e:22:a2:c8:8e:b0:
54:c9:ec:bd:5c:ab:cd:76:b9:c9:1e:ec:72:fa:8b:b9:c1:f0:
f7:02:a3:f4:f1:6a:dc:da:ad:46:7f:87:b4:72:33:de:0b:25:
34:02:b4:82:ce:3f:e3:03:75:1e:33:cd:dc:2f:c8:69:62:4d:
20:83:75:7d:18:2c:68:5f:1c:b7:9c:65:6c:79:e5:fc:03:81:
ab:b0:84:5b:c8:c4:44:8b:17:2d:3a:a3:3d:c7:6d:31:77:64:
62:7d:49:a5:c2:b0:53:ce:72:52:dd:29:1c:8a:35:3b:2e:72:
ed:06:a2:bd:e0:37:00:a0:e2:ef:0b:0f:f5:1c:7d:d3:06:f1:
a1:aa:e5:4e:72:e4:cc:87:86:98:bc:f7:c5:59:8b:c7:3b:8d:
f4:34:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:19 2025 by rpki-client