Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF57BEEE954211F0ADB76AA0DAE4EC9C.roa
File: EF57BEEE954211F0ADB76AA0DAE4EC9C.roa (raw, json)
Hash identifier: IBPt4c9C8Yc4BUWjHH7aKg2Ajp4NbYuIfnV7HWD0T4A=
Subject key identifier: B4:05:74:00:29:2D:4C:8F:3C:A4:27:83:87:BE:A1:51:16:26:23:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF57BEEE954211F0ADB76AA0DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 10:25:17 +0000
ROA not before: Fri 19 Sep 2025 10:25:10 +0000
ROA not after: Tue 06 Oct 2026 10:25:10 +0000
asID: 393294
IP address blocks: 45.199.169.0/24 maxlen: 24
45.199.170.0/24 maxlen: 24
45.199.171.0/24 maxlen: 24
45.199.172.0/24 maxlen: 24
45.199.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97399 (0x17c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 10:25:10 2025 GMT
Not After : Oct 6 10:25:10 2026 GMT
Subject: CN=68cd2f8d-1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:d4:74:f8:50:9d:7b:22:c9:04:fb:3f:4c:
9b:7c:4d:04:58:ad:4c:7a:e6:22:58:e9:d0:90:e0:
51:f5:36:14:8c:40:f7:12:1b:9c:a5:3f:70:e3:e0:
ff:9f:b4:b1:2b:72:b6:54:8d:ee:96:c7:98:78:57:
58:d0:ee:f4:bb:b7:09:99:e4:72:37:15:6b:14:45:
fc:3a:e0:17:c2:e3:f9:5a:1c:fd:ea:d1:a4:97:db:
82:08:2e:d5:3c:5c:a6:b7:87:09:11:8d:a0:4f:08:
03:45:24:fc:45:41:1b:52:5b:ba:2d:cf:43:e5:a0:
98:85:f0:65:db:9b:b1:57:29:6a:ea:ed:00:58:3d:
21:96:ea:e2:9d:a2:48:0b:db:2a:0c:54:80:de:02:
68:e1:90:72:4d:da:01:6f:73:28:25:73:5d:61:ab:
c1:0e:94:34:0e:e2:89:78:60:7c:cb:67:13:0a:f8:
3e:16:d5:37:1c:11:49:87:ab:63:1b:03:57:8d:0f:
02:70:b5:9f:5a:6e:57:f9:95:43:5e:68:ed:a4:34:
5a:16:42:89:d8:1f:67:a7:ca:01:cb:c1:a5:46:61:
49:da:f7:ca:ad:d9:ea:66:35:bd:42:be:4e:48:89:
a3:ee:41:ae:59:ff:77:11:c3:e4:00:a1:d5:3e:2e:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:74:00:29:2D:4C:8F:3C:A4:27:83:87:BE:A1:51:16:26:23:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF57BEEE954211F0ADB76AA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.169.0-45.199.173.255
Signature Algorithm: sha256WithRSAEncryption
88:d8:83:2e:c1:85:d6:e3:bd:76:03:e9:a6:1c:7b:6e:60:ab:
98:8d:d1:42:6c:26:46:3d:c3:c5:c4:25:67:59:78:0e:ae:a8:
3f:cd:44:fe:d5:be:76:6f:4a:ff:5c:61:c8:d1:f4:24:83:de:
cc:78:60:80:d7:65:f4:e0:a9:09:84:ec:d9:c5:22:86:49:08:
ba:16:f4:54:0b:9e:5c:28:ae:1d:8c:80:ba:33:73:c7:b9:9d:
1e:05:50:31:e0:84:9e:2f:92:d6:67:8d:6c:c1:65:8f:4a:d4:
95:d9:50:37:fd:cb:bb:78:d1:d2:38:b0:a9:d7:12:11:59:cb:
74:13:f1:22:12:e9:d7:0f:6b:97:c0:bd:b0:cb:f2:0f:0a:90:
9e:88:1f:dd:01:c2:ac:c2:9c:26:32:01:a4:0e:84:e8:da:33:
55:a6:08:c8:78:3d:0f:54:a6:6f:b8:95:05:78:1e:9c:8d:66:
99:08:3b:d3:af:25:f6:4d:15:4d:2a:02:50:82:fd:33:02:2b:
1b:05:be:31:07:de:b7:9b:a9:a7:79:bf:68:24:03:91:0f:46:
57:f5:51:4b:a9:da:47:81:58:4b:e2:1a:4b:bf:bb:85:a0:85:
d4:57:56:7b:dd:32:15:1a:42:29:48:6c:eb:9f:99:e4:88:78:
6e:d1:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:44 2025 by rpki-client