Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AECE46AB89511F08B7EA088DAE4EC9C.roa
File: 1AECE46AB89511F08B7EA088DAE4EC9C.roa (raw, json)
Hash identifier: 4XoY72mPQxwMzpnbjHyJN/1ZFGgC1SRVi7xRllIrs40=
Subject key identifier: 47:F8:6C:AA:B7:AF:C1:7A:43:CF:98:B1:33:24:5B:46:3B:22:A6:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018479
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AECE46AB89511F08B7EA088DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 09:11:39 +0000
ROA not before: Mon 03 Nov 2025 09:11:34 +0000
ROA not after: Mon 08 Dec 2025 09:11:34 +0000
asID: 44559
IP address blocks: 45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99449 (0x18479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 09:11:34 2025 GMT
Not After : Dec 8 09:11:34 2025 GMT
Subject: CN=690871cb-916e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:b2:4c:4a:3b:03:9f:43:31:46:f1:59:e6:
ca:32:ce:62:ef:7c:b0:a3:b4:e0:36:72:9e:24:8c:
6c:92:94:b5:b1:c8:73:69:5c:30:fc:c2:40:9b:ff:
c4:8d:51:c3:20:d1:b7:b1:a8:ff:c6:04:a7:f3:70:
8e:c3:78:8e:9f:65:3e:d1:8c:cd:65:35:f4:49:04:
01:4b:6f:30:88:75:a8:ea:89:4d:22:40:99:99:7f:
04:e0:df:3d:86:9f:dd:a5:0f:15:9e:c8:44:44:f2:
4a:60:5e:d9:f8:a4:3b:96:88:f8:ac:17:fe:26:1e:
a9:28:95:3f:dd:2c:59:45:98:d9:42:70:20:44:c5:
dc:24:f2:09:25:49:13:4b:a8:a5:b1:7a:0e:46:37:
fb:a5:a6:ae:69:03:2a:6e:7c:8c:60:ae:02:6a:07:
b1:38:a7:83:11:5f:b4:b9:88:14:07:d3:30:0b:69:
5c:31:95:a7:d3:fc:b3:85:47:11:d2:b1:07:97:0b:
c0:c7:0e:c5:66:a7:e4:ac:6c:af:7b:be:89:91:be:
4a:09:39:7c:54:34:06:ea:c5:34:75:ad:72:76:f4:
17:58:58:5e:41:a2:5b:58:3a:a3:15:e9:f1:78:ff:
bf:c5:fb:08:33:51:a9:69:f2:9e:56:59:f4:b2:67:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F8:6C:AA:B7:AF:C1:7A:43:CF:98:B1:33:24:5B:46:3B:22:A6:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AECE46AB89511F08B7EA088DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.6.0/24
45.207.148.0/22
45.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:1c:4b:51:34:bb:56:d4:19:fb:17:a3:a1:30:6b:38:f1:d6:
54:b6:ce:eb:4e:5c:86:0e:ef:46:aa:2f:b8:23:51:35:bf:f4:
6a:da:d2:76:8a:45:a2:e8:17:86:c5:a0:b4:21:0d:98:ef:1d:
5c:a5:c1:d2:0f:d6:a6:95:34:b1:54:ec:fb:d4:15:12:42:09:
db:90:53:c3:0b:93:33:12:19:27:a0:79:f7:f1:8e:16:81:03:
b9:8d:85:73:3c:bd:65:40:0a:b2:f3:5e:65:87:c4:d7:19:4e:
f9:1c:6c:2f:11:78:54:66:e5:1e:af:23:b9:5b:ce:c2:78:58:
ba:64:a8:4f:46:54:14:b3:f8:b6:bb:d5:f7:99:c8:04:2d:fe:
11:3b:6a:82:bb:65:8d:dd:b2:41:e4:b6:48:55:4a:3c:a1:e3:
2a:36:f4:f2:9e:b1:67:c0:05:02:2d:36:ab:c7:ec:92:5a:d1:
7a:7d:52:56:2e:bc:00:ef:59:04:86:79:85:38:80:89:1c:f1:
a5:46:12:cc:4a:81:54:b3:22:60:37:6a:69:70:81:79:9b:85:
cb:d1:16:02:f7:c8:24:3e:4b:6a:44:93:05:16:4a:04:48:33:
f2:25:4d:c6:2d:cf:e5:99:2e:29:85:a7:dd:3f:a9:9c:08:e9:
37:ae:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:50:00 2025 by rpki-client