Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5933F49CB57B11F095ABDE82DAE4EC9C.roa
File: 5933F49CB57B11F095ABDE82DAE4EC9C.roa (raw, json)
Hash identifier: hDTtMX4HB8b5A0Jp/dLWTt8iO1YdblORDuc2xkfivYo=
Subject key identifier: 6C:0C:6F:F8:73:B4:88:73:4B:04:F1:88:54:10:D7:76:4F:77:96:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01840F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5933F49CB57B11F095ABDE82DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 10:29:43 +0000
ROA not before: Thu 30 Oct 2025 10:29:39 +0000
ROA not after: Sat 06 Dec 2025 10:29:39 +0000
asID: 20326
IP address blocks: 45.207.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99343 (0x1840f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 10:29:39 2025 GMT
Not After : Dec 6 10:29:39 2025 GMT
Subject: CN=69033e17-1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:cf:bf:74:5d:1f:42:71:d1:26:f8:c0:57:
5e:5c:a6:25:45:c4:1a:7f:ef:6d:d9:d5:ef:7b:94:
6b:97:1d:a6:e8:0e:1c:2a:42:fa:92:56:80:1b:3c:
a5:b2:72:83:38:5f:46:a0:4d:32:21:99:c8:bb:51:
76:21:16:d5:02:92:2d:be:19:7b:d8:0f:ea:71:ec:
7a:95:5e:f5:a9:e1:af:7d:dd:0f:78:30:10:71:bf:
ed:8c:93:e8:e9:b0:30:33:ab:72:6e:21:ac:c4:53:
76:83:98:ad:0c:ec:cc:72:d4:e6:75:39:ed:0b:04:
9f:f5:43:58:1e:d4:d0:8c:f7:7e:61:2e:da:cb:96:
ca:80:c9:eb:d8:27:bc:13:f5:e8:98:38:3e:a2:b6:
ed:2d:fd:9d:b4:e2:37:d1:86:3e:a6:32:b8:2b:2c:
87:55:5b:e8:04:d2:4f:0b:39:86:94:f3:25:cc:6e:
c7:e8:dc:69:00:aa:3c:e4:48:12:41:88:4c:74:db:
03:1c:1d:05:77:5a:aa:45:58:28:1c:05:ae:81:6c:
91:47:17:d2:77:6a:15:72:cf:5b:50:8b:81:70:d3:
b6:70:e8:ce:1a:4a:59:b2:07:1f:35:52:0e:ff:59:
fa:05:11:48:bf:f6:9b:28:05:1f:1d:81:67:86:c0:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0C:6F:F8:73:B4:88:73:4B:04:F1:88:54:10:D7:76:4F:77:96:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5933F49CB57B11F095ABDE82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.174.0/23
Signature Algorithm: sha256WithRSAEncryption
14:6b:a3:68:40:28:99:74:a4:1f:e6:af:b2:60:81:d8:66:b9:
e0:95:50:8d:3e:b5:39:5a:0d:bc:3a:be:39:9a:2f:f0:66:97:
d1:81:9f:85:29:9a:00:db:ce:9d:e7:88:99:6e:4c:3f:30:be:
e9:03:3d:cc:4c:9e:63:66:3e:24:c0:f3:67:6d:d8:c4:7b:75:
31:69:3a:e7:49:ec:91:fb:15:b6:98:b1:69:a3:df:15:f5:a8:
bc:c2:58:b0:77:ad:33:c9:e4:e8:19:b9:58:9b:ac:59:a5:e5:
92:98:fe:12:e4:38:c3:f6:d3:e1:b5:d7:95:58:98:40:39:96:
89:f1:e6:44:0d:99:ff:fc:25:3b:34:d9:f2:6a:08:13:c7:c9:
6d:1a:df:b8:e5:8e:9f:25:f9:6f:1b:d7:19:37:2c:9f:3c:0f:
f3:ce:8d:42:14:b1:d5:d3:3f:fe:a7:b7:c6:86:3b:dc:31:ba:
7f:ce:66:96:eb:8d:b4:9c:b0:3c:93:ae:83:78:c2:44:01:d7:
f7:81:f2:f3:70:5c:ad:99:0d:5e:78:b1:7c:31:4a:39:20:af:
2b:c0:16:2e:50:03:ef:8e:51:fb:13:63:d8:65:24:e8:ea:b5:
81:81:98:fa:1d:75:44:37:f1:fb:2e:d2:95:8d:17:fb:9b:4a:
61:e5:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:12 2025 by rpki-client