Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E1CADBCB57311F0BAFC3BD2DAE4EC9C.roa
File: 5E1CADBCB57311F0BAFC3BD2DAE4EC9C.roa (raw, json)
Hash identifier: fHeGDhaKGRlinYjVG6Z02SF4DRGbUGQy3Jh+JwK8YWc=
Subject key identifier: 8D:01:04:FD:15:45:4E:34:FB:5B:9D:35:E0:3F:AD:8D:75:B7:4C:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018405
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E1CADBCB57311F0BAFC3BD2DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 09:32:36 +0000
ROA not before: Thu 30 Oct 2025 09:32:28 +0000
ROA not after: Fri 05 Dec 2025 09:32:28 +0000
asID: 33182
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99333 (0x18405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 09:32:28 2025 GMT
Not After : Dec 5 09:32:28 2025 GMT
Subject: CN=690330b3-5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:50:40:2e:6b:03:ab:7e:26:12:5c:8b:3a:
7b:ec:0b:44:6b:3b:c9:1c:6a:06:a7:10:ff:a4:ea:
97:48:9c:33:54:1d:cc:04:ff:91:86:c5:b8:71:17:
24:71:92:70:b4:a8:f6:ab:fd:d0:70:58:c7:74:ab:
38:10:42:97:eb:27:e2:07:9a:9a:ea:da:9c:35:db:
c7:93:28:7f:db:46:f5:d3:70:09:e6:56:7e:5f:b4:
5a:7a:c3:6e:65:54:5f:30:72:e9:bb:4c:f1:02:69:
94:c0:a3:87:c5:6a:03:81:4f:c4:8e:01:d1:7d:77:
00:a6:77:e1:90:3f:ba:b8:e9:44:90:d9:5e:60:8d:
93:44:72:0c:7e:6a:2e:bd:b8:ed:98:45:9b:87:d5:
cd:2a:87:54:ab:b8:2a:44:3c:0e:95:12:e2:bb:47:
31:ec:e0:ca:e7:aa:b2:56:f3:2e:54:31:ec:d5:76:
80:a6:c3:53:97:11:9b:7f:99:ae:c3:7b:45:cd:29:
65:49:a1:36:78:72:30:d9:40:36:40:f0:52:42:ff:
6c:c0:9c:4b:da:0b:b0:59:0f:da:af:b4:e7:fe:38:
56:13:1b:ea:bc:ae:6c:4b:41:35:d4:60:f2:56:87:
42:e4:60:c0:8e:45:c4:6d:06:eb:a1:00:50:ee:9d:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:01:04:FD:15:45:4E:34:FB:5B:9D:35:E0:3F:AD:8D:75:B7:4C:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E1CADBCB57311F0BAFC3BD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:98:85:13:6b:e9:14:f5:33:0e:50:5a:72:c8:30:58:72:6e:
1b:2e:e5:d1:13:28:1a:72:cf:23:d7:cf:04:f0:af:a0:8f:7c:
b0:9e:9f:30:0b:9b:51:12:55:97:06:73:87:ac:b1:e9:d3:aa:
ce:14:d4:8f:b8:ff:70:c7:0c:5b:e5:84:9a:c9:41:de:ce:aa:
46:6b:16:df:73:a0:ae:cb:c3:9c:36:43:83:99:cf:61:0d:30:
81:d6:7b:b6:3e:33:df:3c:73:de:d9:1c:da:18:c6:a3:f2:3b:
c6:f8:b0:23:13:59:45:38:e1:a3:5b:3f:b9:14:ca:dd:01:52:
01:e1:ed:8d:ab:b8:59:d8:e7:46:6f:5f:12:c9:81:4c:2c:64:
51:be:04:2a:81:62:ce:54:19:65:4a:e8:2e:f3:90:e4:f6:1e:
9a:f5:28:78:58:81:38:4c:1b:27:02:b3:f8:2a:92:8d:77:4b:
7f:eb:c1:9d:20:7f:b1:05:1d:3f:2a:fa:f0:10:51:76:2c:3b:
10:9e:e0:5c:ab:04:56:ce:c1:97:c3:2b:b3:55:b9:07:27:92:
30:da:59:92:1f:f3:cf:22:26:6c:7a:8d:39:ee:8b:ee:4b:da:
51:51:9b:ad:80:a1:74:95:89:bf:b7:bf:f8:d8:8f:d6:55:81:
88:68:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:53 2025 by rpki-client