Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD76D00B40411F0A8EA6CD2DAE4EC9C.roa
File: 6AD76D00B40411F0A8EA6CD2DAE4EC9C.roa (raw, json)
Hash identifier: 283BSn4oET6jnUhXlV474DLDppqeGkgjIhYtL8SvTqk=
Subject key identifier: A7:D1:A1:84:F2:BB:22:72:B4:60:59:1C:46:D4:4D:76:09:E7:3D:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018392
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD76D00B40411F0A8EA6CD2DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:45:52 +0000
ROA not before: Tue 28 Oct 2025 13:45:47 +0000
ROA not after: Fri 05 Dec 2025 13:45:47 +0000
asID: 401776
IP address blocks: 45.195.15.0/24 maxlen: 24
45.195.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99218 (0x18392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:45:47 2025 GMT
Not After : Dec 5 13:45:47 2025 GMT
Subject: CN=6900c910-7e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:e6:ce:4b:8e:db:ac:b2:f6:63:92:17:d3:
ee:d1:36:49:da:32:ae:e6:30:6a:7b:32:8e:f8:9c:
1e:f2:a2:2f:d9:55:5a:d6:a3:3a:3c:f6:6b:f9:73:
aa:9a:ea:48:88:f6:78:f1:9c:88:60:ae:50:1e:74:
a3:f8:15:a6:0d:6f:d1:4b:e3:a4:00:5d:fb:b3:06:
f7:aa:ca:db:f7:fd:ca:67:46:1d:75:58:14:f1:27:
71:ce:cf:d5:42:e7:48:bc:43:30:f2:21:64:e0:40:
73:4c:25:72:be:c8:4a:cc:22:c2:b4:ce:25:54:6c:
fd:7f:0b:92:9d:03:4c:79:0f:20:b6:7f:60:d0:59:
7b:25:0d:9e:d9:13:c8:82:27:64:7f:38:c6:9a:c6:
cb:35:4d:4e:2d:a4:a7:41:22:69:1a:f4:eb:25:5f:
15:bb:26:68:15:eb:de:72:71:e2:85:c9:8c:b9:39:
bf:41:0e:e0:51:98:5b:4f:18:98:cd:3a:1b:ae:e5:
14:0d:bd:15:ea:83:4f:da:ed:33:9c:b3:fd:9c:df:
d5:d6:22:34:9d:75:77:1d:e4:13:45:45:b9:ec:b0:
24:22:ea:53:38:ba:d6:28:f8:57:6f:36:a9:cb:e2:
3d:0b:93:b7:fd:a9:08:71:02:f3:d1:c3:d0:ab:53:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:A1:84:F2:BB:22:72:B4:60:59:1C:46:D4:4D:76:09:E7:3D:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD76D00B40411F0A8EA6CD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
45.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
31:37:30:38:d1:83:2b:e4:10:f6:39:d3:3e:0c:fc:7e:af:a9:
64:0a:15:6e:2f:4d:3b:0a:93:8a:18:29:a2:5e:f7:59:33:72:
57:4a:ce:0d:75:ea:84:39:30:07:bc:06:aa:d7:b4:13:c4:a1:
3e:27:8c:a1:c2:c8:5f:dd:77:6e:14:2c:28:c9:f5:40:73:ce:
3e:52:7b:b6:01:68:c1:2e:a7:6d:bf:e4:4d:73:6e:bb:1b:62:
26:46:de:d4:da:50:11:cf:62:12:d3:72:27:bb:8d:4c:16:df:
5a:cc:25:2d:37:fc:36:36:9a:7f:ee:3c:af:38:1d:a9:a3:c1:
bf:47:32:f9:dd:12:ec:20:b6:e0:a8:92:55:b0:0b:6e:ad:82:
da:c3:5c:d4:2e:8a:81:77:be:45:01:89:23:09:87:10:24:b7:
3b:e8:16:62:84:24:30:83:0e:3a:20:00:8d:40:92:cc:a8:d5:
40:65:76:2a:ac:a0:21:5c:dc:f2:4e:e0:51:89:e8:fb:dd:6e:
73:11:3a:5e:19:60:94:ea:e1:09:53:97:2a:a8:a6:ba:71:7b:
17:9b:b5:cd:90:87:55:2a:a6:c0:91:e4:10:ef:c6:3c:bd:f0:
d5:8d:52:b9:ca:93:c4:10:c1:ac:fb:e8:6b:1b:16:97:6c:c5:
29:18:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:12 2025 by rpki-client