Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCD7D02AD9D11F0B05A33B1DAE4EC9C.roa
File: ACCD7D02AD9D11F0B05A33B1DAE4EC9C.roa (raw, json)
Hash identifier: 6bvXiMUEwE/PF6dW4cfxc+RE2k08wB2SPbydnplqZIs=
Subject key identifier: DB:FA:BD:19:F4:C3:32:F7:E5:B8:A9:35:3F:01:1A:C2:BB:5F:DC:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCD7D02AD9D11F0B05A33B1DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 10:15:17 +0000
ROA not before: Mon 20 Oct 2025 10:15:12 +0000
ROA not after: Mon 24 Nov 2025 10:15:12 +0000
asID: 984
IP address blocks: 45.195.129.0/24 maxlen: 24
45.195.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98735 (0x181af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 10:15:12 2025 GMT
Not After : Nov 24 10:15:12 2025 GMT
Subject: CN=68f60bb5-b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:29:f2:35:8f:52:3f:8d:46:a8:fa:23:a2:
f4:27:6d:18:04:2b:e4:ef:17:ca:c2:40:dc:62:39:
48:82:ac:5e:6c:f3:02:cb:ed:87:37:4e:39:8d:a8:
9a:5d:7d:f8:55:e8:14:0b:e4:4d:ac:fb:5e:d6:0c:
0e:b6:6a:1c:cb:52:e3:84:bb:fc:8d:06:3f:3e:fc:
60:10:6d:cd:d4:13:58:5b:f5:36:bf:bb:2d:b7:99:
d7:e6:c5:92:12:e2:36:66:3c:95:25:67:e5:66:b0:
07:20:9c:43:e3:f8:b7:b2:15:1c:54:fd:f6:f3:fe:
f7:e5:66:36:d9:d9:ac:54:b8:ef:5c:52:08:1a:4f:
d9:1a:07:a8:b5:b3:d1:4e:ac:b7:d3:10:6e:bf:07:
ed:ef:2f:bc:79:cf:f2:4d:6a:2a:97:ca:dc:98:cb:
0c:ec:58:ac:dc:7c:61:4a:24:d3:b7:6b:ea:28:86:
90:87:ad:c6:19:88:8f:4e:e1:5d:f9:63:8f:5e:6e:
3c:7f:a8:7b:8b:3b:91:df:04:16:51:9d:93:b8:b7:
0a:6c:82:42:ab:e2:27:ba:63:78:1f:07:0d:53:3f:
cd:e1:39:e5:c8:4a:34:59:86:3d:49:8b:2d:77:1a:
ea:59:38:5f:b6:09:1d:04:f8:94:6f:9e:10:85:07:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FA:BD:19:F4:C3:32:F7:E5:B8:A9:35:3F:01:1A:C2:BB:5F:DC:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACCD7D02AD9D11F0B05A33B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.129.0/24
45.195.249.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a1:c9:a6:24:5c:f7:e8:f7:a4:7b:f3:67:75:74:35:f5:e9:
98:72:fd:b9:4e:7f:b7:12:a7:de:0d:bd:30:17:f4:1e:bf:49:
23:55:b1:83:23:23:46:7e:11:de:b3:c6:80:db:af:b5:c2:9f:
7b:dc:3a:74:fb:ab:3a:46:ed:05:e2:d3:b4:4a:ad:36:c0:01:
ed:1c:68:26:bb:16:bf:f4:aa:80:32:ad:65:58:87:54:1b:cf:
a5:1e:9f:85:67:29:4e:7e:8e:fc:82:58:77:17:37:7e:74:49:
40:b6:58:f1:ed:b4:32:a8:1a:6f:b1:5c:1a:83:18:07:f6:2b:
dc:a7:79:53:a2:cc:f2:8b:c1:e3:99:4f:25:20:30:a0:7b:b0:
81:42:06:6f:9e:c8:fc:71:4f:c0:01:6f:89:bd:2e:35:ba:b0:
98:df:ca:47:9f:96:31:0b:70:6e:2d:e5:5f:04:ab:71:ec:fa:
fd:a6:f3:94:d5:20:c1:44:aa:68:07:cd:44:07:c7:07:60:e6:
de:d1:dc:55:07:65:83:22:7a:83:ad:e0:d5:33:2a:e8:bb:cc:
1e:c4:14:d7:61:5c:91:1b:6a:74:dc:9e:f3:ef:8e:ec:ba:f0:
1f:1b:cf:f5:76:c3:4f:07:05:7e:50:32:70:eb:d7:f5:1a:b7:
fe:5c:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:33 2025 by rpki-client