Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE12E038B76311F08CB762F6DAE4EC9C.roa
File: AE12E038B76311F08CB762F6DAE4EC9C.roa (raw, json)
Hash identifier: 1ZuajmDbqNGcsDaxghwidO9LRWfEbVBzHEi2hDGHVEI=
Subject key identifier: B7:C5:82:38:C0:ED:0F:F2:2B:3A:22:48:44:8E:48:49:6B:BB:38:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018443
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE12E038B76311F08CB762F6DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 20:45:20 +0000
ROA not before: Sat 01 Nov 2025 20:45:16 +0000
ROA not after: Sun 07 Dec 2025 20:45:16 +0000
asID: 211459
IP address blocks: 45.195.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99395 (0x18443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 20:45:16 2025 GMT
Not After : Dec 7 20:45:16 2025 GMT
Subject: CN=69067160-9c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d6:ba:3e:6b:d9:3b:2c:f6:f4:76:7c:8e:22:
ad:de:21:8b:ca:76:0f:8a:3c:19:44:2a:a4:31:06:
3f:15:a1:b3:91:f2:d6:42:1b:da:e3:ed:e6:a1:99:
df:4a:db:f6:9f:af:fb:55:16:a2:69:89:18:a8:d7:
a3:18:96:1a:1f:8e:e2:45:78:d2:e8:38:d9:fe:1c:
37:77:31:b4:62:cf:cd:b7:3f:45:58:e7:99:f5:50:
71:0d:c5:06:ea:31:0a:b5:fb:cd:05:53:25:c2:81:
03:fd:2e:77:c3:5c:85:07:15:3c:2a:e2:6d:e9:0d:
6d:1e:82:97:81:24:c6:15:64:31:bf:f7:0e:be:65:
60:55:3f:a0:43:fc:2c:ea:71:3f:54:98:d3:03:a5:
bc:33:5b:ce:8e:2a:fd:2a:99:3c:36:e6:18:15:28:
08:7e:9d:ee:c0:16:cd:e7:29:eb:fc:6d:5a:f5:59:
7d:5d:1f:a0:b7:87:89:5a:9f:61:e6:93:a7:40:ed:
df:e6:29:ad:c5:3d:63:0e:9c:c5:06:17:b2:53:71:
54:ac:02:c5:fa:90:98:3d:42:a9:de:92:cc:1c:cc:
ce:8d:36:dd:aa:8d:50:63:72:73:47:b7:f2:17:06:
15:3a:ca:77:f5:c2:74:7a:87:02:93:da:5a:fe:3d:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:82:38:C0:ED:0F:F2:2B:3A:22:48:44:8E:48:49:6B:BB:38:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE12E038B76311F08CB762F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:09:06:42:6d:45:a5:3e:95:d8:90:8b:a8:60:3b:f1:54:c1:
0a:80:3c:40:7c:d0:9d:03:36:a0:e9:f5:e9:f2:41:ba:7d:bd:
1a:93:6a:1a:d6:86:08:af:0c:82:95:5c:c8:b8:94:b6:61:86:
ad:de:28:4f:5c:f4:8d:62:f8:77:48:1f:e7:ed:85:c1:3d:fe:
36:9e:27:f3:7a:88:0e:d9:70:12:02:f9:a0:95:aa:7e:ce:5d:
c6:95:e5:19:1e:60:83:65:41:af:92:88:d1:28:1c:47:08:79:
ed:87:0a:5a:cb:2e:cb:bd:61:bb:ab:5e:69:e3:8f:e9:0b:88:
95:d8:c2:e4:e1:4f:6c:82:a1:cc:9c:25:fb:31:7e:df:a2:4f:
9d:2e:18:0e:1b:d2:f7:47:13:49:5c:f7:8d:c1:56:37:c9:35:
93:ef:9e:20:1b:80:b7:12:82:b1:6a:35:25:87:dd:98:c7:b0:
1e:a5:46:9c:56:ad:2d:38:3f:b2:a7:7e:62:ca:8c:40:b0:9c:
4f:78:e2:71:9a:93:9c:87:76:47:b0:47:93:b1:44:b8:9c:bc:
24:26:fa:63:91:b5:41:e1:3c:81:88:9c:41:98:c1:5b:58:4a:
96:d8:ce:fe:ac:56:8a:68:76:af:52:b1:73:e7:02:a3:a8:26:
2f:af:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:42 2025 by rpki-client