Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C44F0F1EAE5011F0887403BADAE4EC9C.roa
File: C44F0F1EAE5011F0887403BADAE4EC9C.roa (raw, json)
Hash identifier: 5NETs3PfPqoH39uE6W8a/7433SuVTSzNLq+xZw8JLRw=
Subject key identifier: 65:74:E7:1C:8B:16:42:3A:42:AF:E2:CE:02:5C:2A:20:C9:2A:69:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C44F0F1EAE5011F0887403BADAE4EC9C.roa
Signing time: Tue 21 Oct 2025 07:37:17 +0000
ROA not before: Tue 21 Oct 2025 07:37:10 +0000
ROA not after: Thu 27 Nov 2025 07:37:10 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
45.197.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98774 (0x181d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 07:37:10 2025 GMT
Not After : Nov 27 07:37:10 2025 GMT
Subject: CN=68f7382c-9211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:70:67:28:5f:ed:24:38:10:e7:e0:ad:4c:
08:a4:16:3b:44:64:99:d9:4d:c3:ab:66:0b:83:2d:
9d:9d:07:03:07:b5:ec:10:d9:d8:b3:ef:af:e5:1f:
23:05:74:0a:13:58:ba:56:36:3d:5b:29:57:85:8e:
7c:98:5d:63:9f:3a:9e:63:fc:78:2a:98:78:e0:fd:
ca:d6:07:52:1a:f4:f1:9c:6e:0c:41:a6:ae:02:a8:
22:fe:be:18:6c:11:9e:6f:cd:17:de:03:8c:30:91:
8c:7a:80:f4:9e:1f:db:0d:ef:07:bd:81:42:08:f7:
9f:bd:47:aa:61:41:51:4c:d1:7d:32:d7:ce:9b:06:
81:69:8e:4a:a9:5b:e2:01:33:75:cd:53:da:2a:4a:
72:09:60:dd:61:66:1b:99:59:8b:cb:f7:53:a6:5a:
68:01:ac:2d:00:90:70:d9:15:47:6d:86:df:32:b2:
aa:1a:02:c7:e4:3a:a6:31:ec:b3:8c:e6:11:94:8e:
fc:d5:3d:0f:99:49:18:76:25:05:ef:1a:dd:e2:7e:
2d:bf:e1:39:22:57:30:e6:b6:50:01:7f:f4:18:50:
29:a4:28:0f:38:6d:d5:50:79:5f:05:c1:23:a4:11:
ae:91:2a:22:1a:9a:f1:12:26:c5:d2:b0:c8:3f:19:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:E7:1C:8B:16:42:3A:42:AF:E2:CE:02:5C:2A:20:C9:2A:69:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C44F0F1EAE5011F0887403BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
45.197.240.0/20
Signature Algorithm: sha256WithRSAEncryption
42:a2:f4:be:9b:6a:0b:21:7f:8b:0d:4e:5c:7b:18:35:43:37:
f0:df:8c:f0:5b:b0:ef:68:c1:f9:e6:be:e4:62:5a:91:53:38:
22:15:21:8a:0b:c9:05:88:92:c4:f8:47:68:c6:1e:99:5c:d1:
c9:a3:af:f6:4c:79:61:65:36:ac:47:56:61:80:b1:e0:77:1c:
f7:11:19:70:29:d8:32:eb:4b:42:b9:70:95:19:e9:ea:3e:a1:
f5:c2:12:02:c8:68:4d:f0:51:2f:61:a5:58:4f:9d:a2:9f:50:
09:77:28:7d:3e:2e:58:7b:78:de:72:4c:56:2f:91:4f:2e:29:
66:fd:c2:5d:c5:7b:aa:0f:e8:fe:6d:d2:57:54:e6:44:3a:02:
f7:1b:34:f8:07:f5:24:bd:c0:58:7b:34:50:25:05:35:9c:f8:
f9:83:31:c2:87:c1:96:d9:3b:88:0a:6f:c7:4e:e8:9e:24:2c:
da:b9:4c:ae:f3:76:09:bf:3d:55:eb:e8:c4:10:c6:72:a8:5a:
e7:17:01:3c:27:4c:15:1c:d9:e5:a0:7c:fb:66:06:19:cf:a2:
c3:f1:18:e3:d3:dd:3b:7e:d3:26:87:3a:6a:08:d3:c5:59:10:
8d:5a:a0:5a:60:12:c5:ad:82:fb:53:59:b6:22:13:67:10:8f:
11:37:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:06 2025 by rpki-client