Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA103792AF4411F0871472D7DAE4EC9C.roa
File: EA103792AF4411F0871472D7DAE4EC9C.roa (raw, json)
Hash identifier: GPio1fMQofNSXXHWM89qW7bozBKgoYUa34+4CQZ+mYw=
Subject key identifier: E1:55:4F:13:52:24:ED:E5:EF:F2:24:AE:34:50:0E:A4:E7:72:8D:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01820B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA103792AF4411F0871472D7DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 12:44:57 +0000
ROA not before: Wed 22 Oct 2025 12:44:49 +0000
ROA not after: Wed 12 Nov 2025 12:44:49 +0000
asID: 53808
IP address blocks: 45.207.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98827 (0x1820b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 22 12:44:49 2025 GMT
Not After : Nov 12 12:44:49 2025 GMT
Subject: CN=68f8d1c9-fd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:de:e5:8c:55:de:65:52:39:7c:2f:c5:ee:
fe:5a:e3:c0:e1:94:0e:02:a2:d4:fd:62:2f:4e:63:
27:bc:22:cd:09:cd:49:35:8c:34:32:85:46:4e:e8:
b2:1f:2c:91:c8:83:03:07:bf:09:43:48:bd:fb:d1:
d1:e5:86:ca:35:f7:77:46:d8:d7:14:aa:96:41:e5:
a1:29:a4:fd:79:e0:7d:69:07:92:32:71:b5:dd:42:
16:e3:1b:e9:98:96:49:27:85:a2:4b:cd:77:5b:f7:
56:25:de:ad:41:63:dc:af:0f:0e:4f:65:77:c4:20:
26:85:9b:d8:54:a6:c2:c4:ce:fe:dc:ce:7d:fe:fb:
8f:d4:90:98:e3:b2:b5:5d:60:17:e8:fa:ac:76:66:
20:1f:8c:d6:15:c5:60:16:83:3e:be:9c:d3:e4:20:
73:d9:89:97:2d:c7:34:ce:a8:37:63:e2:27:f8:e7:
ea:5d:90:9b:22:ee:e5:0a:ac:81:29:a9:f0:d1:7c:
84:6a:4d:50:b6:45:7e:d0:52:96:30:06:5d:e2:91:
f3:ff:7d:00:7e:91:c3:8b:b7:60:68:ce:c0:6d:7e:
79:07:06:56:a1:98:6b:14:02:f3:f4:f4:6c:38:c4:
3e:55:01:28:5c:86:69:a8:0d:53:27:48:67:ab:86:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:4F:13:52:24:ED:E5:EF:F2:24:AE:34:50:0E:A4:E7:72:8D:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA103792AF4411F0871472D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/21
Signature Algorithm: sha256WithRSAEncryption
37:60:9e:72:cc:7b:f2:53:6c:41:77:9c:00:ec:26:e4:ed:fb:
c3:03:c3:8b:a8:4e:1b:90:89:32:d5:b8:bb:bb:83:f8:ce:6c:
b6:b3:fd:99:bd:65:74:e2:92:1f:0a:54:5d:f7:69:69:0b:b3:
b5:8a:40:d2:e5:c6:d3:ab:b7:7e:1f:45:74:4a:cc:19:56:17:
9f:de:45:95:fd:56:75:e0:c5:b5:4b:12:e3:90:45:ee:fd:bd:
92:d4:08:70:3d:21:44:1b:51:93:88:50:eb:1a:51:0b:1d:5e:
18:e0:00:ec:f2:2f:d3:81:e2:7d:da:75:d0:c0:65:16:8c:50:
9d:b8:f5:1f:7e:21:58:dc:eb:05:74:98:07:ba:17:f2:f1:3c:
fe:6f:28:5e:62:6b:1d:b6:73:8d:12:4e:b0:da:8c:04:ef:37:
bc:2f:80:7f:40:d5:d0:af:d2:59:72:1a:5b:3b:10:91:f4:29:
af:b6:f1:e7:73:b6:18:91:ea:44:df:d0:08:71:cd:1e:c1:f6:
e9:dd:bf:69:43:08:9f:ac:c3:d9:73:92:f6:a7:8b:2c:d0:d5:
26:12:89:3b:ea:87:40:2f:dd:07:b1:3e:be:4b:e8:f3:e5:ae:
4b:2c:1b:cb:0a:79:b1:55:e0:af:13:65:ca:b6:2f:7f:42:c5:
77:6f:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:04 2025 by rpki-client