Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECA9B670B63011F08E2C967EDAE4EC9C.roa
File: ECA9B670B63011F08E2C967EDAE4EC9C.roa (raw, json)
Hash identifier: rA6wIrHWBptr22nKWTuz7CqmMVuVG0fBSCmG3EO9Vl8=
Subject key identifier: 6C:6F:65:C6:08:4E:E6:54:51:42:64:DA:C3:F3:B0:E3:C7:24:D5:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018420
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECA9B670B63011F08E2C967EDAE4EC9C.roa
Signing time: Fri 31 Oct 2025 08:09:30 +0000
ROA not before: Fri 31 Oct 2025 08:09:25 +0000
ROA not after: Sun 07 Dec 2025 08:09:25 +0000
asID: 401783
IP address blocks: 45.192.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99360 (0x18420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 08:09:25 2025 GMT
Not After : Dec 7 08:09:25 2025 GMT
Subject: CN=69046eba-523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:f6:12:83:94:42:dd:03:b4:4c:f9:b1:b0:
d9:a8:46:3d:74:2c:db:90:65:96:bb:ef:5b:89:cf:
4c:6b:81:3f:c8:b3:09:ec:e0:24:7d:12:55:3d:1a:
b9:04:ba:82:93:f7:c9:33:fa:79:fb:24:bb:72:65:
b2:29:d4:22:5a:5d:70:65:86:ec:65:2d:bb:34:0b:
72:e6:59:b2:13:e6:08:c8:86:e7:96:aa:e6:ca:cc:
50:b7:4f:57:5b:61:49:2c:d7:e8:2f:62:20:63:7d:
36:3f:51:7f:0a:f3:c7:fd:95:78:4e:6c:c7:53:2a:
b2:cf:dd:23:f9:47:f3:88:02:dd:06:e7:ba:1b:b7:
0d:bb:b1:b9:66:37:77:20:36:a1:e0:de:7f:86:39:
20:75:bc:d4:56:35:41:ad:7f:25:e8:fe:ce:c3:5a:
fd:3c:52:63:e5:c7:d2:96:92:2a:92:92:e3:91:11:
c5:00:ef:41:06:1c:da:83:34:2b:68:33:45:98:ce:
4a:4e:9c:88:3d:33:eb:3f:68:67:e5:fe:7a:d5:49:
f8:6b:40:61:40:f1:fa:98:08:5e:9f:0f:10:ba:fb:
de:72:99:aa:ad:df:97:d9:f0:bd:6c:30:75:7d:3f:
b2:87:f9:d5:1a:1d:af:e2:50:0f:c5:83:4c:44:f4:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:65:C6:08:4E:E6:54:51:42:64:DA:C3:F3:B0:E3:C7:24:D5:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECA9B670B63011F08E2C967EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
Signature Algorithm: sha256WithRSAEncryption
86:95:70:9c:4e:52:76:5e:85:e0:1e:12:ab:79:f0:af:70:ea:
3c:cb:8d:43:f8:6a:42:ec:9f:70:78:f7:5f:ea:ed:94:82:4d:
b1:02:1b:00:43:26:e3:61:57:c0:e4:2a:c3:d2:ec:aa:f9:e9:
d1:37:9d:c9:d9:8f:d4:8d:11:03:c6:07:6b:d0:d5:3b:d5:ce:
7e:92:14:7c:09:62:3d:0d:25:ac:99:7d:b7:b2:39:ae:e1:4d:
5b:48:53:45:d4:3b:4c:c0:3c:ef:51:99:3e:de:af:2a:83:33:
01:6b:fc:cc:02:de:e9:b3:ff:c7:12:0e:79:2e:2f:e6:ec:1f:
5c:b3:22:ea:34:f7:41:4c:27:e3:ef:32:63:8d:6a:69:72:a5:
a8:54:e4:8e:18:69:b6:3d:e3:3d:58:b7:3a:a6:4e:e8:75:9c:
a9:ce:10:e8:80:e4:8d:bf:43:1e:47:aa:b2:ae:a9:71:17:5e:
54:88:f0:2a:6a:b7:e5:49:23:93:f0:26:1f:e2:51:46:b3:f9:
17:9f:b1:36:f8:09:cb:16:12:81:1e:62:4a:5f:e7:7e:71:e0:
01:6e:d0:83:6d:8c:56:f7:e9:32:21:da:cd:a7:09:3a:66:79:
1c:8d:eb:29:d8:1c:dd:11:de:00:b2:44:94:19:c7:94:fc:7d:
a5:77:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:36 2025 by rpki-client