Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0182C806B96611F08277D9ABDAE4EC9C.roa
File: 0182C806B96611F08277D9ABDAE4EC9C.roa (raw, json)
Hash identifier: GRxiHSt6OoQUI4hajE7muAHdYgubvBYDM6O7X8VS7/U=
Subject key identifier: E8:A2:62:18:A6:80:C7:E5:20:BD:B2:2F:5A:D5:1C:4B:99:CE:38:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0182C806B96611F08277D9ABDAE4EC9C.roa
Signing time: Tue 04 Nov 2025 10:07:01 +0000
ROA not before: Tue 04 Nov 2025 10:06:57 +0000
ROA not after: Fri 12 Dec 2025 10:06:57 +0000
asID: 27951
IP address blocks: 45.195.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99550 (0x184de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 10:06:57 2025 GMT
Not After : Dec 12 10:06:57 2025 GMT
Subject: CN=6909d045-b13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:42:3d:7d:30:19:c5:b8:03:bd:c0:4a:a4:
12:54:07:e4:df:d8:6d:99:75:57:16:c4:28:d4:2b:
06:1e:fd:76:74:12:a5:79:f5:dd:5d:29:94:82:21:
7d:0f:9d:2b:57:33:71:ad:57:7b:75:c5:c7:d6:5f:
15:86:ea:26:04:e1:0e:0a:5f:67:41:e2:d0:85:98:
6b:ef:8a:3c:91:f5:0a:61:16:6f:f2:be:23:99:f9:
c5:f5:f0:b4:be:33:1f:c3:15:10:20:1a:bb:06:8f:
da:46:57:29:b7:f3:b9:41:3b:98:d8:4f:03:c0:27:
d5:9e:78:92:79:da:69:5e:6d:9d:88:cf:24:46:8d:
79:4f:a7:95:bc:8e:9a:61:43:1f:dc:72:01:04:99:
35:b8:1f:7e:1a:22:51:a6:ad:3a:93:93:55:0a:30:
d1:37:8b:d6:e9:cc:62:3b:ac:8a:db:8b:48:41:c5:
a5:22:aa:c2:63:77:08:3d:be:14:b7:07:38:f7:9a:
59:b2:9d:e2:21:58:e5:17:1e:77:5f:bf:77:d6:b6:
4d:14:53:ea:0e:b9:cd:ad:b9:97:c0:8f:7c:62:dc:
62:51:ff:30:f7:fa:b4:6d:40:b2:6a:83:47:b7:2c:
56:b7:39:9f:b1:68:06:87:2c:a6:f6:2f:7b:25:dd:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:62:18:A6:80:C7:E5:20:BD:B2:2F:5A:D5:1C:4B:99:CE:38:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0182C806B96611F08277D9ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:68:9b:5f:17:39:8b:40:7b:3f:4d:43:65:e8:b2:ab:96:fa:
cb:e3:22:eb:ad:a5:eb:65:a5:e2:e7:b9:e4:7d:3e:8f:d4:b6:
84:97:a1:20:5d:22:24:1b:1a:55:60:8b:6b:51:2a:e4:90:08:
10:cc:8b:51:73:bc:d6:35:eb:2b:ea:1a:0f:b6:05:b4:d8:c0:
0b:b9:c1:00:54:be:d7:d5:3e:19:31:94:a2:9c:24:b3:e8:de:
20:7c:0b:38:28:b0:45:77:d5:05:9b:f8:5a:57:27:75:57:5e:
e7:98:8c:9e:d5:43:d2:5d:c3:3e:07:ad:99:68:da:6d:b6:94:
8c:24:f5:62:ee:27:50:0d:83:8e:51:b4:ff:bd:d7:92:17:24:
4a:73:37:8f:4f:ba:cb:53:94:93:f1:15:cc:20:38:2a:d8:15:
cf:36:cd:ed:48:14:0a:f5:c3:92:6b:89:c3:8b:69:6c:b1:aa:
b4:cd:f8:8f:d0:ba:07:55:e3:58:6a:45:90:dc:73:49:f1:45:
d2:91:d0:f5:74:c4:99:a4:85:1e:3d:15:4c:ed:e0:92:ce:92:
bb:d6:a5:6a:ec:0e:8a:67:c0:26:a9:67:eb:d1:df:bd:07:d6:
98:9c:e1:65:b4:1a:24:ac:7c:86:c9:1f:26:97:1a:f4:01:f3:
10:33:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:00:48 2025 by rpki-client