Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/205E813AB37A11F08C2ABDE0DAE4EC9C.roa
File: 205E813AB37A11F08C2ABDE0DAE4EC9C.roa (raw, json)
Hash identifier: pdLGSiLyonlE8cQolEF19v4xWgT4yPcOzRYJqx9prCA=
Subject key identifier: C5:D4:4E:2A:2A:CC:03:92:39:0F:59:05:ED:FF:EA:AF:F1:0F:15:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018334
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/205E813AB37A11F08C2ABDE0DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 21:15:56 +0000
ROA not before: Mon 27 Oct 2025 21:15:50 +0000
ROA not after: Tue 02 Dec 2025 21:15:50 +0000
asID: 17561
IP address blocks: 45.198.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99124 (0x18334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 21:15:50 2025 GMT
Not After : Dec 2 21:15:50 2025 GMT
Subject: CN=68ffe10c-5109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:78:fb:fb:95:92:06:32:69:a2:93:06:bc:
b0:66:4b:bb:f0:fa:d4:cc:2c:c0:3a:eb:95:ea:f4:
75:39:1d:06:f6:15:b9:ae:36:83:cc:7e:b1:5f:42:
44:cc:7c:9b:11:ed:d1:5d:d9:16:33:0d:22:b8:28:
83:74:a5:2a:bc:06:e7:5d:6e:2d:b0:0f:91:a3:ba:
01:bf:ca:89:5f:ee:a7:7c:39:7b:c3:c5:08:d3:14:
6f:7b:62:be:56:e1:b1:d8:45:80:0d:0f:b3:8b:e5:
7a:05:12:4d:c2:70:b5:0e:cf:3c:65:af:fb:43:d2:
a3:16:40:7a:f9:6f:ca:db:57:32:8f:6e:e6:ec:0e:
8c:fd:6f:d0:89:9c:1f:e6:bf:06:5f:9a:bf:29:bd:
c5:6d:c2:a9:97:ae:f7:6c:86:8b:62:19:bf:e1:02:
55:56:14:65:85:c4:7b:9b:71:5a:61:7c:91:48:ac:
c6:62:68:31:fb:eb:b3:ad:1a:e5:27:0e:3c:58:9a:
8d:d1:60:76:9b:ec:57:63:a4:36:09:bf:8d:36:1b:
9a:f6:29:43:2e:ed:c5:b7:20:eb:f3:2e:bf:d1:7e:
f7:e7:77:e8:cc:7b:b3:73:9a:38:3f:f1:9a:00:c1:
28:5f:4d:70:08:d7:1c:4c:cd:44:bc:2d:40:60:64:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:4E:2A:2A:CC:03:92:39:0F:59:05:ED:FF:EA:AF:F1:0F:15:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/205E813AB37A11F08C2ABDE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4a:d3:f2:50:b7:55:3c:fe:55:04:2b:d4:11:b4:2f:fb:44:
42:bd:23:df:02:95:f4:5b:0d:d1:06:13:73:e2:52:ef:c7:ac:
fe:a8:1d:bd:75:70:15:45:f2:a9:0f:7f:a4:f3:d6:9b:49:c5:
05:11:34:38:6b:0d:31:3b:7a:d7:ed:ef:94:98:0e:b8:3d:dc:
fb:a0:46:fe:b0:6a:57:83:71:99:dd:83:b7:02:90:1f:86:da:
ec:0b:2d:bc:13:1e:66:c2:ad:0a:db:86:a7:cc:0a:c2:b1:1e:
c1:a9:83:eb:6f:c8:34:6e:35:8e:b1:15:63:2c:3b:7d:4c:59:
80:8e:ae:90:3f:e3:76:18:79:5b:e7:f4:93:ac:9d:ad:61:0c:
f0:c3:34:f9:4d:62:fa:69:6c:76:1b:dd:f3:ac:f2:69:f7:4e:
c0:3c:27:c6:49:d9:7e:d9:ef:92:e8:1a:b7:7e:25:2d:94:aa:
1e:11:08:ee:3d:16:69:1f:f9:86:80:51:88:4b:b1:bf:37:46:
70:ec:65:09:5a:8f:b3:d2:18:b9:9f:80:5c:0e:8f:6c:d0:fe:
56:6e:b9:0e:f9:19:93:a7:f7:4e:92:f1:36:74:e8:b1:a3:1e:
fc:35:74:06:b8:91:5d:12:ab:6a:e6:da:66:8c:48:2b:96:bb:
77:4e:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:09 2025 by rpki-client