Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/217F04D0B33F11F087ACC3E9DAE4EC9C.roa
File: 217F04D0B33F11F087ACC3E9DAE4EC9C.roa (raw, json)
Hash identifier: WAtl3UGTlw8jbS66/mc4ilIciFThE3oNWPufdgXu/HY=
Subject key identifier: 6A:5D:97:A4:7C:08:9F:5E:3C:92:2A:5D:52:A8:0E:66:B8:C3:03:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/217F04D0B33F11F087ACC3E9DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 14:13:38 +0000
ROA not before: Mon 27 Oct 2025 14:13:33 +0000
ROA not after: Sun 30 Nov 2025 14:13:33 +0000
asID: 399195
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99070 (0x182fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 14:13:33 2025 GMT
Not After : Nov 30 14:13:33 2025 GMT
Subject: CN=68ff7e12-6ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:58:74:5a:15:62:18:45:46:3b:97:2e:98:
2e:de:90:36:6c:1f:81:b1:66:d7:79:6a:7b:7e:91:
9f:5e:e4:db:52:24:7f:64:79:c9:80:5e:9f:0a:5b:
50:44:3f:77:c9:3d:3d:97:25:c8:e8:62:80:20:f6:
3b:61:c1:50:7c:f8:01:d7:05:6e:c1:43:e4:6f:d5:
1d:7a:2b:a3:dd:8f:10:13:04:d2:a3:fd:ef:6e:70:
d8:b3:3d:9f:02:25:a1:cd:50:39:72:65:c9:ee:4e:
66:a5:f8:ca:d6:dc:32:4d:2d:0f:5e:72:a0:47:ae:
49:5e:46:aa:23:3e:cc:4f:f4:1a:40:79:c6:df:bb:
ad:8d:87:cb:83:7e:93:46:04:b3:15:84:c3:45:40:
c6:a7:e4:d4:fd:7a:c0:55:75:50:6b:0b:13:d9:ae:
fa:65:8f:92:33:6b:c2:b6:cd:d7:07:30:a9:2c:47:
3d:a5:be:b6:d1:ee:0d:91:67:26:d0:c2:3d:ee:d6:
84:f9:57:87:77:c0:97:be:9f:e5:a8:9d:09:51:fb:
f8:a6:d9:f8:e5:8e:95:df:b2:90:e4:1d:34:00:2e:
8a:e8:8e:f6:4e:fe:c4:fe:5d:eb:d4:13:45:8f:4f:
c2:63:9d:7e:06:6a:86:e7:1e:91:8e:fb:1a:3d:a3:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:97:A4:7C:08:9F:5E:3C:92:2A:5D:52:A8:0E:66:B8:C3:03:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/217F04D0B33F11F087ACC3E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:37:9f:66:c8:ee:87:87:49:fc:37:59:6f:e1:95:12:a8:5f:
53:63:78:e7:ac:15:f5:8a:ed:80:18:33:97:fe:f1:87:c1:da:
61:e9:4e:94:8f:44:5b:8d:7d:d5:30:77:67:a5:72:f6:50:71:
18:99:d4:e2:f4:0d:bc:6e:e2:6a:63:71:5a:c8:a3:73:3f:c3:
5f:42:6c:96:5a:f8:c8:39:a2:3f:f1:d0:34:16:2c:7a:a3:73:
cc:f2:3d:3d:2a:20:c3:ae:2d:66:70:c3:78:90:09:ca:a5:ca:
d2:99:32:31:33:18:18:f2:02:ce:7d:da:3b:7d:a0:7d:7f:42:
05:35:34:5a:d2:f7:18:e9:6f:1c:b2:f9:9d:d1:24:ca:be:f1:
e4:c1:08:62:93:3f:a3:16:5f:46:b5:5e:26:f6:c0:28:6b:71:
cf:a1:59:fc:6e:27:5b:0d:70:6d:13:8f:a7:f2:1e:07:65:16:
77:24:bb:3a:99:92:b0:0e:b2:5b:02:09:0b:cb:80:9a:bc:b7:
bc:9a:d8:3a:49:54:03:ac:d1:2c:8f:54:24:26:4d:eb:1f:5c:
7f:16:b0:ed:88:bc:fb:c1:af:e6:eb:55:a7:eb:20:31:e8:b1:
4f:d1:d6:81:2c:e3:7d:86:50:08:b5:04:33:be:0c:e5:6a:20:
0a:67:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:18 2025 by rpki-client