Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FE8D0B6B37411F088FDE2BADAE4EC9C.roa
File: 2FE8D0B6B37411F088FDE2BADAE4EC9C.roa (raw, json)
Hash identifier: VGYozGTFKEBW8MR2VMYd9B6IFOXMsmCrolC69HezRz8=
Subject key identifier: D1:5B:79:1D:F9:3C:04:4E:E8:BC:12:7B:49:9D:99:EF:84:F3:6D:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01832A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FE8D0B6B37411F088FDE2BADAE4EC9C.roa
Signing time: Mon 27 Oct 2025 20:33:25 +0000
ROA not before: Mon 27 Oct 2025 20:33:20 +0000
ROA not after: Sat 13 Dec 2025 20:33:20 +0000
asID: 213690
IP address blocks: 45.192.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99114 (0x1832a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 20:33:20 2025 GMT
Not After : Dec 13 20:33:20 2025 GMT
Subject: CN=68ffd715-7fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:48:c4:45:1a:d3:9c:28:60:94:a7:6a:ac:
94:09:2c:a4:cc:71:5d:58:07:13:26:ec:ca:33:a6:
fc:3d:49:37:07:4b:a1:8d:8b:b4:63:18:ce:f4:36:
e2:a4:25:77:b0:1f:3f:37:14:71:9c:c2:90:db:d2:
d5:38:cd:34:ed:58:c8:b7:ab:fc:0c:22:d5:e2:9d:
40:ce:e9:0b:41:17:df:46:63:04:6f:30:e2:2e:38:
4a:aa:3a:b3:7f:b4:23:51:08:6d:0a:bc:fb:41:1a:
c6:60:e3:58:2d:d5:85:de:6a:a5:94:e2:c5:a2:e7:
0b:62:bc:e9:b1:39:9b:a1:d1:7c:db:91:1a:05:68:
cf:14:d0:4d:15:b3:02:7f:d3:a9:c3:f3:72:b9:b0:
c3:7d:87:2b:57:01:f7:d6:49:00:45:75:34:e2:a4:
14:29:50:c0:e0:b7:f5:5c:10:31:0b:e1:92:34:ff:
3d:e1:a8:d3:35:d5:fd:18:d9:9a:8d:c2:19:8e:70:
7b:dc:70:8d:aa:58:ac:51:8f:7e:56:a6:e6:f1:88:
74:af:05:11:67:1a:fa:01:38:d0:a6:2f:c5:59:98:
8f:56:51:0d:79:7a:45:56:e6:34:03:eb:48:1b:84:
64:9d:e9:53:48:6a:66:7c:a2:26:75:4a:61:22:de:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:79:1D:F9:3C:04:4E:E8:BC:12:7B:49:9D:99:EF:84:F3:6D:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FE8D0B6B37411F088FDE2BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.0.0/23
Signature Algorithm: sha256WithRSAEncryption
74:3c:92:d2:7b:2d:53:6d:ee:1b:60:2f:13:a0:d2:34:48:22:
c0:7c:bb:7c:a7:66:41:43:7b:6e:68:1c:e8:70:d1:cf:80:74:
1b:8d:f0:88:ad:89:f2:62:2d:06:de:d9:28:09:bc:ab:b8:33:
aa:61:29:69:90:fe:ac:65:a1:3a:4e:72:f7:32:1c:ba:ed:6e:
2d:f9:78:fb:43:3d:86:5d:c5:46:9b:42:8e:df:44:22:6a:41:
cd:ff:bd:91:78:4f:e8:03:de:61:b7:cb:15:bc:e3:04:61:d7:
44:bc:62:ed:b0:0a:95:54:29:09:a5:f4:97:2a:25:e0:ee:d7:
05:d9:1a:94:1b:9f:03:82:4b:6d:2f:85:b0:a4:0f:85:ad:92:
60:2f:91:ae:55:11:ea:2d:1a:17:71:30:99:f4:68:de:8c:85:
39:14:0c:3e:7d:d3:52:81:69:11:57:a3:9a:63:85:65:ce:98:
c9:28:03:42:56:4d:6a:7c:06:5f:6e:97:44:39:c5:1e:9f:99:
95:b6:fe:69:65:e7:95:47:14:82:9d:9e:fc:9c:79:75:29:ba:
65:00:fe:e4:93:40:64:77:d4:5e:64:af:c3:23:ed:8a:8a:4c:
0c:e6:25:d7:a0:e0:b0:59:68:b9:49:6c:46:82:8b:6d:b2:60:
37:f5:72:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:53 2025 by rpki-client