Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CB164EAB4A211F0B67004BBDAE4EC9C.roa
File: 4CB164EAB4A211F0B67004BBDAE4EC9C.roa (raw, json)
Hash identifier: aPhIdAEljDnS6a5Ox24POQVREUjSjdw7deuWVab1Af4=
Subject key identifier: 29:F9:92:DC:82:A2:A8:D9:37:6A:51:34:FD:B8:B3:FD:5C:E9:FD:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018398
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CB164EAB4A211F0B67004BBDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 08:36:02 +0000
ROA not before: Wed 29 Oct 2025 08:35:54 +0000
ROA not after: Wed 06 May 2026 08:35:54 +0000
asID: 141109
IP address blocks: 45.198.6.0/23 maxlen: 24
45.198.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99224 (0x18398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 08:35:54 2025 GMT
Not After : May 6 08:35:54 2026 GMT
Subject: CN=6901d1f1-7e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:be:97:c0:c1:8f:5c:e4:8f:35:6f:5e:54:
c5:8e:a2:c1:c9:6c:5f:ff:a9:b1:f8:47:c1:97:fc:
06:a6:5a:6c:2a:e3:d4:f1:d6:fe:21:08:cd:e2:e0:
bc:a9:0c:75:b6:53:a7:d4:56:ad:25:82:be:e3:fe:
47:fa:18:55:fa:41:f7:92:4d:f1:84:bf:81:aa:22:
ca:ed:7c:00:14:56:39:15:37:3c:bd:2c:27:25:32:
00:d6:23:2d:c3:0d:cf:10:11:cb:d1:63:3c:a4:af:
fe:b9:49:b2:c8:e0:df:4f:5e:98:91:37:72:6b:68:
fc:21:d2:5b:a6:fd:ab:c6:f5:c8:fb:94:fb:c9:bc:
a5:a6:91:6e:de:17:9b:84:24:32:5d:6a:0b:3f:ef:
a4:20:8a:5c:f7:d0:be:4b:91:a1:8e:80:25:d1:1e:
52:83:8f:21:a2:ef:86:44:23:bf:79:aa:27:16:42:
7a:48:c7:ce:aa:de:16:17:fb:80:ea:a5:b3:36:96:
ec:f7:81:93:3f:25:3d:19:cf:33:91:53:9e:fe:1e:
ce:27:44:e8:39:5a:3f:90:6a:9f:f0:71:03:d9:13:
a8:b4:82:59:77:59:f5:0a:2b:89:b4:89:d9:0e:d3:
c8:6a:97:d2:5e:d0:d1:7f:09:d1:b7:79:ef:06:73:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:92:DC:82:A2:A8:D9:37:6A:51:34:FD:B8:B3:FD:5C:E9:FD:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CB164EAB4A211F0B67004BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ba:ee:62:6b:a1:a9:42:88:16:b0:4b:6f:c9:b5:22:ec:c5:
fb:d3:61:cb:0f:a9:cd:b8:51:9a:00:c5:32:f4:a1:7f:10:ea:
c0:f6:75:9f:69:8f:2d:ed:1a:d9:bc:cd:96:05:cd:53:fb:e3:
da:1b:ce:26:35:12:ec:a0:d7:f0:27:b0:44:c4:ad:6d:e9:30:
1b:26:61:92:71:68:ef:ff:ba:37:87:6e:d5:c3:d0:b6:da:fd:
b7:72:f2:a4:89:ce:59:f4:60:a5:a1:3c:ff:6d:dc:62:7a:a4:
c2:49:32:1e:f8:4f:ed:26:97:77:35:63:36:85:c9:06:6f:1f:
d2:8c:3f:fd:c6:54:4c:e0:ce:9e:4b:9e:ff:a5:83:17:02:8e:
f8:9a:3e:61:bb:02:07:a8:d1:34:02:0c:22:c4:9d:2f:d5:79:
10:45:04:eb:8d:29:44:ec:f6:c5:6c:3f:a4:f1:2f:18:bd:25:
52:0c:7e:ff:10:3f:29:bc:78:fc:a4:2b:92:c4:88:65:81:72:
e1:73:73:d8:71:7f:53:bc:39:a8:df:c1:0b:a6:47:32:1f:17:
40:eb:09:75:95:10:51:99:5d:d1:7e:c7:8f:64:8c:49:98:27:
95:bc:7c:3c:93:92:55:e1:c4:a4:70:1c:a4:06:ef:d2:64:59:
41:b0:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:46 2025 by rpki-client