Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55DFCE64B3EC11F08BE79FBBDAE4EC9C.roa
File: 55DFCE64B3EC11F08BE79FBBDAE4EC9C.roa (raw, json)
Hash identifier: YBTBbqduIkdZUSWBKGLOGVwMtwWijKnWlhdrcSc1cL8=
Subject key identifier: FC:DB:DC:8E:93:BC:CC:5A:6D:3C:68:37:63:88:D1:4E:35:3B:A6:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01836A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55DFCE64B3EC11F08BE79FBBDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 10:53:29 +0000
ROA not before: Tue 28 Oct 2025 10:53:24 +0000
ROA not after: Fri 01 May 2026 10:53:24 +0000
asID: 328608
IP address blocks: 45.198.234.0/23 maxlen: 24
45.198.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99178 (0x1836a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 10:53:24 2025 GMT
Not After : May 1 10:53:24 2026 GMT
Subject: CN=6900a0a8-502b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:7e:02:2b:1b:36:e1:6a:68:45:df:4c:c1:
6b:a0:54:3e:94:0f:7d:59:25:16:c1:c4:37:50:7a:
45:8d:30:01:93:51:5e:5f:19:40:93:e9:d4:6e:4f:
76:91:82:1c:ca:81:a1:15:db:59:41:60:ea:c5:e7:
25:0f:43:53:0b:8a:81:8a:4b:15:05:28:b7:34:f1:
11:97:24:32:d1:82:b7:55:a1:63:20:cb:0d:ab:c9:
96:68:86:e2:be:17:d6:99:1e:0b:c3:06:8f:b1:ad:
68:53:e4:fa:af:14:27:e1:9a:fa:31:6c:df:7d:dc:
58:96:65:1a:8d:6a:18:2c:b8:dc:0b:fe:4c:da:68:
6b:2b:7c:c7:7c:ab:16:d2:11:b4:1c:97:cf:3f:6e:
bb:12:ad:21:2e:21:a6:87:4e:76:3a:8e:2f:56:c7:
c5:81:bf:18:a9:cb:12:84:a6:e8:7e:77:56:1e:d0:
90:e3:6b:ab:04:4b:58:b0:c2:74:2e:78:cf:5f:7d:
3e:14:f5:dc:9f:de:ba:6a:3e:04:70:f2:e6:d3:1e:
50:bc:d9:6e:ee:70:2a:07:ad:22:fa:76:4b:46:eb:
ac:be:5d:08:c4:df:43:48:35:ad:6d:8f:7c:24:c6:
96:e5:d7:d9:68:94:91:a5:39:0d:b7:5d:32:57:6b:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:DC:8E:93:BC:CC:5A:6D:3C:68:37:63:88:D1:4E:35:3B:A6:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55DFCE64B3EC11F08BE79FBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.234.0-45.198.237.255
Signature Algorithm: sha256WithRSAEncryption
6c:7c:93:f0:5c:4e:69:8c:d6:1a:3a:01:bc:65:2c:86:30:eb:
79:ff:4c:bf:e8:43:d8:9c:ff:42:71:35:eb:c2:f5:7b:89:df:
f8:35:3e:9a:8c:15:da:d8:70:e6:b3:6c:e7:02:68:cf:76:dc:
88:1c:57:18:d2:79:ed:8c:69:56:2b:66:f8:82:2b:6e:39:2b:
31:9c:f1:f5:ae:91:d2:5f:95:f4:4f:4d:29:d3:f3:5b:0a:f9:
f8:bb:22:01:70:06:71:57:70:8d:15:3d:3d:a8:57:12:be:60:
b5:9c:70:a3:1f:cb:58:c4:93:53:78:86:bc:81:e4:a8:bb:a9:
90:88:75:32:18:fe:97:64:88:5a:bc:3d:3f:3d:03:c7:f5:ac:
c6:f8:51:c5:63:8d:44:d1:4a:a2:8b:7a:21:a6:4a:9a:74:5c:
a6:b0:d3:dc:6a:88:02:e8:0d:02:2d:9e:5b:91:d1:e6:b8:5f:
62:d1:6b:92:c1:6e:ac:e6:24:14:25:46:59:84:09:72:e4:aa:
5a:90:2c:ef:51:da:60:f0:96:8c:f1:a9:cc:0c:cc:bc:99:3d:
41:33:9e:9f:ed:44:d1:e5:0f:8a:41:71:75:fa:df:e0:aa:5f:
a1:c4:fd:fa:75:e1:dc:f9:24:92:1f:58:0b:12:78:6e:b1:7e:
5f:3d:73:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:57 2025 by rpki-client