Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B603C28B32611F0B980C6C2DAE4EC9C.roa
File: 5B603C28B32611F0B980C6C2DAE4EC9C.roa (raw, json)
Hash identifier: oADDE6KicLX7wHk7BCtnuF+cighlulGUWp3cIRtAlTo=
Subject key identifier: F3:3D:62:8F:44:37:C8:8D:EF:38:84:AE:B7:D4:2E:4A:91:01:88:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B603C28B32611F0B980C6C2DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 11:16:18 +0000
ROA not before: Mon 27 Oct 2025 11:16:13 +0000
ROA not after: Mon 01 Dec 2025 11:16:13 +0000
asID: 44559
IP address blocks: 45.192.252.0/24 maxlen: 24
45.195.103.0/24 maxlen: 24
45.195.252.0/24 maxlen: 24
45.195.253.0/24 maxlen: 24
45.196.121.0/24 maxlen: 24
45.196.124.0/24 maxlen: 24
45.196.125.0/24 maxlen: 24
45.196.126.0/24 maxlen: 24
45.196.127.0/24 maxlen: 24
45.196.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99039 (0x182df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 11:16:13 2025 GMT
Not After : Dec 1 11:16:13 2025 GMT
Subject: CN=68ff5481-109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:89:81:e1:34:f2:5e:10:aa:bb:e4:89:1d:
0f:a1:8e:26:b1:98:78:d2:85:73:32:c2:c9:71:92:
21:94:89:a5:90:c8:aa:6c:38:8b:aa:6f:57:88:c3:
1e:ff:60:0c:f4:12:c5:1e:ec:59:53:a2:3b:c5:ec:
8d:71:1b:ca:a3:b1:ee:a0:c7:f4:51:9f:fb:9f:78:
5c:ab:fa:23:68:7d:fc:d1:37:e5:18:36:18:32:2c:
0c:7f:b2:d9:6d:0e:95:3e:f4:9f:ad:8c:5e:c2:61:
da:fc:3b:71:99:09:18:33:ad:c8:b6:8f:24:c3:87:
ef:2e:f7:e6:2a:12:54:b9:92:32:ca:e7:39:ed:fd:
f2:d8:78:6b:c1:34:d4:6c:da:9f:b2:9a:73:4a:6c:
15:28:08:a4:91:d8:cd:d7:7c:12:5c:45:94:e8:65:
2e:47:c5:7b:04:6f:98:5c:ac:69:04:19:a6:28:38:
a7:e4:c1:e6:49:5d:cc:9e:c6:91:94:e3:1c:8d:0c:
94:ed:ca:10:bd:48:fb:89:05:c7:74:2b:0f:e3:65:
07:41:67:67:85:2a:55:f0:98:42:fa:bb:b2:59:d5:
2f:90:7a:bb:7d:58:65:31:27:ec:40:79:03:0a:87:
84:bb:f1:e9:ba:32:c4:bf:32:28:0d:bf:9c:88:3a:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:62:8F:44:37:C8:8D:EF:38:84:AE:B7:D4:2E:4A:91:01:88:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B603C28B32611F0B980C6C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.252.0/24
45.195.103.0/24
45.195.252.0/23
45.196.121.0/24
45.196.124.0/22
45.196.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:50:02:e6:c4:2b:da:d2:8f:ed:a5:6c:56:5b:03:c8:a0:27:
9b:07:0d:87:42:05:6a:1b:2c:f3:f2:60:0d:28:28:e4:db:35:
ec:87:f1:6e:cd:9d:b6:41:9f:0d:d1:51:a3:16:33:dc:83:f1:
98:89:71:b3:d6:f6:b0:c6:f3:6a:3d:c5:13:fb:4d:fc:b9:e3:
fa:f7:f0:fd:23:26:cf:62:a9:3f:23:ee:49:a5:c1:78:1a:fe:
0f:d3:f1:7f:db:b9:73:b8:a5:f3:8d:31:a9:39:4b:58:50:f7:
75:38:2f:ab:b2:35:97:5b:98:ab:02:75:2f:01:c5:7b:41:5f:
a2:2d:36:f2:f9:b6:e3:d8:fe:28:70:55:e8:0a:c1:8a:80:08:
19:a4:b8:77:6b:58:ef:8f:e5:e4:f5:73:84:2e:54:91:b9:27:
b3:65:f2:e9:96:28:2a:6d:74:1c:d4:e2:b3:3f:fa:d1:f2:21:
50:f0:5e:5f:d4:dc:22:92:6d:67:ef:46:23:c3:bc:75:d9:da:
4b:53:51:4c:fd:a1:77:99:e4:9a:fe:d7:bd:32:d7:9d:c9:d8:
0d:fc:ee:a6:85:c0:fc:d2:c6:5a:4a:c2:32:e3:4d:80:fa:1d:
8c:04:ea:f9:ad:4d:34:e7:c3:8c:bf:4c:ac:b0:af:c3:8c:82:
f4:17:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:31 2025 by rpki-client