Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C248676B8B411F0A76681C6DAE4EC9C.roa
File: 5C248676B8B411F0A76681C6DAE4EC9C.roa (raw, json)
Hash identifier: 9TDdRLN5M/vuMWKr9Oam2PKniKEsMN4eSoCekj8LUAE=
Subject key identifier: E0:35:25:85:F0:C7:2E:B8:E6:7E:A4:D3:22:AF:C7:28:F7:40:0C:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C248676B8B411F0A76681C6DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 12:55:23 +0000
ROA not before: Mon 03 Nov 2025 12:55:18 +0000
ROA not after: Thu 08 Jan 2026 12:55:18 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99507 (0x184b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 12:55:18 2025 GMT
Not After : Jan 8 12:55:18 2026 GMT
Subject: CN=6908a63b-dee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:b7:1d:0d:26:4f:1e:cf:8a:f9:cf:f8:d3:
f4:e9:3e:3c:09:79:8a:a9:cc:6f:58:4b:59:b8:03:
0f:61:22:45:85:39:95:79:d8:a3:9d:fb:c0:d9:ce:
80:d9:b2:05:f1:8f:30:9f:7f:6c:88:a6:db:28:5c:
73:bc:08:4a:6a:6d:dc:77:29:e5:f3:ea:92:b7:e4:
23:68:b9:c5:37:e3:a7:0e:69:40:b9:63:8d:a8:68:
c9:09:9d:03:c2:6c:d6:a6:30:b3:2e:72:41:85:02:
5e:ab:22:3b:72:03:69:a5:81:ec:f5:82:ea:23:8a:
c8:90:bf:1e:62:9c:59:f6:53:98:83:de:5a:70:19:
b9:02:d1:27:21:bd:de:69:39:62:c4:7b:a0:c9:72:
2e:6f:1e:33:58:93:d3:7c:65:f0:bc:76:95:f7:c4:
2e:b8:87:6e:63:fa:70:57:7e:ac:ea:40:54:6d:b2:
7b:b8:5a:3f:a5:a7:30:78:2a:65:5c:7b:50:33:d8:
23:a3:35:00:f3:5c:f1:09:4c:3c:7f:a2:2e:0c:78:
e6:10:06:26:67:5f:74:93:28:9b:4d:c0:ff:55:41:
5d:28:3c:7c:23:38:79:10:31:08:11:b3:f1:01:ec:
d6:65:56:d1:96:39:46:fc:aa:55:4b:0b:4b:44:f6:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:35:25:85:F0:C7:2E:B8:E6:7E:A4:D3:22:AF:C7:28:F7:40:0C:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C248676B8B411F0A76681C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:86:ff:85:9c:a7:73:54:50:b8:3e:07:70:50:dc:bf:48:ff:
7b:0e:33:f8:ec:8f:c9:b7:0d:e9:af:12:6d:14:f3:2e:0e:59:
82:5b:ce:c8:11:e9:82:2a:f1:68:5d:ad:48:be:12:12:26:ed:
88:df:1f:f6:e4:09:16:a2:ef:8c:de:42:b1:3b:0e:1a:be:9a:
5e:a9:45:bd:00:a0:fe:79:a4:8e:ad:d6:3d:54:b1:3c:48:db:
8b:14:75:4a:3e:dd:21:38:39:8e:f4:11:e9:05:90:a9:7a:3b:
49:e7:17:9f:22:43:2e:fb:69:75:ea:a3:4d:3b:d9:4e:11:8a:
c8:82:14:93:bf:c3:1f:76:54:31:dc:02:fc:c2:3d:93:dc:a4:
55:8d:bf:e9:1b:cf:33:c4:7b:2c:e8:59:40:c8:43:3d:43:b2:
39:ae:3b:61:96:1c:6f:b5:62:8b:f5:bd:f6:42:01:7e:86:c8:
ad:fb:14:6b:89:19:d5:7c:5a:22:48:00:e6:d9:b1:b2:b3:67:
69:27:6b:7f:db:68:68:a7:1e:b5:3d:09:27:db:6e:36:de:c4:
f6:12:e1:34:d2:00:d9:02:7a:52:e3:8b:07:ee:fc:16:80:ce:
ba:75:f2:0e:17:c6:a2:ec:74:7c:d5:fc:12:42:ce:4f:07:1d:
8e:38:78:e1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYSzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMTI1NTE4WhcNMjYwMTA4MTI1NTE4WjAYMRYw
FAYDVQQDEw02OTA4YTYzYi1kZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw2u3HQ0mTx7PivnP+NP06T48CXmKqcxvWEtZuAMPYSJFhTmVedijnfvA
2c6A2bIF8Y8wn39siKbbKFxzvAhKam3cdynl8+qSt+QjaLnFN+OnDmlAuWONqGjJ
CZ0DwmzWpjCzLnJBhQJeqyI7cgNppYHs9YLqI4rIkL8eYpxZ9lOYg95acBm5AtEn
Ib3eaTlixHugyXIubx4zWJPTfGXwvHaV98QuuIduY/pwV36s6kBUbbJ7uFo/pacw
eCplXHtQM9gjozUA81zxCUw8f6IuDHjmEAYmZ190kyibTcD/VUFdKDx8Izh5EDEI
EbPxAezWZVbRljlG/KpVSwtLRPZv5wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOA1
JYXwxy645n6k0yKvxyj3QAzIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzI0ODY3NkI4QjQxMUYwQTc2NjgxQzZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcY2MA0GCSqGSIb3DQEBCwUA
A4IBAQC6hv+FnKdzVFC4PgdwUNy/SP97DjP47I/Jtw3prxJtFPMuDlmCW87IEemC
KvFoXa1IvhISJu2I3x/25AkWou+M3kKxOw4avppeqUW9AKD+eaSOrdY9VLE8SNuL
FHVKPt0hODmO9BHpBZCpejtJ5xefIkMu+2l16qNNO9lOEYrIghSTv8MfdlQx3AL8
wj2T3KRVjb/pG88zxHss6FlAyEM9Q7I5rjthlhxvtWKL9b32QgF+hsit+xRriRnV
fFoiSADm2bGys2dpJ2t/22hopx61PQkn22423sT2EuE00gDZAnpS44sH7vwWgM66
dfIOF8ai7HR81fwSQs5PBx2OOHjh
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:33 2025 by rpki-client