Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/629AEDEAB40111F0A1844EBDDAE4EC9C.roa
File: 629AEDEAB40111F0A1844EBDDAE4EC9C.roa (raw, json)
Hash identifier: BWmNxeeAoN60R4zxA1e+cmpoN0cTWewgX6dm1I3uYhg=
Subject key identifier: F9:05:31:04:CA:58:B9:80:0C:20:DE:DC:D7:BF:70:F8:26:52:51:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01838C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/629AEDEAB40111F0A1844EBDDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:24:09 +0000
ROA not before: Tue 28 Oct 2025 13:24:02 +0000
ROA not after: Wed 10 Dec 2025 13:24:02 +0000
asID: 63139
IP address blocks: 45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
45.197.123.0/24 maxlen: 24
45.197.124.0/24 maxlen: 24
45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99212 (0x1838c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:24:02 2025 GMT
Not After : Dec 10 13:24:02 2025 GMT
Subject: CN=6900c3f9-d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:23:0a:1d:cb:22:c3:46:a6:12:aa:6d:df:
3e:d9:10:ee:7a:64:6a:fa:6e:69:21:a9:8b:e0:0c:
b9:c5:1c:48:b3:b3:c2:8d:28:8a:fd:fb:52:04:a3:
87:6f:7d:00:16:5b:71:3f:0f:a1:e1:e5:9c:7f:62:
fb:7e:4f:bc:23:be:a2:71:ea:b2:c3:2e:56:01:21:
d0:5d:2b:43:11:46:63:b8:ed:15:58:f4:64:3a:99:
df:02:f9:37:ac:9e:fb:18:77:de:df:7d:43:8e:48:
31:fb:ad:34:8e:09:eb:eb:f2:8c:31:cb:1c:73:d2:
6f:08:22:39:fe:dd:2e:bf:ed:fb:76:2c:61:46:77:
22:3a:82:bf:f4:80:93:26:85:d6:17:dd:37:c0:72:
ab:49:e0:f9:4b:89:37:bb:fb:54:d2:e9:57:38:fe:
3a:ae:aa:b1:53:12:71:85:c8:c3:a7:47:2d:59:31:
26:bf:96:40:e7:38:65:a4:3e:58:cf:6f:8b:32:41:
c5:06:86:9b:0c:90:cb:88:44:d0:f4:00:7f:bc:12:
7b:70:75:fc:fa:07:2a:0c:0e:48:85:4e:48:8a:1f:
45:15:07:79:fc:16:0c:3c:d8:38:75:1c:cc:9f:13:
e7:a9:34:79:41:e4:23:39:d3:da:68:38:a1:c2:20:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:31:04:CA:58:B9:80:0C:20:DE:DC:D7:BF:70:F8:26:52:51:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/629AEDEAB40111F0A1844EBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.118.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
52:55:4a:d1:e0:be:c6:06:f8:1f:f6:c9:c4:8c:e5:a0:ff:3b:
3a:ba:3c:3e:d8:e6:22:26:96:ea:e3:56:a1:03:55:f0:f1:53:
4b:0f:05:15:54:11:ee:89:f7:06:bc:a1:dd:5d:af:c2:87:d1:
79:5e:5e:aa:e0:df:dd:1a:78:43:e4:4f:84:9e:e4:c6:61:9e:
b0:0b:37:10:32:a3:55:e5:f7:6f:dc:1c:1a:b1:db:b8:1f:c0:
c0:db:d5:33:52:1a:01:26:d2:e0:2e:fb:1f:3d:96:7b:77:6d:
1e:93:ca:1d:d9:69:fa:65:89:47:99:ff:8e:f5:85:c7:a3:57:
12:4c:b8:6e:33:e7:43:8d:27:47:1c:8c:8b:b2:e2:84:a4:8a:
08:5b:56:1c:67:ee:7a:d0:57:b5:3c:6b:31:bf:75:33:66:28:
6d:4b:e6:98:76:c4:c9:55:de:b2:c8:d7:a7:bf:e0:45:74:0a:
64:5c:e7:58:04:db:40:06:fc:5c:21:92:66:60:4a:c6:eb:14:
be:a8:a1:75:25:83:d8:45:d0:d8:ab:b1:21:c7:23:e3:7f:20:
e9:d5:b1:3e:7f:d9:e3:73:53:96:ca:61:8f:e4:75:d5:34:a6:
29:90:19:92:b1:d5:78:a5:27:75:cc:af:2d:61:9c:a6:62:0b:
65:01:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:38 2025 by rpki-client