Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65321634B2EC11F094E8F3CDDAE4EC9C.roa
File: 65321634B2EC11F094E8F3CDDAE4EC9C.roa (raw, json)
Hash identifier: N2ZLXmY+fqesmZe4qeIzDtpRfgWER8OgP1wdicIA1y4=
Subject key identifier: B4:6E:1B:83:96:77:0D:F0:86:BD:B2:26:AB:E5:36:D6:B8:D1:D0:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65321634B2EC11F094E8F3CDDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 04:21:23 +0000
ROA not before: Mon 27 Oct 2025 04:21:16 +0000
ROA not after: Sun 30 Nov 2025 04:21:16 +0000
asID: 32043
IP address blocks: 45.204.54.0/24 maxlen: 24
45.204.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98979 (0x182a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:21:16 2025 GMT
Not After : Nov 30 04:21:16 2025 GMT
Subject: CN=68fef343-45fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:5d:f5:cd:3c:21:d4:c7:b7:11:97:2e:5d:
2a:c1:91:51:17:b7:a7:2d:9e:ff:19:84:f5:88:f3:
45:67:34:42:e6:e9:a5:fe:cb:b3:ef:8d:3d:fd:2b:
ce:de:97:bf:b9:77:22:7e:c7:40:b8:e1:76:ad:e3:
18:7d:c7:7d:7a:be:d1:1e:71:dd:82:45:07:c6:f3:
2c:e1:f4:35:eb:09:12:30:81:81:d2:f1:5e:41:87:
c2:52:cb:3a:ac:22:f6:7e:58:a7:f9:f9:8a:a8:3f:
b1:68:6a:3b:d4:78:5d:c5:0a:78:23:c5:3c:2f:6c:
f6:56:c4:3c:b6:a4:ba:fa:b8:fe:a2:12:9a:1a:70:
a1:1a:c1:a4:ee:91:ca:e3:b8:52:57:ef:d5:de:7a:
37:42:20:9a:a3:d2:eb:b4:d8:b2:47:f7:2d:a4:0d:
ee:ea:e5:d8:17:c0:ac:02:1d:9e:b7:24:91:28:38:
6f:81:bf:95:09:fc:b7:ba:dc:14:a1:62:b2:d5:65:
a1:42:a3:e5:d7:12:ee:f8:a1:a2:9d:d9:51:cf:50:
d7:09:8a:39:e9:2d:09:c0:38:31:50:e3:bc:83:93:
f5:81:71:d6:b0:fc:30:c6:02:37:8a:1d:71:0e:13:
fd:f9:74:77:61:89:f6:02:bc:48:6a:27:03:ec:26:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:1B:83:96:77:0D:F0:86:BD:B2:26:AB:E5:36:D6:B8:D1:D0:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65321634B2EC11F094E8F3CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.54.0/23
Signature Algorithm: sha256WithRSAEncryption
60:1e:87:9a:58:26:66:dd:43:5b:03:70:48:a2:38:28:0b:2b:
f2:df:9f:d7:f7:b8:b2:41:3c:a7:09:be:79:86:85:f4:19:f8:
bf:a8:58:7a:ae:25:a2:ee:43:4b:08:7a:1a:18:4e:25:97:bf:
4f:94:df:29:5c:15:e7:cf:ef:ad:c6:92:26:c9:f9:7e:23:0e:
53:a8:62:fb:fe:6b:88:88:9b:de:9e:b5:ea:c5:f6:87:56:2f:
76:e2:7f:1d:38:7d:74:3c:16:63:e7:1c:71:60:45:2b:91:20:
d8:d2:5b:3c:86:b0:c9:7d:d7:82:29:1f:89:88:61:51:06:66:
ce:03:57:f3:47:1e:2b:b6:47:ef:93:79:91:53:03:04:12:a8:
a8:59:d2:7f:b8:b2:c0:cb:46:67:c5:26:12:e5:73:3e:fe:a5:
c6:48:18:7d:97:17:34:aa:c9:28:55:38:82:cc:79:99:26:c1:
94:0a:f0:fe:ba:9a:c6:a2:a7:72:58:40:e8:3e:47:03:bd:59:
91:56:bd:8d:1a:bf:61:05:af:5d:61:da:b0:07:2c:93:87:67:
d2:5e:8f:4c:52:e8:ef:0e:f7:db:87:d0:d8:73:8a:7a:38:e0:
eb:f3:d8:fe:1e:30:8a:fd:c3:c6:73:d6:58:98:c2:93:a7:c0:
26:3a:1e:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYKjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI3MDQyMTE2WhcNMjUxMTMwMDQyMTE2WjAYMRYw
FAYDVQQDEw02OGZlZjM0My00NWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzwFd9c08IdTHtxGXLl0qwZFRF7enLZ7/GYT1iPNFZzRC5uml/suz7409
/SvO3pe/uXcifsdAuOF2reMYfcd9er7RHnHdgkUHxvMs4fQ16wkSMIGB0vFeQYfC
Uss6rCL2flin+fmKqD+xaGo71HhdxQp4I8U8L2z2VsQ8tqS6+rj+ohKaGnChGsGk
7pHK47hSV+/V3no3QiCao9LrtNiyR/ctpA3u6uXYF8CsAh2etySRKDhvgb+VCfy3
utwUoWKy1WWhQqPl1xLu+KGindlRz1DXCYo56S0JwDgxUOO8g5P1gXHWsPwwxgI3
ih1xDhP9+XR3YYn2ArxIaicD7CZmdQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLRu
G4OWdw3whr2yJqvlNta40dAiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NTMyMTYzNEIyRUMxMUYwOTRFOEYzQ0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcw2MA0GCSqGSIb3DQEBCwUA
A4IBAQBgHoeaWCZm3UNbA3BIojgoCyvy35/X97iyQTynCb55hoX0Gfi/qFh6riWi
7kNLCHoaGE4ll79PlN8pXBXnz++txpImyfl+Iw5TqGL7/muIiJvenrXqxfaHVi92
4n8dOH10PBZj5xxxYEUrkSDY0ls8hrDJfdeCKR+JiGFRBmbOA1fzRx4rtkfvk3mR
UwMEEqioWdJ/uLLAy0ZnxSYS5XM+/qXGSBh9lxc0qskoVTiCzHmZJsGUCvD+uprG
oqdyWEDoPkcDvVmRVr2NGr9hBa9dYdqwByyTh2fSXo9MUujvDvfbh9DYc4p6OODr
89j+HjCK/cPGc9ZYmMKTp8AmOh5L
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:55 2025 by rpki-client