Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CE29C4EB40011F0A4440CB9DAE4EC9C.roa
File: 7CE29C4EB40011F0A4440CB9DAE4EC9C.roa (raw, json)
Hash identifier: /xZ8Ix13JUm0QImjv+4nnfvkYKTOIV11HaCA8MOHKkQ=
Subject key identifier: FB:FE:1C:70:58:3E:82:07:70:D8:60:E3:D4:0F:7A:E4:9E:18:67:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01838A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CE29C4EB40011F0A4440CB9DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:17:44 +0000
ROA not before: Tue 28 Oct 2025 13:17:39 +0000
ROA not after: Wed 10 Dec 2025 13:17:39 +0000
asID: 63139
IP address blocks: 45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
45.197.113.0/24 maxlen: 24
45.197.114.0/24 maxlen: 24
45.197.115.0/24 maxlen: 24
45.197.116.0/24 maxlen: 24
45.197.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99210 (0x1838a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:17:39 2025 GMT
Not After : Dec 10 13:17:39 2025 GMT
Subject: CN=6900c278-efa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:08:64:4c:21:8a:44:f5:ec:7b:dc:a5:c7:
83:11:7a:46:bd:33:ed:1e:08:e7:14:cf:fe:dd:70:
5f:07:cb:65:f7:c2:d9:52:27:ea:b7:a3:94:f9:91:
a1:e6:e5:78:48:29:ec:46:59:95:0f:c6:7a:43:5d:
c4:2f:d1:db:25:a7:82:1a:6f:53:78:d9:35:3a:08:
f4:60:01:14:d0:f6:c4:2b:a2:68:35:ec:c2:82:e4:
da:6f:84:03:e5:a5:77:1c:d6:29:f5:12:3b:01:dd:
fe:dc:37:bf:99:1c:6c:55:ca:7e:6a:d6:89:93:88:
37:8a:61:f6:2b:dd:4d:99:05:3a:4c:e6:92:db:4f:
5f:df:d0:d1:a2:a6:e4:66:a0:39:1d:06:8e:b9:1f:
22:6a:59:82:69:28:27:57:1e:7d:58:76:02:f8:f7:
4a:d1:f5:44:2b:6d:34:89:42:ec:e3:7d:a2:d8:3e:
78:16:b2:b9:a6:01:eb:8b:7d:aa:f0:c0:59:c1:a4:
98:0e:cd:32:95:1e:cc:59:cb:4d:f0:6d:d1:c5:10:
53:77:04:16:ae:20:9f:75:cc:61:4d:89:61:aa:4b:
38:a6:b5:9a:82:6a:c0:99:c5:39:ae:4b:42:8c:ab:
64:e3:bc:59:59:2d:0b:ba:a2:e6:fe:93:ea:43:3a:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:1C:70:58:3E:82:07:70:D8:60:E3:D4:0F:7A:E4:9E:18:67:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CE29C4EB40011F0A4440CB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.98.0-45.197.102.255
45.197.113.0-45.197.117.255
Signature Algorithm: sha256WithRSAEncryption
5a:f6:01:e8:6c:e7:d3:bd:ca:38:aa:6f:d6:75:63:a3:36:27:
2e:b6:21:4b:8b:56:98:f0:2d:35:b5:f4:64:7e:cd:0c:7b:fc:
ff:6a:7c:62:08:b2:62:6e:4f:0e:f5:65:e8:a8:78:76:89:2f:
28:a0:6b:08:f0:fa:d2:2f:a0:73:df:7b:9b:b4:a9:0c:79:d9:
43:77:de:5a:09:94:37:b0:3d:5f:cc:46:ce:d7:1c:82:fc:ae:
25:91:c1:8b:0f:09:38:94:1b:92:89:06:b3:a7:03:62:f0:53:
9a:74:53:43:4a:d6:2f:0f:3a:f5:f8:61:ca:ee:86:c7:75:be:
9b:6c:1d:46:d4:8b:f7:5b:d2:40:9b:06:c9:b7:33:ff:e8:f6:
1c:77:3b:32:59:f0:a8:fc:37:26:62:eb:a3:d5:6b:01:64:99:
26:d9:9c:28:28:d1:98:df:1d:2a:99:f1:a5:b2:37:08:6f:54:
62:a9:4e:7a:5d:bd:ed:0a:c9:2d:80:5d:6d:3e:df:d3:2d:c1:
03:18:db:c4:34:ec:ab:55:79:46:95:6e:74:a1:a5:a3:e1:24:
40:a5:8d:6b:5f:54:68:8c:f8:10:dd:20:6f:9f:d7:84:bf:af:
88:2d:e7:07:1d:a1:f7:47:c8:32:0b:ec:b0:ea:d8:3e:2d:f1:
c5:bb:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:02 2025 by rpki-client