Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/844AEE72B56E11F0ACDAAAB4DAE4EC9C.roa
File: 844AEE72B56E11F0ACDAAAB4DAE4EC9C.roa (raw, json)
Hash identifier: uLgD8decTwIfccbaGvmy2MSyWu3iroQHQ0ebtecwrV8=
Subject key identifier: A6:1F:DF:1C:97:19:EB:A7:2D:5B:0B:A9:39:00:EA:11:B8:F0:80:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018403
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/844AEE72B56E11F0ACDAAAB4DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 08:57:52 +0000
ROA not before: Thu 30 Oct 2025 08:57:47 +0000
ROA not after: Fri 30 Oct 2026 08:57:47 +0000
asID: 328608
IP address blocks: 45.198.234.0/24 maxlen: 24
45.198.235.0/24 maxlen: 24
45.198.236.0/24 maxlen: 24
45.198.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99331 (0x18403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 08:57:47 2025 GMT
Not After : Oct 30 08:57:47 2026 GMT
Subject: CN=69032890-8ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:75:c1:75:95:d3:6b:e0:13:1f:3c:ec:16:
29:b6:9d:9e:ba:5a:6f:63:37:7d:22:cd:b4:91:bf:
7d:64:2c:e1:e2:71:d3:15:da:9f:d6:f0:e2:7d:bd:
00:9c:c9:77:d7:1b:a3:24:64:46:0c:35:4e:85:48:
e5:1c:f8:02:d4:e1:1f:b4:2d:a0:ad:c8:bd:20:f3:
63:5b:27:f7:55:f8:0f:e9:da:9e:6e:80:03:8f:15:
75:d6:b0:2b:d8:a3:f3:d9:cb:e2:0b:a3:e9:0a:2c:
2e:a7:e2:01:b2:b3:6f:f2:d4:6d:da:a4:9d:1a:6a:
68:e0:1c:49:20:67:fb:07:b6:01:9a:7c:3e:d6:20:
ca:46:7c:af:49:ef:c1:fe:e4:eb:cc:2c:a8:42:6a:
39:6b:f3:2a:f9:df:50:68:1b:42:ce:15:57:f5:e5:
b3:45:15:18:73:99:d4:c7:fe:e9:7e:f4:27:81:4b:
9c:54:0f:1a:56:25:18:22:f9:1d:1e:26:cb:64:9e:
13:b1:ed:24:97:e5:2e:8a:e2:3f:20:5f:76:d5:d4:
b1:b0:e7:f2:71:9e:80:38:d6:11:a5:24:5f:4f:80:
63:da:da:f1:7c:05:de:a3:30:a4:9f:42:42:f0:82:
d2:a3:1f:82:9a:0a:c0:18:1b:97:70:74:a6:44:37:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:DF:1C:97:19:EB:A7:2D:5B:0B:A9:39:00:EA:11:B8:F0:80:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/844AEE72B56E11F0ACDAAAB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.234.0-45.198.237.255
Signature Algorithm: sha256WithRSAEncryption
b1:20:20:70:f9:8e:41:6c:5b:7b:f3:6e:03:48:b4:bb:5f:35:
04:96:9d:52:01:45:38:d7:c5:8f:7d:bc:2a:f9:1b:df:f3:94:
a7:80:02:3a:ff:62:74:2a:28:08:e9:f0:8b:c4:6f:7d:1e:a4:
28:c0:c1:98:c7:fd:cd:33:e5:7e:5c:b1:34:5f:77:51:bf:01:
b3:7e:c2:3e:c2:c0:fe:5f:b6:74:a1:ec:0f:58:76:23:ae:72:
a9:e0:f9:29:a7:60:4b:b2:5a:83:35:e3:16:b8:c8:b5:da:fa:
40:8c:29:08:92:29:4e:24:e8:b5:1f:32:2b:a7:35:a2:8c:99:
6c:07:c0:ae:15:4f:7c:38:db:24:8c:1b:0c:ad:bf:7c:ca:c8:
c2:f4:d5:39:b8:a3:46:32:44:0d:d2:3f:c6:89:e2:a5:08:2e:
d4:db:4e:21:49:f2:ff:9f:42:80:3f:74:9f:bd:ca:73:3d:71:
49:19:64:e9:e4:86:f8:b9:89:b3:d2:3d:65:06:30:55:8c:30:
ad:4e:d5:50:51:47:94:6a:b1:39:77:27:96:ab:55:6e:f9:9b:
e9:57:1d:83:f0:2e:f4:df:bb:4d:51:13:d1:a8:ed:25:6a:75:
e0:63:38:b6:27:51:99:ea:94:3a:d7:6e:84:c2:1f:6e:e5:ea:
bd:07:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:55 2025 by rpki-client