Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B9CA634AD8F11F0A5C2B6D6DAE4EC9C.roa
File: 8B9CA634AD8F11F0A5C2B6D6DAE4EC9C.roa (raw, json)
Hash identifier: O8PhJgrkBmiA6EjBr0wKSEvbkuuC8xDUajHgQV6aI+k=
Subject key identifier: 77:D5:1A:F0:D8:F7:6D:44:AE:BA:70:E1:C7:2B:DE:57:66:15:24:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018195
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B9CA634AD8F11F0A5C2B6D6DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:34:09 +0000
ROA not before: Mon 20 Oct 2025 08:34:03 +0000
ROA not after: Wed 26 Nov 2025 08:34:03 +0000
asID: 174
IP address blocks: 45.202.111.0/24 maxlen: 24
45.202.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98709 (0x18195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 08:34:03 2025 GMT
Not After : Nov 26 08:34:03 2025 GMT
Subject: CN=68f5f400-5dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:1b:5b:a3:cd:bd:41:d5:fd:0a:68:2a:da:
71:e6:4b:5b:42:a4:8d:d6:c4:f5:bf:fc:a2:10:d9:
67:52:60:80:87:89:28:a5:9a:39:02:ec:c0:1f:0d:
c6:50:53:8f:13:3c:91:83:dc:aa:b6:50:e1:ae:14:
3e:78:93:5c:9e:07:97:da:e7:f8:7d:ec:68:2a:69:
ce:b0:0b:7d:bc:1d:81:ac:4e:f3:ae:db:26:06:cf:
63:6f:59:17:7a:b2:cb:13:11:96:03:52:a5:87:ed:
cd:36:e4:ef:2a:77:93:38:91:31:03:77:0e:9d:f8:
2b:e1:6c:cf:f5:7e:6b:13:3d:c4:38:6a:4e:72:dc:
6d:fa:57:42:36:cf:e7:66:27:ab:c0:42:11:48:5e:
37:72:ad:75:ad:5d:02:f8:c4:78:b9:97:f8:36:65:
74:54:c0:39:81:49:ae:35:45:32:42:7f:44:e8:21:
fa:2a:1c:c9:93:10:3b:27:cc:1f:f7:8c:8c:1a:5b:
e1:ba:55:87:ca:56:96:39:9c:36:d7:8b:bc:5b:6a:
d4:c4:2a:1a:a6:b7:e9:ad:a7:74:f0:c8:82:05:87:
f3:60:55:9f:cd:29:0a:f6:a7:4b:ea:2d:a6:65:f2:
f2:63:7c:bd:3d:c5:10:08:5a:51:97:fa:12:e1:d1:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D5:1A:F0:D8:F7:6D:44:AE:BA:70:E1:C7:2B:DE:57:66:15:24:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B9CA634AD8F11F0A5C2B6D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.111.0-45.202.112.255
Signature Algorithm: sha256WithRSAEncryption
84:97:03:83:ac:b5:87:fe:17:52:3c:81:17:7a:ee:5d:a4:17:
0e:c5:cb:b4:ce:b4:f2:89:76:9b:cb:4f:b7:13:9e:a7:55:29:
6a:a9:b9:2b:55:b6:98:06:a4:66:e2:4c:53:43:b2:ed:ea:4d:
f3:68:85:40:10:b4:eb:a0:9e:60:36:20:7a:04:36:00:25:ca:
52:b2:de:d0:ef:6d:40:8f:ea:5a:22:b8:48:f4:e5:34:55:37:
aa:9c:69:57:d0:19:fb:2d:3d:f7:6a:ca:e7:39:85:27:0b:aa:
5d:41:8c:32:fb:f6:5f:c0:59:2a:87:67:39:ab:8e:1a:67:4c:
f5:81:84:1f:9d:cb:22:58:7a:59:fd:b5:99:9c:21:7f:ba:b9:
5f:bc:36:6f:30:af:f2:2b:e3:97:9f:3d:03:bb:ec:5b:39:51:
bd:f7:d0:51:19:ea:16:ba:ff:46:97:c9:c6:2c:ff:fe:43:d6:
d9:87:e0:37:d3:8e:21:8a:8f:f8:3a:91:9c:16:7f:d4:19:a8:
e5:f1:cc:b8:c8:00:bb:b1:23:d6:f7:2f:f0:a3:56:84:d2:9a:
9a:11:8d:2b:5a:c1:57:22:0e:b4:7e:75:7c:b6:d3:8e:f3:7c:
14:82:8f:01:8a:4e:26:99:e7:14:b8:50:34:2f:6a:b2:80:14:
2e:85:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:52 2025 by rpki-client