Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BE8CF30AFEE11F08D317DA9DAE4EC9C.roa
File: 8BE8CF30AFEE11F08D317DA9DAE4EC9C.roa (raw, json)
Hash identifier: gwTLekMcNxqX79IcV4gSOLLPKoshKYqhgz2HTkFq7CI=
Subject key identifier: 46:AE:8F:DB:03:DB:02:58:1B:A7:33:C2:FF:89:47:7D:71:78:BC:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018221
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BE8CF30AFEE11F08D317DA9DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 08:59:14 +0000
ROA not before: Thu 23 Oct 2025 08:59:09 +0000
ROA not after: Sun 23 Nov 2025 08:59:09 +0000
asID: 138590
IP address blocks: 45.194.14.0/24 maxlen: 24
45.194.15.0/24 maxlen: 24
45.194.25.0/24 maxlen: 24
45.194.26.0/24 maxlen: 24
45.194.80.0/24 maxlen: 24
45.194.81.0/24 maxlen: 24
45.194.88.0/24 maxlen: 24
45.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98849 (0x18221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 08:59:09 2025 GMT
Not After : Nov 23 08:59:09 2025 GMT
Subject: CN=68f9ee61-a238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:0f:5a:b3:89:82:5e:55:82:87:8a:5f:3e:
5a:4d:ed:e8:56:b5:51:fd:47:78:72:83:4d:bf:bc:
ac:85:b0:29:d0:6f:24:87:27:74:92:fa:0c:a3:7a:
7b:b8:4d:40:89:2d:d6:6e:b3:ba:8c:4b:e6:5b:80:
d3:f1:b2:a9:11:93:79:14:c4:29:57:61:d1:45:0b:
b7:03:06:05:10:14:fe:d2:83:de:89:23:82:87:3d:
50:7d:28:f0:d0:47:c5:fb:55:ef:db:ae:60:7d:39:
bb:c4:fb:dd:86:48:3e:35:12:a8:bf:e5:f1:f9:39:
70:57:84:6b:9f:c3:8e:f1:3e:17:19:30:a3:33:e9:
b0:4c:41:11:94:0c:51:af:79:4a:16:fe:42:1f:88:
8e:9c:75:e0:8b:29:4e:ce:5a:b5:85:e6:08:c5:7e:
10:63:93:5b:b4:ff:0f:e1:09:29:38:60:32:ce:d8:
58:12:d6:75:c4:26:00:f9:24:60:3d:c5:55:32:02:
98:b3:4d:9e:50:c8:a9:94:2b:bb:1e:6e:b3:3b:9d:
be:34:82:e0:40:b7:e7:e1:5e:ae:70:c6:37:af:2f:
e1:f5:86:fd:49:4e:a6:f5:7e:f0:05:3f:7a:98:9c:
c8:ed:f1:2b:b0:0f:46:6a:2d:a4:d9:96:2c:6f:ad:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:8F:DB:03:DB:02:58:1B:A7:33:C2:FF:89:47:7D:71:78:BC:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BE8CF30AFEE11F08D317DA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.14.0/23
45.194.25.0-45.194.26.255
45.194.80.0/23
45.194.88.0/23
Signature Algorithm: sha256WithRSAEncryption
24:67:ef:d3:09:ea:e7:e0:c3:f2:3b:7c:59:fc:5e:1c:bd:46:
13:47:fe:fa:ab:15:f7:58:7c:0f:fb:87:da:07:6f:29:89:3f:
84:30:fc:98:20:ae:a5:e8:12:32:03:12:2b:50:da:f7:cb:db:
b7:00:68:f1:9f:e6:35:90:63:1d:7a:a7:4f:6a:54:10:15:4d:
98:d8:a9:b3:3e:1f:e9:9e:96:b1:46:18:80:f5:d8:63:bf:07:
c2:7c:98:2d:73:1e:7b:44:25:aa:a1:b0:ff:2a:3d:0e:00:a9:
0f:f5:e4:cd:36:16:5c:6e:fd:81:64:48:02:24:c1:7b:22:28:
c3:9f:36:0e:6e:6d:7f:26:be:61:6d:63:a5:74:a2:06:6b:3f:
27:84:33:b7:c7:c6:38:31:83:98:17:02:15:ed:7a:50:9a:72:
7d:bb:b0:39:9c:23:fd:4f:fb:85:ff:90:7d:f0:c0:d8:1c:87:
f0:19:27:ee:67:41:6a:1e:97:0a:3c:d7:5f:25:03:42:df:0f:
bb:30:b4:43:17:db:eb:f5:de:c1:7f:e5:87:d6:05:c2:48:09:
6c:d3:3d:8d:9a:96:e3:ba:1b:08:7f:d0:5a:40:0a:43:0e:08:
28:9d:ed:ac:b8:b3:72:1c:98:c1:2f:76:29:9b:3e:77:84:1d:
a6:8e:78:9f
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAYIhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDIzMDg1OTA5WhcNMjUxMTIzMDg1OTA5WjAYMRYw
FAYDVQQDEw02OGY5ZWU2MS1hMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzsIPWrOJgl5VgoeKXz5aTe3oVrVR/Ud4coNNv7yshbAp0G8khyd0kvoM
o3p7uE1AiS3WbrO6jEvmW4DT8bKpEZN5FMQpV2HRRQu3AwYFEBT+0oPeiSOChz1Q
fSjw0EfF+1Xv265gfTm7xPvdhkg+NRKov+Xx+TlwV4Rrn8OO8T4XGTCjM+mwTEER
lAxRr3lKFv5CH4iOnHXgiylOzlq1heYIxX4QY5NbtP8P4QkpOGAyzthYEtZ1xCYA
+SRgPcVVMgKYs02eUMiplCu7Hm6zO52+NILgQLfn4V6ucMY3ry/h9Yb9SU6m9X7w
BT96mJzI7fErsA9Gai2k2ZYsb62NwwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFEau
j9sD2wJYG6czwv+JR31xeLxbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QkU4Q0YzMEFGRUUxMUYwOEQzMTdEQTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLcIOMAwDBAAtwhkDBAAtwhoD
BAEtwlADBAEtwlgwDQYJKoZIhvcNAQELBQADggEBACRn79MJ6ufgw/I7fFn8Xhy9
RhNH/vqrFfdYfA/7h9oHbymJP4Qw/JggrqXoEjIDEitQ2vfL27cAaPGf5jWQYx16
p09qVBAVTZjYqbM+H+melrFGGID12GO/B8J8mC1zHntEJaqhsP8qPQ4AqQ/15M02
Flxu/YFkSAIkwXsiKMOfNg5ubX8mvmFtY6V0ogZrPyeEM7fHxjgxg5gXAhXtelCa
cn27sDmcI/1P+4X/kH3wwNgch/AZJ+5nQWoelwo8118lA0LfD7swtEMX2+v13sF/
5YfWBcJICWzTPY2aluO6Gwh/0FpACkMOCCid7ay4s3IcmMEvdimbPneEHaaOeJ8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:24 2025 by rpki-client