Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C4943AB3FF11F0B6A1D2B4DAE4EC9C.roa
File: 99C4943AB3FF11F0B6A1D2B4DAE4EC9C.roa (raw, json)
Hash identifier: Rgfz1mnSWEhkfM+FWCJA85ZyVPiZ+/Vw4pmhUT5g5SM=
Subject key identifier: AD:4E:B9:05:F9:7B:F0:BF:80:8C:CC:CE:E5:C7:05:77:56:40:5B:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C4943AB3FF11F0B6A1D2B4DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:11:23 +0000
ROA not before: Tue 28 Oct 2025 13:11:18 +0000
ROA not after: Wed 10 Dec 2025 13:11:18 +0000
asID: 63139
IP address blocks: 45.197.83.0/24 maxlen: 24
45.197.84.0/24 maxlen: 24
45.197.85.0/24 maxlen: 24
45.197.86.0/24 maxlen: 24
45.197.87.0/24 maxlen: 24
45.197.108.0/24 maxlen: 24
45.197.109.0/24 maxlen: 24
45.197.110.0/24 maxlen: 24
45.197.111.0/24 maxlen: 24
45.197.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99208 (0x18388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:11:18 2025 GMT
Not After : Dec 10 13:11:18 2025 GMT
Subject: CN=6900c0fb-f4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:c9:c3:5e:e5:6b:8f:9e:96:13:7b:26:24:
a0:e0:4d:f6:39:72:d8:d1:b1:1e:bc:ea:84:c3:c7:
19:9c:ce:23:f8:c7:26:bf:39:3a:ad:69:fd:4e:a3:
4d:1c:cb:54:3f:d9:a6:e0:dd:e3:35:1d:05:38:70:
ce:2c:08:3b:da:87:49:74:69:93:e6:f6:e3:f9:96:
1a:ef:0f:00:f8:04:a3:5b:74:a2:67:b7:5b:a7:1b:
f1:ae:db:9a:ea:94:9e:b5:0e:80:9d:71:68:c5:a4:
0a:40:48:81:ae:ad:e1:00:f5:c9:39:53:3d:7b:06:
bb:84:61:75:bb:d5:8f:28:0f:46:06:65:ee:fe:e9:
8e:46:69:0c:43:16:75:ec:7d:aa:5c:6e:0b:a7:b3:
46:62:d6:f1:85:4c:31:4d:65:b9:0f:26:cc:61:43:
2b:79:e9:a7:0a:d4:04:c0:50:9c:18:b5:1a:1d:f2:
47:b4:6d:e5:bf:71:31:7d:35:57:84:04:3e:78:d2:
54:fa:6e:06:46:e2:49:bc:f4:83:d7:d9:d3:00:17:
3f:fb:97:57:91:75:50:8e:da:77:83:d0:a5:a9:3b:
8b:ac:33:2c:36:71:0a:a7:ad:16:ff:98:d7:54:f5:
81:41:d4:18:cc:47:06:19:cd:52:00:be:ee:85:fd:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:B9:05:F9:7B:F0:BF:80:8C:CC:CE:E5:C7:05:77:56:40:5B:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C4943AB3FF11F0B6A1D2B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.83.0-45.197.87.255
45.197.108.0-45.197.112.255
Signature Algorithm: sha256WithRSAEncryption
4b:f7:d9:d6:73:f9:1e:95:6b:6c:e3:c7:ba:43:78:b6:6f:2c:
97:1a:a3:58:d0:40:7d:7a:b8:c8:eb:eb:d5:d4:5a:f5:35:68:
5f:ac:92:ee:5a:d9:02:94:82:91:42:d4:ed:b8:ef:e8:01:05:
13:86:96:17:a1:72:80:91:56:af:c5:89:f8:e6:ca:64:dd:77:
25:6e:3f:fa:55:c3:58:77:d0:a3:27:47:7f:10:70:fb:ef:65:
cb:34:5e:a8:af:fd:23:c1:06:0f:fb:a9:ac:91:5b:1c:6b:83:
ec:6b:1b:6a:f8:e3:9e:83:59:da:72:b4:7e:a4:21:d9:ae:b3:
7d:89:a4:40:32:7a:de:ad:ec:51:8b:67:a5:cd:e6:b9:16:47:
cd:63:11:b7:87:ed:1f:f8:fb:70:d4:1b:6f:44:d1:da:eb:9e:
30:0a:af:ae:72:b5:44:46:f4:aa:96:3c:bc:03:30:ef:18:2b:
38:58:5b:f8:83:5b:36:98:df:8d:8f:fd:5e:29:b9:8a:89:3c:
dd:b9:a4:75:16:45:82:e9:52:3c:70:0c:46:9a:59:04:68:51:
f8:02:a7:e5:59:83:49:58:f7:61:b3:82:79:6b:55:32:f5:c9:
37:7b:30:f8:9b:59:4d:87:da:a5:ed:57:60:ff:97:53:3e:94:
00:02:04:aa
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAYOIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MTMxMTE4WhcNMjUxMjEwMTMxMTE4WjAYMRYw
FAYDVQQDEw02OTAwYzBmYi1mNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAucHJw17la4+elhN7JiSg4E32OXLY0bEevOqEw8cZnM4j+Mcmvzk6rWn9
TqNNHMtUP9mm4N3jNR0FOHDOLAg72odJdGmT5vbj+ZYa7w8A+ASjW3SiZ7dbpxvx
rtua6pSetQ6AnXFoxaQKQEiBrq3hAPXJOVM9ewa7hGF1u9WPKA9GBmXu/umORmkM
QxZ17H2qXG4Lp7NGYtbxhUwxTWW5DybMYUMreemnCtQEwFCcGLUaHfJHtG3lv3Ex
fTVXhAQ+eNJU+m4GRuJJvPSD19nTABc/+5dXkXVQjtp3g9ClqTuLrDMsNnEKp60W
/5jXVPWBQdQYzEcGGc1SAL7uhf3/iQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFK1O
uQX5e/C/gIzMzuXHBXdWQFuwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OUM0OTQzQUIzRkYxMUYwQjZBMUQyQjREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAAtxVMDBAMtxVAwDAMEAi3F
bAMEAC3FcDANBgkqhkiG9w0BAQsFAAOCAQEAS/fZ1nP5HpVrbOPHukN4tm8slxqj
WNBAfXq4yOvr1dRa9TVoX6yS7lrZApSCkULU7bjv6AEFE4aWF6FygJFWr8WJ+ObK
ZN13JW4/+lXDWHfQoydHfxBw++9lyzReqK/9I8EGD/uprJFbHGuD7GsbavjjnoNZ
2nK0fqQh2a6zfYmkQDJ63q3sUYtnpc3muRZHzWMRt4ftH/j7cNQbb0TR2uueMAqv
rnK1REb0qpY8vAMw7xgrOFhb+INbNpjfjY/9Xim5iok83bmkdRZFgulSPHAMRppZ
BGhR+AKn5VmDSVj3YbOCeWtVMvXJN3sw+JtZTYfape1XYP+XUz6UAAIEqg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:52 2025 by rpki-client