Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C65E224B38311F09603AF99DAE4EC9C.roa
File: 9C65E224B38311F09603AF99DAE4EC9C.roa (raw, json)
Hash identifier: VN2xuUE4oL98CtWmf6sOKE30slGJtzASUNcGm6MvNw8=
Subject key identifier: 28:37:2C:50:A4:EB:A4:EB:D9:E5:76:C6:0F:89:8B:C9:E8:8D:EF:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01833C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C65E224B38311F09603AF99DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 22:23:50 +0000
ROA not before: Mon 27 Oct 2025 22:23:42 +0000
ROA not after: Wed 03 Dec 2025 22:23:42 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99132 (0x1833c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 22:23:42 2025 GMT
Not After : Dec 3 22:23:42 2025 GMT
Subject: CN=68fff0f6-998e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:75:dd:a9:f8:d1:14:93:c0:18:2d:cd:83:
22:e5:63:5b:76:06:22:3f:e7:f8:9f:fb:5c:89:db:
97:31:bf:db:a6:27:c9:f3:aa:77:80:4d:d7:43:eb:
0a:c7:b6:53:a7:d1:27:9a:ad:0b:e2:83:5c:8d:d7:
bd:23:ef:e2:6b:c3:10:83:7b:81:24:e2:b5:a8:53:
8a:6b:85:f9:d9:05:10:a9:89:46:17:4e:5d:80:74:
a8:de:49:ef:92:1a:03:fe:47:a9:1f:3e:27:ad:e5:
bd:56:07:66:70:fa:16:88:f2:41:46:03:4a:3b:39:
cf:15:f9:f2:3f:dd:6b:3e:ba:25:e7:e9:98:34:86:
23:37:29:2b:49:e6:54:6e:68:3b:60:4e:86:0a:01:
50:ba:19:f4:70:73:44:cd:d7:70:26:d8:a2:fe:e0:
08:93:91:89:68:32:7e:74:c8:d6:66:44:e2:a4:ec:
b2:6a:51:e9:1c:b6:83:c4:00:f9:0f:7b:33:e8:ea:
4b:77:73:be:2c:96:ba:e9:43:7d:0e:8c:c4:c8:1b:
62:4d:47:6b:0b:14:6f:3e:d0:ac:bb:f8:58:df:50:
e0:08:53:b3:02:38:e2:c0:41:2a:df:52:d7:fe:32:
01:68:1b:a9:32:cb:7a:eb:87:82:66:39:21:0c:eb:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:37:2C:50:A4:EB:A4:EB:D9:E5:76:C6:0F:89:8B:C9:E8:8D:EF:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C65E224B38311F09603AF99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e7:88:3c:a6:00:6f:fa:7b:d3:d5:fe:ef:b3:99:2e:1a:12:
aa:dc:d0:37:c0:87:fa:41:00:86:cd:9b:df:02:ba:f6:9c:12:
65:35:fe:f7:db:e2:f9:b7:7c:89:a4:09:bf:a0:f5:60:bc:ae:
eb:64:ff:ee:fc:c5:e1:8d:70:be:ec:01:6a:bb:db:ed:6f:1e:
1c:74:c7:fd:31:4f:72:0f:4f:3e:68:49:8d:8d:59:83:52:54:
ec:78:f8:65:8e:92:c7:50:98:05:6a:a0:09:33:fa:f5:cd:35:
04:9e:e6:1b:ed:5f:20:3d:cc:2a:63:c2:1e:84:eb:f8:f6:37:
54:04:3f:da:c9:be:e3:4a:9a:c2:3e:47:1b:1c:21:f6:1e:da:
b0:87:83:c7:49:16:a5:f1:6e:be:68:e0:3e:5b:50:38:e8:12:
6f:29:b5:33:84:8f:56:bc:41:47:cb:ce:63:60:24:4e:08:d5:
d1:9b:ff:ca:1d:39:48:4a:fa:2c:d5:58:34:4b:ff:3b:5d:a7:
11:38:20:24:2c:cd:6a:e8:e6:61:5e:a8:80:31:ed:03:e4:ae:
2c:2a:79:5c:31:16:41:fe:9b:25:41:dc:8e:73:0a:65:c5:b0:
b0:2f:54:63:97:74:c8:09:70:e1:16:a9:28:b1:79:53:4b:08:
30:c7:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:56 2025 by rpki-client