Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F8D5D48B3DC11F0A480FEDBDAE4EC9C.roa
File: 9F8D5D48B3DC11F0A480FEDBDAE4EC9C.roa (raw, json)
Hash identifier: Sd5E7sH04CBpw4k4ji/tVgaOwZzfoxlpubjvsUVorfw=
Subject key identifier: 13:D3:94:BA:61:C1:4E:BE:64:54:9B:58:5D:B4:DD:19:B2:FE:61:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01835F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F8D5D48B3DC11F0A480FEDBDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 09:01:00 +0000
ROA not before: Tue 28 Oct 2025 09:00:50 +0000
ROA not after: Tue 25 Nov 2025 09:00:50 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
45.201.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99167 (0x1835f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:00:50 2025 GMT
Not After : Nov 25 09:00:50 2025 GMT
Subject: CN=6900864c-fafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:17:5b:41:d8:af:1c:94:5f:da:7a:31:d6:
92:03:16:9e:41:b7:99:47:f6:71:16:57:1a:6c:3a:
f7:fa:f1:54:ca:02:36:1d:b7:a3:42:da:c7:82:ba:
be:3b:3e:5d:2d:08:12:d2:4e:2e:06:85:63:c8:9a:
19:05:2c:a8:2c:49:4b:71:b2:f6:6a:fc:cd:99:51:
da:97:62:08:17:c4:eb:b8:bf:08:2a:23:a3:56:fb:
45:86:9f:92:d4:eb:20:b7:3f:08:30:fa:d3:aa:08:
60:8e:7f:00:f5:ed:b9:1c:1b:a0:48:9e:30:cc:32:
b8:54:6c:a7:38:2e:66:e9:af:e7:83:a6:9a:64:ca:
69:e2:77:b5:ea:59:b1:ae:6b:10:d5:4f:48:9d:ab:
9e:45:e7:89:ac:f7:1d:2b:fd:62:e8:46:58:2d:f5:
31:43:a0:71:12:89:50:a1:c5:08:0a:6a:9f:e5:6b:
45:3b:ed:79:58:c7:de:81:51:7c:80:c9:89:b1:63:
ec:da:44:35:74:f2:3f:e3:5f:77:fd:78:a5:5a:b4:
ab:92:2b:b8:6e:77:e4:0e:6c:94:18:b4:f9:c4:1a:
65:b3:f1:16:83:58:8d:ab:28:83:9e:62:70:96:8f:
7c:1d:4c:b4:a6:cd:de:40:e4:a6:f9:c9:87:0f:b8:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D3:94:BA:61:C1:4E:BE:64:54:9B:58:5D:B4:DD:19:B2:FE:61:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F8D5D48B3DC11F0A480FEDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:af:08:08:d7:11:2c:40:d9:fc:91:16:50:c8:92:e1:e0:c2:
41:21:24:ca:58:17:09:b7:ef:13:cc:61:b9:c8:f4:aa:b0:e7:
50:f5:25:8f:c1:ab:0f:e9:c5:80:0d:3e:5d:f8:30:79:85:2b:
27:a3:a5:fd:db:93:04:01:7b:aa:a0:04:d9:f5:d5:81:e8:f4:
ca:aa:1a:20:96:ec:9c:68:ec:99:d5:f7:b6:23:1f:c8:2d:ee:
4c:6c:a4:70:ef:70:f3:e6:b3:a4:f4:2f:df:55:76:59:8d:f0:
68:f9:c8:aa:87:2a:24:af:5f:fb:5f:3d:c0:79:87:10:08:f1:
f8:81:09:ec:5b:dc:0a:89:c2:13:17:e9:b0:14:9e:74:53:30:
ff:01:9f:26:30:ed:3e:aa:5c:2f:b6:da:ec:b1:36:2b:eb:95:
34:2f:84:fa:bb:c0:33:e6:b3:33:78:01:46:2b:7c:72:9b:c0:
18:e0:4b:3f:eb:2a:ab:2b:c5:e5:d5:9f:08:57:95:75:90:b8:
96:0e:96:8a:94:f7:6b:82:e7:c4:aa:a8:a4:1d:4c:e2:ce:e5:
d7:b4:92:f8:b8:ab:1c:65:46:a1:11:cc:ea:ae:60:81:31:e4:
95:16:a0:1e:fd:79:9b:9a:da:43:cb:45:66:c7:bb:e5:5d:2b:
8e:bf:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:09 2025 by rpki-client