Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC06A930B8A011F0AFDE90CDDAE4EC9C.roa
File: AC06A930B8A011F0AFDE90CDDAE4EC9C.roa (raw, json)
Hash identifier: Pb6dB59R25hK/2EjJwn8I2k4nqFdH6DS8HH1cd7Abdo=
Subject key identifier: F4:39:8B:7E:28:EF:60:B4:0B:0F:E1:BC:1A:43:D5:90:37:C8:49:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018499
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC06A930B8A011F0AFDE90CDDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:34:28 +0000
ROA not before: Mon 03 Nov 2025 10:34:23 +0000
ROA not after: Wed 10 Dec 2025 10:34:23 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.192.246.0/24 maxlen: 24
45.192.247.0/24 maxlen: 24
45.192.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99481 (0x18499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 10:34:23 2025 GMT
Not After : Dec 10 10:34:23 2025 GMT
Subject: CN=69088533-30d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:0c:55:9a:8e:89:ee:cf:09:82:35:b4:9b:
ac:25:1a:b0:b8:4a:cb:28:cb:26:a2:7b:15:b2:49:
c8:c3:37:8e:d0:df:dd:63:11:d2:7c:ad:88:da:ac:
5f:f2:30:70:26:6c:61:cf:8d:5c:c1:32:87:a8:95:
ee:ae:43:ce:29:ca:ed:9b:10:15:38:00:12:10:7a:
c1:02:10:91:5f:d4:18:4f:a0:89:75:2b:4d:25:60:
01:aa:73:01:de:b5:8b:ed:a7:4b:0a:20:a3:a0:2c:
1f:6f:d6:4e:2c:68:f5:5a:c6:c9:cc:49:28:14:4e:
fe:cf:10:c0:97:4c:45:01:c8:4d:42:a3:38:90:98:
b2:3e:08:9d:8a:ee:73:00:8f:59:5e:7c:50:81:fc:
9f:91:5a:61:54:98:85:62:36:f7:13:a5:3e:ee:f9:
5b:e5:d7:61:55:4a:24:0a:d2:ac:e5:bb:e3:18:d4:
53:93:5d:fe:52:03:ba:38:76:99:c3:ec:dc:2e:a8:
e5:5b:01:ff:2a:24:b8:7a:9a:e5:9d:8e:7f:8c:18:
8b:c2:f6:99:b9:a6:cc:16:03:8d:ab:a2:8a:f1:55:
69:21:2e:5c:a4:7a:84:e9:b5:0b:76:e2:c0:85:15:
4c:cc:d3:0e:ae:eb:72:84:ca:80:e4:6f:0c:90:68:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:39:8B:7E:28:EF:60:B4:0B:0F:E1:BC:1A:43:D5:90:37:C8:49:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC06A930B8A011F0AFDE90CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.192.246.0-45.192.249.255
Signature Algorithm: sha256WithRSAEncryption
25:c4:78:3f:66:17:24:e2:08:cf:4a:07:8e:58:49:82:6e:55:
0b:aa:d7:14:6f:33:9e:cb:22:1c:a3:6b:b6:71:ab:9e:02:eb:
f8:71:44:60:4e:b1:6f:ba:21:ae:1c:23:e5:81:3e:6b:87:68:
5c:25:cd:6a:74:86:e1:bd:35:bc:a2:70:10:e5:21:6b:21:82:
bd:60:bc:9c:e3:9e:c3:af:c7:01:56:3f:f3:8e:b0:33:af:02:
62:92:62:18:bc:f9:37:f4:c5:28:9d:91:0a:cc:cb:91:0e:2f:
76:07:40:7b:27:c6:4a:9f:66:6f:04:4f:6f:46:5e:b4:c6:2c:
52:cb:96:51:9c:94:70:b7:f0:f8:65:3a:45:6c:d2:7e:c5:37:
8c:48:2f:26:59:f0:48:d8:b1:b1:e3:f5:7b:2d:68:02:d5:d7:
ee:3d:59:35:e8:c0:72:ba:ff:e6:ba:42:d6:55:6b:e7:b3:28:
1b:61:4e:61:5f:93:18:18:06:9c:7e:23:0b:fe:5b:e8:cb:97:
be:7c:f4:84:47:ad:21:c7:63:df:93:66:74:9f:08:af:ed:09:
8c:b8:79:67:35:12:32:10:a9:4c:72:f5:18:e8:7c:71:7b:6f:
02:86:4f:6c:9f:fb:7d:94:e3:5b:ed:67:59:14:bf:a6:b7:4e:
ce:2b:0b:f4
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAYSZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMTAzNDIzWhcNMjUxMjEwMTAzNDIzWjAYMRYw
FAYDVQQDEw02OTA4ODUzMy0zMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1iEMVZqOie7PCYI1tJusJRqwuErLKMsmonsVsknIwzeO0N/dYxHSfK2I
2qxf8jBwJmxhz41cwTKHqJXurkPOKcrtmxAVOAASEHrBAhCRX9QYT6CJdStNJWAB
qnMB3rWL7adLCiCjoCwfb9ZOLGj1WsbJzEkoFE7+zxDAl0xFAchNQqM4kJiyPgid
iu5zAI9ZXnxQgfyfkVphVJiFYjb3E6U+7vlb5ddhVUokCtKs5bvjGNRTk13+UgO6
OHaZw+zcLqjlWwH/KiS4eprlnY5/jBiLwvaZuabMFgONq6KK8VVpIS5cpHqE6bUL
duLAhRVMzNMOrutyhMqA5G8MkGiszwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPQ5
i34o72C0Cw/hvBpD1ZA3yEmPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQzA2QTkzMEI4QTAxMUYwQUZERTkwQ0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLcDwMAwDBAEtwPYDBAEtwPgw
DQYJKoZIhvcNAQELBQADggEBACXEeD9mFyTiCM9KB45YSYJuVQuq1xRvM57LIhyj
a7Zxq54C6/hxRGBOsW+6Ia4cI+WBPmuHaFwlzWp0huG9NbyicBDlIWshgr1gvJzj
nsOvxwFWP/OOsDOvAmKSYhi8+Tf0xSidkQrMy5EOL3YHQHsnxkqfZm8ET29GXrTG
LFLLllGclHC38PhlOkVs0n7FN4xILyZZ8EjYsbHj9XstaALV1+49WTXowHK6/+a6
QtZVa+ezKBthTmFfkxgYBpx+Iwv+W+jLl7589IRHrSHHY9+TZnSfCK/tCYy4eWc1
EjIQqUxy9RjofHF7bwKGT2yf+32U41vtZ1kUv6a3Ts4rC/Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:15 2025 by rpki-client