Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD40AB7AB70111F0A6B0D59DDAE4EC9C.roa
File: AD40AB7AB70111F0A6B0D59DDAE4EC9C.roa (raw, json)
Hash identifier: vAatDkV8Sc6zlYMaBQNateP+lkm4hF1f2Xmh5Vibv+A=
Subject key identifier: C3:58:10:5B:3D:AD:88:80:5B:14:74:23:41:BA:C3:DA:B7:E7:53:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018431
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD40AB7AB70111F0A6B0D59DDAE4EC9C.roa
Signing time: Sat 01 Nov 2025 09:03:53 +0000
ROA not before: Sat 01 Nov 2025 09:03:32 +0000
ROA not after: Tue 25 Nov 2025 09:03:32 +0000
asID: 984
IP address blocks: 45.196.101.0/24 maxlen: 24
45.196.102.0/24 maxlen: 24
45.196.103.0/24 maxlen: 24
45.196.105.0/24 maxlen: 24
45.196.108.0/24 maxlen: 24
45.196.113.0/24 maxlen: 24
45.196.120.0/24 maxlen: 24
45.202.103.0/24 maxlen: 24
45.202.104.0/24 maxlen: 24
45.203.137.0/24 maxlen: 24
45.203.138.0/24 maxlen: 24
45.203.248.0/24 maxlen: 24
45.203.249.0/24 maxlen: 24
45.203.251.0/24 maxlen: 24
45.206.53.0/24 maxlen: 24
45.206.56.0/24 maxlen: 24
45.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99377 (0x18431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:03:32 2025 GMT
Not After : Nov 25 09:03:32 2025 GMT
Subject: CN=6905ccf9-caac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:fa:2a:94:86:4a:5d:60:da:bf:6b:26:0d:
2a:74:e8:80:4d:6b:79:f4:60:96:31:18:18:30:bd:
74:e9:30:0a:89:c1:c2:3e:74:4d:67:16:53:51:33:
d7:cd:c9:f8:3e:60:2b:90:53:82:c1:b5:c7:27:89:
fa:76:6c:0f:f5:9a:0b:03:17:b0:a3:42:de:9c:a4:
28:18:c1:0c:52:de:67:01:d3:9d:e0:16:89:78:64:
1b:dd:f0:73:33:f4:3a:01:73:1f:a8:8e:7e:e7:91:
c0:6a:9f:65:e0:de:78:cc:de:d3:07:77:62:d6:d7:
9d:7d:e4:59:71:f5:83:cd:d7:cb:23:62:e8:14:11:
05:7b:15:11:f1:bc:84:0a:67:4c:df:62:88:6f:1b:
ca:5c:7a:11:60:21:f5:57:e1:f1:25:7a:af:de:b7:
c7:54:b6:2e:79:32:5e:85:ab:7b:01:58:dc:6a:73:
b0:82:5d:8c:d1:0b:b1:6d:e8:69:de:b7:c4:b0:a1:
e3:d8:ba:d6:14:f3:5e:06:71:f5:43:62:fe:4b:2f:
5d:63:48:5c:b8:f5:6e:8e:28:b5:74:8d:97:48:8f:
07:d4:de:d3:d9:63:cd:3f:8d:d9:68:45:40:c6:38:
71:98:cd:b2:18:57:8d:53:ca:88:dc:42:d4:ca:a8:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:10:5B:3D:AD:88:80:5B:14:74:23:41:BA:C3:DA:B7:E7:53:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD40AB7AB70111F0A6B0D59DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.101.0-45.196.103.255
45.196.105.0/24
45.196.108.0/24
45.196.113.0/24
45.196.120.0/24
45.202.103.0-45.202.104.255
45.203.137.0-45.203.138.255
45.203.248.0/23
45.203.251.0/24
45.206.53.0/24
45.206.56.0/24
45.206.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c2:6e:3b:ad:e9:8a:c2:2f:0e:ff:cd:90:8b:50:83:cb:ba:
2c:76:41:74:28:6a:fc:e7:fb:35:c4:c8:aa:ee:1b:e8:30:83:
4d:73:bf:82:92:26:f4:ad:f1:50:74:71:75:61:08:d0:64:fe:
68:dc:5e:2b:1a:c2:de:51:4c:75:01:96:bb:cc:aa:c4:a1:d7:
71:cb:0b:10:2f:0a:19:7c:60:37:c2:a8:40:02:0a:5e:7c:90:
1c:6a:f0:f2:2f:cb:07:58:c9:7c:83:8b:58:cb:94:aa:3e:d7:
82:aa:60:fb:47:b9:d6:ee:dd:68:1d:93:f3:cc:d6:4c:c5:d2:
95:27:d0:03:e9:7d:bd:45:ae:02:1f:01:f3:83:1d:05:9b:8f:
d1:49:45:d6:45:9c:79:e3:d7:51:e6:64:46:e0:a4:7c:40:97:
b2:ce:95:9e:b0:4c:37:b9:24:2f:1f:35:e3:d6:ae:aa:5c:f5:
e8:15:18:0f:39:d3:71:e1:35:23:f2:4a:08:06:46:df:95:45:
5f:a8:b1:86:32:86:84:c7:de:11:f4:34:63:86:93:58:fe:fe:
b1:7c:c4:93:65:51:7b:cf:23:7b:47:d4:2a:63:ff:7c:f5:c2:
c7:53:b1:78:ae:50:d9:de:11:55:b1:a5:bb:a2:75:12:83:17:
c9:86:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:14 2025 by rpki-client