Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AED2E59EB3FE11F0872EA5ACDAE4EC9C.roa
File: AED2E59EB3FE11F0872EA5ACDAE4EC9C.roa (raw, json)
Hash identifier: hHuk6T67VOaftr27aJ1WCDf/Z6M9ERzULQb3KzRg2GY=
Subject key identifier: 41:1F:C0:5A:9B:F3:53:20:E7:9F:B1:64:A3:C6:C5:3F:32:EC:F9:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018386
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AED2E59EB3FE11F0872EA5ACDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:04:49 +0000
ROA not before: Tue 28 Oct 2025 13:04:44 +0000
ROA not after: Wed 10 Dec 2025 13:04:44 +0000
asID: 63139
IP address blocks: 45.197.64.0/24 maxlen: 24
45.197.65.0/24 maxlen: 24
45.197.66.0/24 maxlen: 24
45.197.76.0/24 maxlen: 24
45.197.77.0/24 maxlen: 24
45.197.78.0/24 maxlen: 24
45.197.79.0/24 maxlen: 24
45.197.80.0/24 maxlen: 24
45.197.81.0/24 maxlen: 24
45.197.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99206 (0x18386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:04:44 2025 GMT
Not After : Dec 10 13:04:44 2025 GMT
Subject: CN=6900bf71-58cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:fd:b4:3d:54:ca:9f:20:b6:f5:fa:fb:18:
f3:be:34:6f:34:62:7f:72:38:0b:e4:8c:18:f9:53:
f9:39:4b:50:23:d0:2d:b3:12:b2:63:45:ae:09:32:
1a:2b:7d:08:2a:bb:c1:ff:7d:7b:ad:fa:04:26:90:
64:6d:c7:07:ca:24:1e:eb:3a:29:8c:57:f1:89:db:
3a:8b:fa:73:0d:4c:2e:77:f0:53:e9:12:3e:a2:bb:
7c:61:7c:f9:7e:3d:74:df:c3:40:ea:d3:cd:89:5d:
74:7b:a2:30:5b:91:de:e2:a7:12:09:fe:41:6f:fe:
b7:1c:da:fb:b9:12:b4:48:ea:01:b1:98:25:a2:4a:
1e:6c:2e:96:89:73:5a:d7:01:d4:d5:41:9e:1f:37:
aa:5e:c7:03:9c:7b:37:55:59:89:34:dd:9b:c4:f8:
26:b2:0d:71:49:5c:ab:da:fe:10:74:12:df:38:27:
17:ce:b8:8b:dc:b1:46:6b:ed:11:32:e3:f6:7f:95:
64:e6:7d:01:11:1f:a3:6f:e9:6e:65:7a:6e:bf:77:
61:76:58:95:67:fb:1a:1e:52:46:06:3e:2e:5e:9b:
c5:0c:72:31:76:f2:65:aa:a1:b7:d4:31:ce:98:c5:
f7:25:95:20:14:c5:6b:ca:c2:a3:98:27:d1:7c:6a:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:C0:5A:9B:F3:53:20:E7:9F:B1:64:A3:C6:C5:3F:32:EC:F9:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AED2E59EB3FE11F0872EA5ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0-45.197.66.255
45.197.76.0-45.197.82.255
Signature Algorithm: sha256WithRSAEncryption
2f:99:7d:40:19:de:e6:62:8a:33:e8:a5:c7:3c:e1:4c:be:b7:
8d:79:7d:01:60:8a:e7:b8:8d:9e:02:24:fe:d0:c7:47:dc:8f:
b2:ad:51:f7:58:d0:01:a1:ba:a6:51:cf:0b:b3:37:ef:99:dc:
a9:3b:fa:85:31:8c:72:33:d4:c9:25:59:61:16:a9:12:20:6c:
d7:e2:ee:41:75:f7:46:78:b9:fd:0c:28:44:98:4c:c9:aa:27:
c7:5f:e5:bb:9a:dc:8f:fe:6f:1d:b8:dd:77:6e:b9:44:38:9f:
a7:cf:47:9f:1e:e3:41:40:37:09:78:4a:3e:bd:e5:54:20:ce:
0f:da:d0:a5:88:d3:12:41:99:7b:a8:b4:5c:9d:7b:3d:81:2a:
98:33:4c:6b:96:d6:18:61:69:32:31:9b:12:d7:65:e2:9d:96:
17:27:3d:61:8d:47:72:d6:03:ea:01:61:be:f6:a0:1c:49:88:
23:33:42:b9:03:e9:b4:44:6c:cd:3d:36:27:52:84:12:11:18:
99:f4:d2:5e:69:18:84:eb:c0:d4:b4:52:0e:cd:08:ee:73:28:
b0:37:17:3d:cb:00:16:96:67:97:07:c7:84:5f:fb:06:57:82:
bf:5d:c5:16:1a:70:21:61:a0:b3:f7:bb:7f:b5:0b:0e:65:89:
d9:01:3b:c4
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAYOGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MTMwNDQ0WhcNMjUxMjEwMTMwNDQ0WjAYMRYw
FAYDVQQDEw02OTAwYmY3MS01OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyE39tD1Uyp8gtvX6+xjzvjRvNGJ/cjgL5IwY+VP5OUtQI9AtsxKyY0Wu
CTIaK30IKrvB/317rfoEJpBkbccHyiQe6zopjFfxids6i/pzDUwud/BT6RI+ort8
YXz5fj1038NA6tPNiV10e6IwW5He4qcSCf5Bb/63HNr7uRK0SOoBsZglokoebC6W
iXNa1wHU1UGeHzeqXscDnHs3VVmJNN2bxPgmsg1xSVyr2v4QdBLfOCcXzriL3LFG
a+0RMuP2f5Vk5n0BER+jb+luZXpuv3dhdliVZ/saHlJGBj4uXpvFDHIxdvJlqqG3
1DHOmMX3JZUgFMVrysKjmCfRfGoqUwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFEEf
wFqb81Mg55+xZKPGxT8y7PkzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRUQyRTU5RUIzRkUxMUYwODcyRUE1QUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAYtxUADBAAtxUIwDAMEAi3F
TAMEAC3FUjANBgkqhkiG9w0BAQsFAAOCAQEAL5l9QBne5mKKM+ilxzzhTL63jXl9
AWCK57iNngIk/tDHR9yPsq1R91jQAaG6plHPC7M375ncqTv6hTGMcjPUySVZYRap
EiBs1+LuQXX3Rni5/QwoRJhMyaonx1/lu5rcj/5vHbjdd265RDifp89Hnx7jQUA3
CXhKPr3lVCDOD9rQpYjTEkGZe6i0XJ17PYEqmDNMa5bWGGFpMjGbEtdl4p2WFyc9
YY1HctYD6gFhvvagHEmIIzNCuQPptERszT02J1KEEhEYmfTSXmkYhOvA1LRSDs0I
7nMosDcXPcsAFpZnlwfHhF/7BleCv13FFhpwIWGgs/e7f7ULDmWJ2QE7xA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:50:22 2025 by rpki-client