Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B058368AB2EB11F0814C9BC9DAE4EC9C.roa
File: B058368AB2EB11F0814C9BC9DAE4EC9C.roa (raw, json)
Hash identifier: DV0BAaP3FS8njpsQK0LcovB699WVEffCeh4Imt0LvaI=
Subject key identifier: 41:29:68:56:78:A9:9D:BB:F3:7D:BC:15:DA:70:FA:ED:BF:88:AC:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B058368AB2EB11F0814C9BC9DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 04:16:20 +0000
ROA not before: Mon 27 Oct 2025 04:16:00 +0000
ROA not after: Sun 30 Nov 2025 04:16:00 +0000
asID: 9304
IP address blocks: 45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 10:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98977 (0x182a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 04:16:00 2025 GMT
Not After : Nov 30 04:16:00 2025 GMT
Subject: CN=68fef214-0629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:df:ec:e2:8b:57:fe:3d:91:6d:55:cf:c5:
4e:36:65:ab:3e:3a:02:93:0e:05:40:82:d0:5d:d5:
d7:24:49:bc:9d:37:96:a3:11:ea:f7:88:e7:75:f5:
5a:f8:e0:34:0c:a5:40:f5:12:47:c7:1f:f6:f3:4e:
11:db:18:ce:66:8e:92:8c:6b:ad:c0:50:a1:bb:67:
6c:f4:ef:0d:05:6a:9e:73:1d:8d:99:71:8a:2c:a2:
70:34:7d:37:bb:84:68:03:3b:f1:53:30:94:aa:25:
ab:27:90:a9:56:e7:eb:3f:70:d5:1d:7e:06:93:a6:
90:3b:c5:31:d7:a4:af:35:70:45:fa:85:23:43:51:
4b:33:e8:1c:b9:aa:e1:75:7f:07:c3:de:13:53:85:
43:9f:7c:2a:61:87:4d:28:33:62:af:2b:69:19:18:
8c:b2:42:81:00:1a:ed:d5:5b:07:21:40:1e:23:f7:
89:ed:fe:cd:b2:a3:1c:12:c4:f0:64:32:b1:82:af:
a7:65:17:c0:4a:c3:d3:b0:d1:e3:17:f0:de:0b:01:
dd:2f:33:d7:0a:35:ed:6c:53:3c:54:c2:b6:45:3f:
4d:9f:73:57:78:a4:37:67:60:a5:1e:69:8e:36:2d:
3c:ba:0e:41:2c:91:e7:64:84:85:23:76:1c:04:30:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:68:56:78:A9:9D:BB:F3:7D:BC:15:DA:70:FA:ED:BF:88:AC:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B058368AB2EB11F0814C9BC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.48.0-45.204.53.255
Signature Algorithm: sha256WithRSAEncryption
29:da:c2:2a:98:54:21:44:6d:14:39:ce:07:5a:b7:be:19:b9:
6f:3c:58:1b:7e:22:e2:c7:da:be:23:43:2f:56:8c:9c:8c:32:
e4:5d:a1:2b:7d:ef:2a:7a:3d:88:95:71:53:65:fe:8c:e6:85:
94:e0:64:65:46:7e:c2:a1:f8:97:92:95:ce:bb:02:2a:61:80:
07:35:18:13:9e:28:36:5f:9e:9e:13:51:f2:8c:16:3f:f0:03:
05:aa:8d:4d:80:4c:c0:82:b9:3f:91:2f:8a:ed:f2:35:ff:e3:
98:a8:c8:5d:ab:9b:00:63:95:58:f2:e7:a2:a7:ae:1a:f5:8a:
d7:bb:37:e1:c6:14:53:c0:a3:13:07:ec:41:3b:28:27:0b:c8:
cf:b1:e3:cb:ec:94:7b:8e:66:df:28:93:8b:80:1e:40:41:10:
88:9e:21:ee:35:c5:59:dd:1a:6b:15:08:59:0b:3e:b8:1f:de:
6c:92:e1:a3:da:27:a4:a4:81:ba:53:d7:84:21:d4:32:29:cc:
95:c3:2f:46:bd:a2:4b:ea:16:ab:fa:c9:94:58:c4:9f:80:fa:
ff:b9:17:4f:2f:47:aa:f4:ba:83:36:c0:57:5b:ab:78:cb:30:
69:13:a0:f0:1a:04:ed:c7:65:38:d6:40:80:b8:df:f8:ee:98:
f6:50:66:ba
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAYKhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI3MDQxNjAwWhcNMjUxMTMwMDQxNjAwWjAYMRYw
FAYDVQQDEw02OGZlZjIxNC0wNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3dXf7OKLV/49kW1Vz8VONmWrPjoCkw4FQILQXdXXJEm8nTeWoxHq94jn
dfVa+OA0DKVA9RJHxx/2804R2xjOZo6SjGutwFChu2ds9O8NBWqecx2NmXGKLKJw
NH03u4RoAzvxUzCUqiWrJ5CpVufrP3DVHX4Gk6aQO8Ux16SvNXBF+oUjQ1FLM+gc
uarhdX8Hw94TU4VDn3wqYYdNKDNirytpGRiMskKBABrt1VsHIUAeI/eJ7f7NsqMc
EsTwZDKxgq+nZRfASsPTsNHjF/DeCwHdLzPXCjXtbFM8VMK2RT9Nn3NXeKQ3Z2Cl
HmmONi08ug5BLJHnZISFI3YcBDB1aQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEEp
aFZ4qZ278328Fdpw+u2/iKwEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMDU4MzY4QUIyRUIxMUYwODE0QzlCQzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQtzDADBAEtzDQwDQYJKoZI
hvcNAQELBQADggEBACnawiqYVCFEbRQ5zgdat74ZuW88WBt+IuLH2r4jQy9WjJyM
MuRdoSt97yp6PYiVcVNl/ozmhZTgZGVGfsKh+JeSlc67AiphgAc1GBOeKDZfnp4T
UfKMFj/wAwWqjU2ATMCCuT+RL4rt8jX/45ioyF2rmwBjlVjy56Knrhr1ite7N+HG
FFPAoxMH7EE7KCcLyM+x48vslHuOZt8ok4uAHkBBEIieIe41xVndGmsVCFkLPrgf
3myS4aPaJ6SkgbpT14Qh1DIpzJXDL0a9okvqFqv6yZRYxJ+A+v+5F08vR6r0uoM2
wFdbq3jLMGkToPAaBO3HZTjWQIC43/jumPZQZro=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:54 2025 by rpki-client