Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B310E98EAD8D11F09774EECDDAE4EC9C.roa
File: B310E98EAD8D11F09774EECDDAE4EC9C.roa (raw, json)
Hash identifier: URuIrXicfRik26q7oVHd43ojoCvLCKXw9EsY9/tNVVM=
Subject key identifier: 94:0E:99:BD:1A:10:14:51:AB:19:AF:5D:77:CF:FE:E6:D7:28:3E:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01818F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B310E98EAD8D11F09774EECDDAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:20:56 +0000
ROA not before: Mon 20 Oct 2025 08:20:51 +0000
ROA not after: Wed 26 Nov 2025 08:20:51 +0000
asID: 9304
IP address blocks: 45.198.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98703 (0x1818f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 08:20:51 2025 GMT
Not After : Nov 26 08:20:51 2025 GMT
Subject: CN=68f5f0e8-6cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:08:6e:f8:3a:c5:bd:f0:62:36:a2:5d:98:
a7:01:c6:82:0b:c7:a5:9e:86:33:a5:f1:45:ef:e5:
c6:b4:b5:32:4e:03:fc:39:76:db:de:36:ce:ce:09:
e9:0a:ec:1d:6d:7c:ff:6e:a8:d4:01:2b:63:9c:16:
c8:91:a8:1d:8e:01:b9:62:de:ca:2c:e2:c8:20:0e:
bd:07:12:0e:88:16:bf:de:a1:21:92:27:61:fe:2d:
75:b1:7d:c1:b1:20:03:ab:44:9b:5c:d0:ff:e7:ad:
6d:aa:a8:93:07:8f:e5:a6:91:cb:c8:e3:7c:c5:44:
5e:21:79:fe:8b:85:2f:2b:09:d6:72:9d:a8:1e:cf:
4f:61:16:85:9a:1c:7e:f3:dc:93:03:4e:13:1c:b3:
ff:9c:e9:49:20:02:d0:5f:cd:34:89:95:2b:06:2f:
c3:ff:a2:bf:89:a5:4d:14:46:a4:e8:f7:17:af:e7:
a0:1f:17:46:d4:82:bc:2d:7f:64:fa:f0:d3:4f:32:
2f:4a:7e:c4:27:eb:9b:b1:66:53:cc:76:e7:5c:55:
ec:de:96:1b:bc:5f:43:59:5a:2e:3c:c1:6f:c6:0a:
97:cf:fa:06:b9:8e:45:41:6d:ec:5d:1d:ff:1e:8b:
fe:d0:8c:b2:d0:2c:9a:df:f8:df:63:c8:59:10:cb:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0E:99:BD:1A:10:14:51:AB:19:AF:5D:77:CF:FE:E6:D7:28:3E:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B310E98EAD8D11F09774EECDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:05:06:13:c4:5c:bc:e8:d2:c9:b6:59:d4:e8:b4:77:47:68:
68:87:91:2d:9f:a8:5c:93:09:56:33:c1:e8:69:b7:b7:3a:8f:
2b:63:d6:61:41:2f:db:d5:9b:83:a4:e4:8c:36:cf:1a:42:41:
e3:0b:ce:05:b3:cd:18:b6:83:e1:80:87:85:48:f6:74:7c:9e:
6d:f1:84:b1:3c:be:61:f0:9d:cb:02:56:73:9b:0b:88:dc:51:
14:42:0f:d8:ab:31:74:f6:80:85:4c:f1:1b:68:16:9b:21:61:
35:df:90:c8:d6:bc:6b:af:e6:fa:aa:93:6a:50:e6:ad:a4:8c:
2c:10:9e:08:13:e1:eb:0f:86:19:cd:a9:ac:2a:53:8a:0d:d4:
34:3f:2e:2c:df:ab:cb:6c:4e:fc:95:92:3f:bc:90:a7:52:cf:
c4:98:89:01:1f:70:dd:94:6a:82:a6:2d:00:6b:4f:c7:be:6a:
48:18:84:1a:fe:fe:44:38:2b:d4:9d:22:e1:e4:cb:17:14:43:
90:a6:d2:4c:c0:d9:32:38:00:53:1d:e7:48:90:d8:1e:8b:5d:
4d:ef:e2:e6:9f:6f:56:6d:b8:42:6a:80:4c:62:89:30:27:c5:
1d:f1:2b:ad:97:44:84:11:35:ed:2d:4b:51:f6:3c:c9:cf:fe:
0e:2e:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:11 2025 by rpki-client