Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B9BB10B89E11F0A4CA24C2DAE4EC9C.roa
File: C2B9BB10B89E11F0A4CA24C2DAE4EC9C.roa (raw, json)
Hash identifier: 2Bdy6BPwXQ3JDRzGx77Al6/LP0lgxESpVej1tympM3E=
Subject key identifier: 06:1E:F2:3E:01:D1:65:4B:88:D0:41:9A:83:D6:E8:9E:2B:A3:83:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018495
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B9BB10B89E11F0A4CA24C2DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:20:46 +0000
ROA not before: Mon 03 Nov 2025 10:20:42 +0000
ROA not after: Mon 08 Dec 2025 10:20:42 +0000
asID: 274069
IP address blocks: 45.196.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99477 (0x18495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 10:20:42 2025 GMT
Not After : Dec 8 10:20:42 2025 GMT
Subject: CN=690881fe-5e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:e5:7c:b8:35:43:c0:2b:da:df:22:63:95:
8b:cb:89:16:6f:c0:23:90:ed:20:d9:d5:4e:4b:08:
5c:f6:8a:db:2d:08:0b:8c:c7:79:91:aa:e6:a7:87:
ed:e7:85:6d:c7:ca:8b:f8:ac:0d:5d:c8:82:d3:02:
16:ba:73:a4:4d:50:14:99:68:c6:81:91:fd:e4:dd:
72:05:7d:13:9b:1e:83:35:34:cf:77:9e:02:37:bd:
8a:3f:b3:f4:71:42:7c:46:fd:63:10:c9:ff:27:e6:
b3:a9:98:9b:6f:75:ef:42:df:03:d6:c2:f3:5a:af:
cd:8a:2c:c9:0f:9b:06:97:bf:61:32:67:b7:c0:92:
a4:df:d1:2f:32:c9:27:67:0c:d1:05:f8:fe:3c:52:
b9:fd:fa:84:3a:0a:04:6b:99:99:a6:38:bd:46:46:
7e:9b:25:14:d5:e0:53:57:b8:f3:9f:a3:9e:e6:70:
05:4b:e2:96:86:4d:df:da:54:87:b1:c8:bc:be:0b:
2b:b5:77:1d:73:39:50:d5:96:b7:3e:9d:1d:f1:3c:
40:42:66:8e:71:3a:63:a0:cb:d8:08:d3:86:fe:6f:
f5:eb:30:7f:df:99:36:80:18:88:dd:a1:cb:75:52:
cb:0f:ff:91:ec:31:fe:cf:bf:df:21:27:be:f6:62:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1E:F2:3E:01:D1:65:4B:88:D0:41:9A:83:D6:E8:9E:2B:A3:83:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2B9BB10B89E11F0A4CA24C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:87:db:c7:49:81:a8:75:86:ba:35:b0:00:a9:6f:15:82:72:
f5:b0:e1:87:05:f6:7c:a1:a9:30:3d:f1:5b:68:c5:0d:70:30:
e0:c0:5a:2c:5b:f6:f4:a2:05:f1:13:48:47:2a:75:89:62:31:
0a:7b:12:2f:b6:66:10:a2:d9:3b:ca:74:1d:9c:87:40:ed:2b:
6c:de:46:c1:15:4a:df:a0:ae:50:21:e4:09:b7:29:d8:7c:44:
15:d0:bc:d6:98:9a:c0:0d:5e:77:24:d0:d7:52:dc:2d:c4:6b:
48:2e:43:e3:b1:0d:2b:b1:1f:71:e5:5a:34:2a:be:d2:34:27:
ce:75:1e:8e:34:ed:ff:7d:97:30:26:20:e0:b3:4d:1a:a0:09:
5b:4e:fd:7e:fb:e2:e3:d5:5b:c7:67:13:74:fe:6e:41:77:82:
48:b8:22:b9:7a:95:13:8c:71:5b:06:5b:4b:6e:65:f9:46:01:
b6:dd:58:31:9c:81:a3:0a:67:3e:85:4b:66:a1:67:f1:e9:d8:
e2:f1:40:f4:e8:a3:c4:dd:66:48:b6:3d:10:26:cb:c8:c1:1f:
c7:21:c8:9b:52:e2:90:57:c1:06:4b:00:e0:69:63:eb:6a:4a:
6e:43:64:c6:2e:fa:01:39:86:78:20:d2:80:30:c2:68:23:ec:
0a:d6:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:06 2025 by rpki-client