Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6003E30B89D11F0A44587BBDAE4EC9C.roa
File: C6003E30B89D11F0A44587BBDAE4EC9C.roa (raw, json)
Hash identifier: Qw4sMtFQY/WdxfJnueekLO/sTby9H+EwrrP/pmu5Cek=
Subject key identifier: 46:1C:73:D2:F0:DE:4C:E6:B2:2B:41:8F:38:EC:8E:41:51:3F:28:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01848F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6003E30B89D11F0A44587BBDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:13:42 +0000
ROA not before: Mon 03 Nov 2025 10:13:38 +0000
ROA not after: Mon 08 Dec 2025 10:13:38 +0000
asID: 62084
IP address blocks: 45.204.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99471 (0x1848f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 10:13:38 2025 GMT
Not After : Dec 8 10:13:38 2025 GMT
Subject: CN=69088056-9c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:1a:f9:85:4a:41:fc:41:76:fd:4f:7d:87:
5f:1a:6c:98:2c:35:e7:d9:73:21:bc:1e:2e:3a:bd:
a1:f3:70:19:ba:6c:c9:0c:9a:02:8e:9b:d5:e3:ec:
59:cc:5f:c1:67:99:4f:fd:17:54:3f:f7:ef:d7:c8:
68:ae:c4:d0:36:16:3e:ef:b5:4d:b2:42:bc:63:bb:
31:a6:6e:2b:3f:99:62:8e:06:a2:d6:23:46:09:0a:
2d:8d:6c:da:2d:cc:34:ac:53:7d:8c:11:34:2b:9f:
98:ad:3f:9e:94:bc:f3:2d:e7:0b:e7:21:51:30:b8:
67:fc:fc:a2:75:db:b9:64:43:e9:9f:95:9b:cf:ad:
ca:28:9f:58:34:c6:aa:01:48:87:69:83:e5:c8:fe:
8e:a6:e7:29:a2:91:14:57:f9:3b:e1:c6:41:8a:e9:
28:54:99:a0:4c:93:3d:82:44:72:94:90:37:13:dd:
8d:22:08:da:f4:38:3b:3a:27:79:93:46:8e:dd:37:
b6:2c:b3:ec:6c:21:56:8b:09:d0:ea:c8:8a:a3:3c:
ca:b2:c8:2e:11:5b:10:ae:05:e9:e2:7e:ec:18:78:
14:74:e2:95:fb:a7:3a:73:51:a6:10:90:71:c5:02:
71:01:ab:e6:c4:8c:20:a3:f1:59:5e:01:15:3d:2e:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:73:D2:F0:DE:4C:E6:B2:2B:41:8F:38:EC:8E:41:51:3F:28:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6003E30B89D11F0A44587BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.69.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4f:1d:1b:5d:56:8e:18:87:8e:8f:91:8b:fd:64:ee:f7:94:
27:e0:89:54:67:bb:33:4b:5e:5d:92:ba:03:cf:b7:33:76:ae:
ee:a3:71:65:6d:11:c6:41:49:81:cf:27:1f:e5:e0:9c:99:42:
3b:45:35:f4:e7:3d:3d:db:5f:a6:f4:14:bf:c3:1d:87:8a:07:
af:6b:d1:2d:c6:c2:eb:98:56:be:76:a6:1e:a9:63:54:32:8e:
dc:9b:ed:6c:6d:f3:dd:f5:03:37:30:87:07:ee:37:73:b2:ac:
fc:8e:d5:b8:1f:09:f9:c5:f4:24:72:60:0e:18:d6:31:77:18:
69:3c:9f:52:92:65:b2:21:31:3a:e9:db:de:24:d3:c7:9b:e3:
71:91:ad:88:b7:71:85:22:26:87:fd:51:ed:7f:42:f4:0e:c6:
20:61:c1:b1:e3:4f:1f:21:f7:97:99:e3:5f:b4:3e:78:e1:a1:
2b:86:3c:87:0a:71:5c:e8:9e:37:5c:22:1e:54:be:0f:b7:66:
e1:b8:02:91:53:40:a8:61:a4:dc:83:71:3c:32:9f:aa:a0:ea:
54:23:2e:cf:84:ce:69:0f:b2:a1:24:bc:44:80:49:58:99:14:
ab:fa:06:08:09:cc:8f:ba:8a:b8:e6:9e:5b:8c:c4:42:7e:59:
02:98:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:27:04 2025 by rpki-client