Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AFCEF8B37111F0A28440AEDAE4EC9C.roa
File: C6AFCEF8B37111F0A28440AEDAE4EC9C.roa (raw, json)
Hash identifier: wngiDjnRmVz9SoUUS7cao6pyTqdQh+fqaPt9blh3M+w=
Subject key identifier: 2B:27:5E:2F:32:1D:7E:BE:7B:9F:07:FD:E4:57:AB:00:35:14:11:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018324
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AFCEF8B37111F0A28440AEDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 20:16:10 +0000
ROA not before: Mon 27 Oct 2025 20:16:04 +0000
ROA not after: Thu 04 Dec 2025 20:16:04 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
45.192.165.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/22 maxlen: 24
45.192.228.0/24 maxlen: 24
45.192.229.0/24 maxlen: 24
45.192.232.0/22 maxlen: 24
45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99108 (0x18324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 20:16:04 2025 GMT
Not After : Dec 4 20:16:04 2025 GMT
Subject: CN=68ffd30a-a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:c7:de:e0:b5:f8:e2:9f:0a:08:33:ff:7e:
fd:f3:f9:17:75:20:16:e4:42:f0:ac:62:ff:79:34:
9a:94:06:df:3d:6e:f5:98:89:55:14:57:f2:9d:8a:
7d:c9:ae:79:4a:9e:f3:c8:40:37:ec:6d:0d:83:43:
ec:79:5f:dd:9b:dd:92:d2:e3:44:54:89:4b:92:72:
53:3d:6f:e5:2d:7e:15:32:2a:c5:89:8b:7c:8f:c1:
11:61:be:99:e7:63:fa:b9:4e:b2:b6:42:ef:05:23:
09:23:0e:6f:f9:c4:b3:60:1e:f6:b6:c8:15:01:14:
72:2e:37:41:95:fc:6c:35:f9:a6:b2:c7:90:2f:01:
c0:3a:9d:37:ff:2e:d0:4f:3f:52:f7:12:f3:b7:95:
16:4f:46:c3:8c:28:3a:12:42:13:f2:bf:5e:a4:3c:
b4:aa:00:07:1a:9d:e2:6c:2c:63:98:a3:ac:8b:90:
36:fa:70:bd:68:aa:d0:23:6b:f1:a1:88:40:26:49:
18:f5:fe:8e:68:b1:d4:c9:10:16:9d:0a:b6:3d:75:
b4:45:61:62:21:b5:f3:8b:d3:b5:14:17:90:af:42:
88:05:b3:03:7c:b2:30:ee:12:ff:25:99:bc:24:50:
19:de:26:14:ff:e2:3d:00:03:24:2b:a7:e6:0a:91:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:5E:2F:32:1D:7E:BE:7B:9F:07:FD:E4:57:AB:00:35:14:11:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AFCEF8B37111F0A28440AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
45.192.165.0-45.192.166.255
45.192.227.0-45.192.235.255
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
75:2b:91:c6:82:39:cd:d1:93:7e:81:06:e6:4e:30:39:bf:90:
90:c9:b3:8e:d5:19:dc:0b:37:38:aa:33:a6:c9:25:fd:4c:f1:
14:33:57:2e:04:74:e0:29:68:db:9b:1b:03:b2:c7:29:ae:51:
94:fd:01:dc:0c:3a:00:0a:29:a1:53:fd:77:9f:58:17:ea:63:
59:6f:1d:33:a6:37:32:a1:90:a9:f9:38:f0:d8:91:5c:52:92:
7f:d9:0b:09:1f:e2:13:e3:90:1c:98:62:cf:d6:57:dd:52:7e:
13:a2:41:45:5a:47:25:d7:bb:76:4d:ad:e9:93:44:d5:d2:16:
fb:73:64:9f:0c:57:d8:04:42:2b:a5:65:3f:48:81:93:2b:1d:
1b:89:ce:58:e3:4b:02:e6:eb:6d:72:b1:4e:3d:da:4f:83:c0:
ba:30:57:64:86:cd:d6:a3:48:32:0b:77:ce:b7:13:ed:40:37:
40:74:19:ab:b4:7f:26:31:c2:41:d2:03:92:88:48:d3:cd:47:
ac:10:7d:a6:54:b0:60:c8:a8:71:c6:7c:6d:06:26:94:93:b8:
1a:76:ab:b7:31:e9:7d:9d:3b:77:6f:35:9b:47:1e:3c:b8:b8:
e4:48:92:af:3c:14:ec:65:40:34:78:2f:bc:88:5c:93:d6:30:
58:37:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:35 2025 by rpki-client