Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6346FCB33911F0AD8392C8DAE4EC9C.roa
File: DE6346FCB33911F0AD8392C8DAE4EC9C.roa (raw, json)
Hash identifier: gWIDObnY8Z5GdudHdOPQM4tgXmI/QVuLOyS7GhN7ucA=
Subject key identifier: A5:C8:C1:ED:E0:07:5D:E7:9A:40:8F:C0:6B:72:EF:F1:B8:94:DD:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6346FCB33911F0AD8392C8DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 13:35:58 +0000
ROA not before: Mon 27 Oct 2025 13:35:53 +0000
ROA not after: Sun 30 Nov 2025 13:35:53 +0000
asID: 328608
IP address blocks: 45.196.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99066 (0x182fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 13:35:53 2025 GMT
Not After : Nov 30 13:35:53 2025 GMT
Subject: CN=68ff753e-baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:74:c7:1c:81:3c:5b:d5:d4:19:23:41:f3:
95:a2:7c:a9:b0:d1:fc:33:de:e4:89:58:a1:fb:2a:
1e:d2:43:bb:2a:1e:2b:f9:26:54:7f:6d:b1:20:a5:
be:75:d1:ba:05:35:1b:c4:2a:4f:b7:d2:23:5d:74:
43:42:42:f1:1a:40:cd:d1:cb:ef:87:5c:ad:5a:aa:
d7:8f:74:4a:69:49:4e:9b:dc:c3:b9:53:97:2d:12:
f7:f3:ba:08:29:2a:18:5f:7b:fb:04:11:cd:53:5a:
4c:0c:25:6f:8d:60:ee:32:f1:34:28:89:d1:0d:39:
ce:72:54:f9:03:a3:41:c2:9c:86:fd:f1:70:da:6c:
54:ed:eb:cf:d2:bc:96:d2:92:17:9c:2d:3e:a8:ef:
e4:96:ce:4d:ba:0f:0d:1c:6d:ce:a1:d0:0e:f1:fa:
fd:04:16:ee:c3:6c:fb:df:15:8b:f2:5e:86:e6:a6:
eb:da:11:13:5b:31:23:34:57:87:e9:9c:64:d8:34:
7c:42:b8:87:03:a3:a7:a3:a2:0f:0b:18:b3:48:b4:
5e:a0:78:b3:65:a6:28:a9:82:41:19:7a:c7:5c:55:
f9:f9:51:b4:ac:9f:59:fd:29:8c:43:c3:ca:22:95:
19:54:3c:17:81:50:b2:4f:30:74:b6:2b:5d:c1:ad:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:C1:ED:E0:07:5D:E7:9A:40:8F:C0:6B:72:EF:F1:B8:94:DD:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6346FCB33911F0AD8392C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5c:27:9a:ea:3b:24:aa:70:47:bb:5c:08:4e:fe:ab:f7:1d:
0a:43:9d:2f:9a:7d:39:04:25:c6:5f:f9:57:66:e6:b1:0a:14:
d1:d6:83:29:fe:18:5b:34:30:30:7c:00:0c:3c:9f:34:7a:97:
a9:47:d3:65:02:26:41:b7:57:0d:46:07:e6:5a:a4:2d:3c:13:
e2:43:72:cf:91:c4:f1:42:d4:e1:9b:95:49:b7:0b:87:ce:d6:
73:e7:fa:70:d8:39:30:0a:7a:f3:2b:1e:e6:e5:e3:c0:fb:c0:
0d:c3:ff:af:71:fe:fc:54:23:f4:da:65:bb:b9:32:32:00:4e:
a6:df:d1:78:7e:36:53:00:9e:b0:4a:b5:37:11:dc:c6:f7:a2:
30:61:a1:58:22:a9:74:34:36:9f:65:ea:60:48:0d:56:31:93:
7e:d9:fd:26:07:1e:1c:c0:86:a1:d9:df:b4:c3:a1:52:4e:4d:
e0:1b:5f:c8:37:84:22:f6:23:05:d0:e7:62:fb:cb:e8:18:2f:
d8:88:3a:67:24:67:aa:33:1b:c2:e0:70:e7:22:31:b7:b2:dd:
9b:34:a9:b2:f7:d9:f8:51:0b:1e:02:34:01:57:bd:84:8f:30:
24:81:aa:e7:d2:2a:ea:b2:d8:c6:4f:1c:31:94:f4:e4:98:d1:
ef:77:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:03 2025 by rpki-client