Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA588E56B00D11F089F910F1DAE4EC9C.roa
File: EA588E56B00D11F089F910F1DAE4EC9C.roa (raw, json)
Hash identifier: o29TXt1xw+wH8HTkHD6xLQSrIYmg2mVyKylY6vBh7Ds=
Subject key identifier: E7:CF:97:15:BD:C2:EF:F8:30:5E:6D:60:8F:A6:33:9B:C6:CE:8C:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018260
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA588E56B00D11F089F910F1DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 12:43:46 +0000
ROA not before: Thu 23 Oct 2025 12:43:42 +0000
ROA not after: Fri 28 Nov 2025 12:43:42 +0000
asID: 48031
IP address blocks: 45.200.181.0/24 maxlen: 24
45.200.182.0/24 maxlen: 24
45.200.183.0/24 maxlen: 24
45.200.184.0/24 maxlen: 24
45.200.185.0/24 maxlen: 24
45.200.186.0/24 maxlen: 24
45.200.187.0/24 maxlen: 24
45.200.188.0/24 maxlen: 24
45.200.189.0/24 maxlen: 24
45.200.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98912 (0x18260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 12:43:42 2025 GMT
Not After : Nov 28 12:43:42 2025 GMT
Subject: CN=68fa2302-a90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:38:dc:e9:75:78:d4:ee:54:dd:8b:82:0d:
6b:69:b1:ef:ce:b9:dd:d4:f0:8f:87:46:55:1d:68:
e6:9a:87:9e:03:ca:80:ac:38:c9:60:25:24:f6:d5:
86:06:e9:67:34:c9:de:0d:95:80:7f:cd:6f:0f:df:
5f:16:1f:1d:4f:91:75:65:cf:bd:e6:d0:28:76:8b:
29:5e:c1:a0:8c:29:ea:ef:bb:2e:32:89:63:30:13:
fa:4b:cb:6b:37:d7:90:ad:ca:50:00:9d:0e:81:b1:
d4:c2:3c:93:f1:ba:02:75:bd:e4:76:78:78:ea:8b:
2a:50:f3:fc:01:a1:fd:5d:d6:0a:7b:2a:75:5b:b4:
06:fd:9a:f5:18:29:cb:f9:ee:19:5a:55:ab:7e:35:
a7:4c:66:b6:25:36:84:9e:89:83:4a:ae:4b:10:a2:
be:b4:99:45:48:e6:5b:db:21:4a:fb:6e:a1:a8:a9:
20:bf:c6:76:29:b9:65:cd:9b:0a:cf:d2:88:2c:f1:
d3:3c:30:29:9b:99:6a:ff:30:31:d9:69:2d:4f:ff:
29:e0:67:a3:cb:64:49:99:94:9d:b6:7d:e9:0d:c0:
e4:ae:ff:1a:29:cb:c6:13:44:f6:41:5f:1e:ef:fd:
d5:44:ad:44:8f:ed:32:f4:ff:c4:df:dc:03:ed:58:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:97:15:BD:C2:EF:F8:30:5E:6D:60:8F:A6:33:9B:C6:CE:8C:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA588E56B00D11F089F910F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.181.0-45.200.190.255
Signature Algorithm: sha256WithRSAEncryption
8b:b4:f4:25:1a:7c:69:1e:ab:db:6c:cd:b6:43:34:af:81:63:
01:e7:f4:1a:94:6f:d0:bb:97:38:33:55:2e:18:30:d6:5e:e2:
66:60:a0:a0:87:4f:fa:0d:f1:17:fc:84:b7:7f:85:de:52:06:
6e:dc:fa:bf:6a:12:d1:30:03:a2:73:dc:d0:8a:50:8f:96:af:
25:7f:fb:3d:6b:6f:d5:a3:9c:5b:e5:ed:a7:18:15:4e:34:61:
21:29:0f:02:17:5a:de:36:d8:e9:40:8d:d7:56:37:24:bd:e3:
e2:54:03:e2:3b:70:8f:8d:38:50:a6:48:0b:f4:fd:98:f6:3e:
72:10:52:70:47:2c:af:3d:7d:10:eb:29:15:df:eb:20:eb:8c:
3e:ef:df:f5:09:02:69:21:06:43:f3:a5:0c:25:31:c1:36:e5:
a7:f4:ff:6c:eb:20:69:73:91:6f:62:e6:ac:12:35:a8:38:d9:
f8:42:3c:51:d1:95:12:2b:75:d5:24:52:61:28:70:99:2a:21:
18:bf:8a:45:38:7e:a0:99:60:20:03:b0:e6:cb:39:91:99:53:
76:b9:64:d0:4f:d7:eb:9c:7b:42:36:ee:18:7e:7b:f5:d8:e1:
e4:82:28:1b:45:ff:3d:21:cb:27:1c:6c:68:70:eb:d4:ae:47:
88:a7:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:30 2025 by rpki-client