Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F383EF6CB32711F0990A14CCDAE4EC9C.roa
File: F383EF6CB32711F0990A14CCDAE4EC9C.roa (raw, json)
Hash identifier: 5ZWqTmrmHyi4RtnpvScgqowL8Sh8iaSJ1HhHWE6fsgc=
Subject key identifier: 32:62:83:1A:DC:60:23:94:26:A5:05:92:3B:8E:E7:4E:18:7C:88:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F383EF6CB32711F0990A14CCDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 11:27:42 +0000
ROA not before: Mon 27 Oct 2025 11:27:37 +0000
ROA not after: Mon 01 Dec 2025 11:27:37 +0000
asID: 44559
IP address blocks: 45.196.122.0/24 maxlen: 24
45.196.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99044 (0x182e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 11:27:37 2025 GMT
Not After : Dec 1 11:27:37 2025 GMT
Subject: CN=68ff572e-b8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:3a:f0:f3:b7:24:c2:25:0d:4a:46:f4:31:
e8:38:ef:68:9e:4c:db:e5:ea:cb:a1:7a:f0:0a:f4:
65:dc:64:dc:ac:54:09:58:fd:89:69:cf:c6:d7:75:
17:12:c7:ff:cb:1a:2c:e3:1a:0c:dd:c6:90:df:ba:
c5:a5:da:4a:ea:54:ab:89:29:63:a3:a7:68:8c:29:
7b:3a:04:ff:73:88:86:6d:28:4b:e5:64:3e:df:98:
fd:e3:eb:fb:7e:04:c1:a4:a1:cb:05:54:53:0c:8d:
48:a3:22:e8:25:08:cf:33:a9:cb:c8:74:fc:e4:8e:
a6:0d:87:17:87:a6:a8:3d:0b:11:98:50:af:19:7d:
c3:4d:14:06:ae:ae:ec:76:d9:be:c4:96:b0:65:08:
64:ee:0e:29:b1:33:2b:37:a8:b5:07:84:b0:ed:70:
17:d1:48:a4:6b:12:24:0c:ef:52:41:24:ac:95:e9:
7c:e0:9d:4f:2e:fd:74:fe:5d:21:db:a4:1c:ba:c9:
a0:6a:51:48:c6:ed:f1:f7:97:be:f4:19:c9:96:49:
e9:8e:c9:82:f2:62:08:4e:b1:db:fc:42:8e:20:0f:
4d:4b:ef:b5:27:8b:cc:c2:00:c2:75:b0:35:21:81:
81:82:dd:6a:49:8a:e3:ce:d4:38:e7:9b:e0:83:0e:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:83:1A:DC:60:23:94:26:A5:05:92:3B:8E:E7:4E:18:7C:88:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F383EF6CB32711F0990A14CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.122.0/23
Signature Algorithm: sha256WithRSAEncryption
84:c2:9e:69:d4:04:63:b1:d1:ee:cc:dc:ee:e0:5e:7b:48:fc:
fa:8b:2b:a7:64:fc:68:3f:4d:d6:7e:f5:14:8b:d9:74:1c:eb:
94:0c:b7:aa:66:9c:e5:ff:b3:e6:35:65:50:69:ad:b9:b7:80:
14:85:d9:a3:cd:ac:0b:54:e7:ac:98:b3:64:a1:46:e1:0e:40:
32:4a:ad:df:92:93:fc:37:16:79:57:68:f9:cc:03:4c:ba:43:
25:d6:7e:45:b4:c2:09:76:bb:09:8e:79:eb:7c:9d:bf:35:25:
b5:c0:3b:c6:42:46:09:11:82:ec:b7:7d:51:ad:75:b2:f0:7a:
eb:cf:db:6b:97:2a:cc:aa:5f:77:81:5f:71:5b:fa:56:88:0d:
fe:33:dd:ab:7a:ae:e2:ef:71:2f:21:ce:13:f4:0b:3b:f8:66:
a9:d7:d1:97:ee:f3:97:e7:fa:92:e9:6c:07:c8:3d:49:4e:67:
a9:d8:47:e5:c1:c3:69:f6:7a:d3:f2:27:ee:7b:0d:4a:20:51:
a7:50:4e:5d:1c:98:df:19:d3:42:eb:09:15:69:c2:2a:35:59:
00:bd:e8:5b:2d:eb:4e:fd:f5:50:a9:be:8e:b3:3c:ad:28:87:
b0:0b:7e:01:1a:c3:b8:93:4e:1c:37:32:d4:28:05:4b:ee:0f:
2d:45:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:59 2025 by rpki-client