Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCF97C66B4A711F0B190E3DCDAE4EC9C.roa
File: FCF97C66B4A711F0B190E3DCDAE4EC9C.roa (raw, json)
Hash identifier: YYEU2QnKvSoxd0X0ua41qYCdnEOPKE3IZsNACWHqbWc=
Subject key identifier: EF:75:01:00:13:A6:BB:A4:30:34:9A:65:0E:D5:E8:21:05:DD:CB:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCF97C66B4A711F0B190E3DCDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 09:16:45 +0000
ROA not before: Wed 29 Oct 2025 09:16:39 +0000
ROA not after: Thu 04 Dec 2025 09:16:39 +0000
asID: 152599
IP address blocks: 45.196.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99240 (0x183a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 09:16:39 2025 GMT
Not After : Dec 4 09:16:39 2025 GMT
Subject: CN=6901db7d-1d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:7d:f1:08:71:dc:a3:ae:da:fb:6a:16:71:
ed:7f:31:07:8a:a1:ec:83:7f:48:a9:e0:f0:9d:30:
97:08:34:f6:c2:1e:f0:f9:cb:07:89:6a:58:56:cf:
95:43:c6:c8:bb:f0:f0:3b:7a:8f:04:b3:51:bc:3f:
61:43:6e:8e:51:78:b6:13:fe:00:4e:7c:34:3e:13:
97:af:95:06:83:1a:13:09:53:59:01:73:b3:46:2c:
70:f3:e1:33:38:43:9a:96:f4:c9:1b:7c:b7:d1:4b:
62:18:9b:c6:b3:0a:9e:61:8a:b2:80:41:39:f8:f1:
1d:f0:d0:fb:6b:bb:ef:49:af:7c:cc:0c:d2:37:1d:
5a:cc:71:c8:f2:70:97:d9:b3:11:43:1a:84:45:b9:
54:29:5d:40:91:ed:9f:a3:f5:85:36:c8:84:99:8f:
65:36:32:ad:77:db:28:d0:15:a1:7e:1b:8e:e8:95:
42:e1:0f:71:23:18:8c:e0:0d:50:83:2f:02:25:55:
3a:e7:d6:e6:9f:b7:cd:b1:d7:f4:4a:b6:c4:07:3d:
49:bb:7a:6d:f4:c4:90:8c:f8:0e:01:62:5e:ff:81:
0e:5a:9b:d3:f4:7c:a2:03:14:a4:ac:74:ea:dd:91:
d5:a1:74:48:47:35:49:f4:8e:1e:3e:94:e3:80:f8:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:75:01:00:13:A6:BB:A4:30:34:9A:65:0E:D5:E8:21:05:DD:CB:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCF97C66B4A711F0B190E3DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.243.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:32:7f:a1:3c:ed:6c:b3:ef:c3:5f:27:e3:e4:29:9e:c9:62:
f1:e3:f8:d3:f6:e5:61:d2:1b:9b:72:2f:6c:8c:1d:2f:e1:b8:
12:6b:5b:a4:de:5a:fc:c4:93:db:d2:07:29:0e:c5:55:ce:d9:
c1:11:08:92:bf:ce:07:6b:72:b7:e0:32:b6:23:cd:05:4d:9f:
a3:8d:67:32:dc:8f:cf:76:83:09:f6:68:d9:61:70:ed:33:b2:
54:c7:12:13:a6:3a:c0:d5:6a:cb:4f:49:d8:24:18:bf:0d:6b:
29:d6:4d:fe:54:73:dd:e2:a6:a4:53:1b:e7:a3:81:e1:28:c2:
fa:ff:d4:b5:56:9d:54:24:8b:ed:0c:df:4c:60:38:d2:9e:ac:
db:f6:a0:23:46:7c:91:a7:a0:84:bb:32:91:dd:f4:e5:6c:1b:
dc:42:ce:91:1c:80:8b:02:59:ba:6e:35:4c:d2:47:f3:65:5a:
81:61:cc:8c:b4:33:35:5b:97:06:7a:08:5e:88:45:43:9f:c1:
5f:be:fa:cd:0d:eb:cd:c8:30:48:72:7f:d3:0a:75:ae:79:00:
45:2c:07:06:ee:32:06:00:de:3e:d1:da:be:01:7f:fc:bd:1d:
3d:08:41:82:6a:94:a3:cc:15:a4:3c:ef:48:ea:b6:3f:db:9e:
a4:b8:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:04 2025 by rpki-client