Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0290002E99E011F088CFEF83DAE4EC9C.roa
File: 0290002E99E011F088CFEF83DAE4EC9C.roa (raw, json)
Hash identifier: N0yHVltKcnAz/kncWBJRV7h8DthKESL8yXLtMcvH1IY=
Subject key identifier: 8D:E8:6A:99:7C:BE:40:D8:F1:00:73:58:0E:B3:B1:2E:30:FA:8D:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0290002E99E011F088CFEF83DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 07:19:45 +0000
ROA not before: Thu 25 Sep 2025 07:19:39 +0000
ROA not after: Sun 14 Dec 2025 07:19:39 +0000
asID: 139880
IP address blocks: 45.204.164.0/24 maxlen: 24
45.204.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97594 (0x17d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 25 07:19:39 2025 GMT
Not After : Dec 14 07:19:39 2025 GMT
Subject: CN=68d4ed11-d780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:a3:ee:6b:73:31:aa:8f:0c:58:71:00:9c:
31:a4:6f:63:cb:6e:a6:be:ed:f4:20:1a:31:db:ed:
1c:1d:ce:be:a2:7b:7c:b4:ff:d7:cf:4d:bc:ad:d0:
ea:4f:4a:d8:f7:94:0f:73:0d:2b:04:2e:59:59:5d:
c4:26:89:50:dc:8b:35:18:85:73:d7:d0:c7:39:18:
45:c5:9f:0a:98:ba:1b:6b:de:1c:98:fa:e4:5f:28:
e5:68:be:69:2e:e4:fb:56:72:bf:76:14:48:0e:32:
7e:f6:04:8d:16:35:1e:02:d0:47:79:59:82:6e:d7:
70:85:3b:13:aa:98:f5:9a:66:31:b6:14:b3:da:f7:
55:ef:fe:a2:68:7c:bc:5b:6e:4b:5d:64:5d:58:df:
51:b3:4b:8f:bc:e6:a8:df:d0:ec:c4:7c:c4:e6:7b:
99:5c:da:fc:6d:25:7c:98:50:02:dd:79:48:98:90:
f2:6f:6d:1e:ea:e9:f7:56:e5:fa:98:91:89:23:3b:
01:75:bb:d7:28:6e:7d:5a:7c:ba:6e:21:11:24:bc:
e8:c8:db:9d:a6:57:95:9e:62:e6:58:2d:49:0f:e6:
eb:70:5d:d3:d1:d8:2e:4f:20:6c:2e:3f:58:33:17:
21:26:35:6a:7f:ba:f1:84:d3:a6:16:82:49:78:30:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E8:6A:99:7C:BE:40:D8:F1:00:73:58:0E:B3:B1:2E:30:FA:8D:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0290002E99E011F088CFEF83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:d5:83:e4:9f:75:b6:b4:42:40:41:02:78:67:79:0c:e4:54:
7d:2e:5a:99:c6:64:25:f4:58:cc:e8:70:18:11:00:38:61:b9:
71:05:7f:40:4f:f5:af:8a:aa:64:bd:2e:0a:52:42:f9:c6:d9:
2b:89:b9:c3:ba:5a:e0:74:3e:a5:af:3a:fa:2f:89:a5:69:8c:
ad:3c:07:ca:ad:5b:be:7c:d0:d5:d2:3a:fe:f6:14:ab:6a:0e:
77:9b:3c:82:45:a9:9b:e2:8e:c3:fc:db:82:e9:c5:93:51:33:
9e:b2:32:d5:d9:3a:c7:d9:37:5b:eb:9d:7e:ec:92:e8:64:14:
45:f8:9d:3b:d6:f4:6e:a2:42:f1:e3:89:a9:1d:3a:85:fe:2c:
c4:ba:8b:d2:42:00:9f:d4:9a:de:36:d5:88:4b:bc:ab:49:20:
d9:4d:c7:9d:1c:7f:9a:01:02:52:d5:b8:0d:21:c9:4c:37:fe:
db:a2:4f:c0:63:18:c2:d2:7c:7c:e3:d0:6a:29:b7:ec:6e:64:
47:17:86:6d:cc:32:d5:0a:43:cc:e4:fd:b8:f2:cb:21:dc:07:
47:0c:0e:b3:8a:5e:7c:87:d3:36:df:d0:00:16:cd:f6:90:36:
78:9f:f2:59:bd:cf:45:0a:1e:a8:6d:39:65:ba:55:82:a6:b9:
9d:42:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:01 2025 by rpki-client