Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22129B2C9D7411F09EB3B8A4DAE4EC9C.roa
File: 22129B2C9D7411F09EB3B8A4DAE4EC9C.roa (raw, json)
Hash identifier: AbHOBJG+lYqusZwiHFW7v0h4NqGF5KCzF0fTxryemMU=
Subject key identifier: 99:91:FE:7D:F1:8E:F1:BA:CF:9A:61:2B:70:C7:69:B6:93:4E:E6:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22129B2C9D7411F09EB3B8A4DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:37:36 +0000
ROA not before: Mon 29 Sep 2025 20:37:32 +0000
ROA not after: Mon 03 Nov 2025 20:37:32 +0000
asID: 401615
IP address blocks: 45.196.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97785 (0x17df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 20:37:32 2025 GMT
Not After : Nov 3 20:37:32 2025 GMT
Subject: CN=68daee10-00f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:53:94:c3:94:41:9e:ad:08:dc:37:27:7d:
df:7a:3d:98:10:9d:77:38:8e:04:01:d1:db:41:4e:
f5:95:66:70:06:3b:d8:7a:21:84:5b:8a:0b:2a:40:
1f:b7:79:b1:c9:95:e1:78:de:df:64:43:8f:8c:c8:
09:25:84:7f:16:e2:25:71:53:6d:46:dd:b8:3e:b6:
b4:6d:49:1c:1a:0b:9a:bd:4d:69:1c:2f:c3:fa:35:
7c:79:3d:20:f7:dd:49:f1:72:aa:17:9f:65:39:49:
25:6f:ac:95:b9:0a:da:77:98:f2:61:42:05:bb:96:
cb:f0:d3:7a:a5:d9:94:33:e5:b0:6e:2e:9e:7f:de:
2e:3a:6f:a4:39:f6:ab:32:7c:0a:cd:ee:15:de:5f:
e2:cb:1d:df:6b:6d:c6:fd:37:29:f6:43:0b:89:3c:
a9:ae:38:5b:f1:e4:a9:a3:2d:78:2d:2c:12:f0:a5:
f2:66:0d:98:0d:df:f3:8b:cb:c1:f1:55:b5:19:35:
52:ed:fb:df:ad:3f:40:f5:3c:4b:69:6b:53:d9:c0:
ef:f4:36:da:6c:95:15:74:a3:20:e6:38:d8:14:a3:
8a:89:38:50:ab:47:e8:8b:ae:68:55:83:8f:04:7e:
eb:31:97:c0:66:b2:fe:84:7b:fc:a8:63:de:ad:d7:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:FE:7D:F1:8E:F1:BA:CF:9A:61:2B:70:C7:69:B6:93:4E:E6:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22129B2C9D7411F09EB3B8A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.218.0/23
Signature Algorithm: sha256WithRSAEncryption
51:9f:75:e5:84:bc:48:72:76:91:e4:63:df:c2:64:05:7b:be:
8d:95:f5:b9:09:ff:8c:eb:82:60:29:ba:0b:35:fb:63:18:1a:
d7:38:74:fc:d6:11:f8:2c:bf:da:61:4d:ed:0e:d1:2c:a8:f0:
79:6f:1d:1c:5f:fa:08:60:62:c3:04:94:5e:50:fe:b5:18:7d:
4a:b1:35:af:95:39:85:4b:fe:60:e2:29:5d:ae:9b:f4:57:38:
5f:50:4e:31:13:ec:21:ed:8e:84:e8:6b:16:bd:64:18:2e:df:
49:86:50:d2:cd:94:fe:df:95:ec:84:40:af:e8:52:9c:dd:13:
1e:9e:60:61:e0:00:e2:6a:68:a8:4c:66:05:2f:12:98:d3:e6:
a7:d4:c2:ef:af:91:bf:2f:ff:17:4a:46:7d:d5:9e:f3:cf:f4:
a1:ad:9f:35:e6:15:92:30:eb:fe:8e:34:bc:74:e5:9f:e8:4b:
c6:79:66:c3:3c:4d:df:d7:8a:0b:3f:b1:a6:5d:6b:0e:55:bd:
65:52:18:22:52:62:70:03:c2:31:15:89:4d:a5:97:80:a0:6b:
b0:21:ba:94:2c:5f:c3:ff:e5:e0:6d:8b:bd:e1:7a:f1:18:84:
f0:f8:e5:d2:86:8d:87:a9:30:3e:b6:cb:61:7f:e2:da:8b:f5:
3d:11:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:58 2025 by rpki-client