Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2631D1C49DD711F095525EB5DAE4EC9C.roa
File: 2631D1C49DD711F095525EB5DAE4EC9C.roa (raw, json)
Hash identifier: vlrpHTsT9fmrEXEB5nEBuHlrzmtciqYO6YA6sNJNRsU=
Subject key identifier: F6:B0:8F:39:B1:DD:A8:39:CD:A0:C4:57:B4:4F:CA:C5:E8:F4:90:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2631D1C49DD711F095525EB5DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 08:26:24 +0000
ROA not before: Tue 30 Sep 2025 08:26:18 +0000
ROA not after: Tue 06 Oct 2026 08:26:18 +0000
asID: 45996
IP address blocks: 45.194.98.0/24 maxlen: 24
45.194.99.0/24 maxlen: 24
45.195.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97827 (0x17e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 08:26:18 2025 GMT
Not After : Oct 6 08:26:18 2026 GMT
Subject: CN=68db942f-c3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:a1:30:af:99:6b:99:1a:a9:9f:85:3b:c5:
16:67:f6:79:c3:48:f8:4e:18:e0:53:07:29:f6:cc:
97:44:61:8a:47:b2:20:37:4b:b6:0d:8b:ad:1f:6e:
16:43:d3:c5:1c:b5:57:28:ae:8b:39:4b:a6:9d:66:
46:cc:9a:52:6d:87:40:6e:91:1b:b4:56:54:e4:0e:
7a:a5:ca:e6:ad:79:f8:b1:27:82:57:dd:ae:ec:45:
0f:11:8b:0c:6a:36:e6:21:a8:3a:23:49:6e:16:22:
01:61:7c:93:d2:b0:c4:76:a2:0b:2b:8f:ba:d5:f1:
4c:0c:38:47:23:0c:7a:f6:6b:b7:f5:58:bf:b0:f3:
93:3f:0a:d3:00:f5:83:37:25:22:13:3e:4b:e2:a0:
16:70:42:d1:97:39:d0:a8:d4:6e:6c:14:d8:5a:c9:
fb:b2:23:74:9f:c6:0f:53:da:d6:0d:2c:03:4f:bb:
a0:94:9e:da:d2:df:6a:65:fe:ab:4d:a5:4f:28:ad:
c8:a2:98:63:fb:6c:4e:7a:09:e3:45:ae:f4:b3:d4:
5f:3c:1e:66:f5:ca:9f:59:1e:9f:ba:05:91:28:37:
57:1b:a0:cb:46:af:73:ab:33:b3:c8:6f:16:30:fa:
74:3b:60:5a:c8:3e:e0:d2:39:9e:9d:fd:6c:6d:3e:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:8F:39:B1:DD:A8:39:CD:A0:C4:57:B4:4F:CA:C5:E8:F4:90:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2631D1C49DD711F095525EB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.98.0/23
45.195.73.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8e:d8:e1:a7:e7:ec:51:3e:34:87:0b:57:10:68:f2:43:75:
de:00:9a:02:12:eb:d3:37:ad:43:0f:65:13:b9:a8:f1:ea:2c:
7c:e6:24:44:d9:2e:d8:01:1f:00:f3:f5:e2:2b:36:4d:25:2e:
ea:96:32:e5:77:58:fc:4d:41:39:62:ae:2c:76:b3:0e:c4:64:
02:09:a0:32:79:c8:2f:1e:f4:85:cb:f9:41:e0:6e:cd:ff:43:
78:eb:e0:d4:72:64:c9:91:fd:a5:20:d9:69:d6:4f:f9:8b:35:
28:b8:54:ab:d0:73:3c:29:ad:3e:83:db:0a:75:ff:2c:78:df:
ea:d0:82:db:f1:72:08:b1:50:24:54:40:78:f4:52:d1:43:96:
eb:2a:89:4b:80:62:7c:d5:95:9d:45:b5:60:0e:e6:de:e6:f5:
07:42:d1:a8:92:c4:18:b1:e3:6f:f1:b8:7e:88:c7:7a:83:d0:
eb:f6:b8:9a:81:ca:e1:56:6f:d4:91:54:5b:bc:a0:4a:f9:58:
5d:68:e3:bc:4c:f0:ce:60:40:e8:88:6f:9b:fe:c4:f3:e2:f1:
76:27:cb:d6:c2:e9:ce:87:c9:fa:f2:bc:f8:ad:7b:da:59:ae:
b7:d2:08:7b:af:46:ef:24:36:bf:3a:33:0f:86:df:1f:9a:fd:
d5:19:68:4c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAX4jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTMwMDgyNjE4WhcNMjYxMDA2MDgyNjE4WjAYMRYw
FAYDVQQDEw02OGRiOTQyZi1jM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxHWhMK+Za5kaqZ+FO8UWZ/Z5w0j4ThjgUwcp9syXRGGKR7IgN0u2DYut
H24WQ9PFHLVXKK6LOUumnWZGzJpSbYdAbpEbtFZU5A56pcrmrXn4sSeCV92u7EUP
EYsMajbmIag6I0luFiIBYXyT0rDEdqILK4+61fFMDDhHIwx69mu39Vi/sPOTPwrT
APWDNyUiEz5L4qAWcELRlznQqNRubBTYWsn7siN0n8YPU9rWDSwDT7uglJ7a0t9q
Zf6rTaVPKK3Iophj+2xOegnjRa70s9RfPB5m9cqfWR6fugWRKDdXG6DLRq9zqzOz
yG8WMPp0O2BayD7g0jmenf1sbT72mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaw
jzmx3ag5zaDEV7RPysXo9JASMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNjMxRDFDNDlERDcxMUYwOTU1MjVFQjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLcJiAwQALcNJMA0GCSqGSIb3
DQEBCwUAA4IBAQBijtjhp+fsUT40hwtXEGjyQ3XeAJoCEuvTN61DD2UTuajx6ix8
5iRE2S7YAR8A8/XiKzZNJS7qljLld1j8TUE5Yq4sdrMOxGQCCaAyecgvHvSFy/lB
4G7N/0N46+DUcmTJkf2lINlp1k/5izUouFSr0HM8Ka0+g9sKdf8seN/q0ILb8XII
sVAkVEB49FLRQ5brKolLgGJ81ZWdRbVgDube5vUHQtGoksQYseNv8bh+iMd6g9Dr
9riagcrhVm/UkVRbvKBK+VhdaOO8TPDOYEDoiG+b/sTz4vF2J8vWwunOh8n68rz4
rXvaWa630gh7r0bvJDa/OjMPht8fmv3VGWhM
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:16 2025 by rpki-client