Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292B51609D6F11F084393185DAE4EC9C.roa
File: 292B51609D6F11F084393185DAE4EC9C.roa (raw, json)
Hash identifier: JV/x+Ajx0rS8oNyUAEJN+geuMsZ0R0A2+z/dzDccgM0=
Subject key identifier: 6A:12:5E:7A:F7:EC:7D:02:45:04:D2:F8:14:39:8E:D8:68:F2:47:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292B51609D6F11F084393185DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:02:01 +0000
ROA not before: Mon 29 Sep 2025 20:01:56 +0000
ROA not after: Mon 03 Nov 2025 20:01:56 +0000
asID: 395793
IP address blocks: 45.192.165.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/22 maxlen: 24
45.192.228.0/24 maxlen: 24
45.192.229.0/24 maxlen: 24
45.192.230.0/24 maxlen: 24
45.192.231.0/24 maxlen: 24
45.192.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97773 (0x17ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 20:01:56 2025 GMT
Not After : Nov 3 20:01:56 2025 GMT
Subject: CN=68dae5b9-dfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:b2:f8:45:35:1e:a7:cc:7f:e2:0e:c8:c6:
6a:7e:54:34:3b:88:64:27:f7:06:39:2f:65:7e:3d:
75:a6:0d:b9:9d:eb:fa:83:a1:e8:69:18:da:69:37:
8b:78:29:d2:b4:38:b0:39:62:5f:e2:7e:72:17:26:
e2:ae:ca:17:96:d1:2d:6e:f7:6f:71:d2:96:e6:99:
ef:a6:bd:02:2c:48:ce:ce:b0:37:a8:ee:2f:25:92:
89:be:91:59:e7:b5:4c:23:ff:8e:cc:75:0b:1f:55:
fa:84:c2:7f:5a:39:1c:13:2f:60:ac:6d:ac:14:d5:
15:33:ca:a6:de:7d:48:d0:6d:49:1e:ac:b1:b4:b2:
06:f8:72:e7:13:f9:e0:f9:c2:fd:a8:26:5c:61:1e:
66:aa:51:c2:63:48:c1:8e:dc:15:2e:52:20:eb:90:
13:5f:b2:eb:35:83:47:3a:a1:c2:4f:00:6a:30:0c:
e1:dc:a0:49:c9:3a:c0:f7:a1:2d:b0:09:2a:69:56:
e5:d7:eb:2b:c9:8a:25:53:76:47:d9:e7:39:6f:42:
76:e3:4b:e0:96:8f:1e:67:34:91:3d:38:b0:1b:aa:
a6:f8:74:b6:81:ab:00:58:84:01:2b:ab:d3:bb:3f:
de:87:20:40:78:76:be:e2:9f:7b:f2:2c:b7:31:50:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:12:5E:7A:F7:EC:7D:02:45:04:D2:F8:14:39:8E:D8:68:F2:47:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292B51609D6F11F084393185DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0-45.192.166.255
45.192.227.0-45.192.235.255
Signature Algorithm: sha256WithRSAEncryption
5f:6b:cd:1a:d3:71:12:f6:0d:c4:f4:6b:90:6d:4b:44:3c:89:
ba:fa:ac:28:d3:d4:5e:26:a7:ac:39:b7:2e:4b:7d:95:a6:33:
6b:0c:85:41:f6:f8:1d:7b:8b:78:db:04:79:7b:83:6e:39:4b:
cd:bf:7d:00:09:bb:a2:45:be:7b:d3:49:c3:20:e8:32:ef:e1:
2c:10:72:9d:66:75:2d:63:37:c6:ab:02:42:22:13:f4:84:40:
19:0e:9e:94:88:dd:de:f9:b6:b3:7d:fa:1e:94:f4:42:81:83:
10:f4:83:0f:78:27:f9:55:7d:4f:e4:39:cf:08:6a:bb:58:d9:
7a:39:9b:87:f1:4f:0f:be:3d:49:eb:f2:fe:ad:5f:ea:a1:09:
73:91:02:0c:3a:9b:53:43:f8:68:f6:33:fc:cd:2d:86:8e:18:
54:3d:79:51:5f:31:8b:07:7e:fe:fc:08:01:16:35:40:e0:01:
70:0f:9f:58:97:2d:50:45:70:d2:cc:39:90:24:55:64:1d:85:
f7:3c:df:88:98:62:48:e1:ee:94:66:76:5d:7e:e7:54:03:fb:
25:bb:07:9e:cf:5a:f7:de:77:19:d3:a7:02:73:c8:db:ea:bf:
b6:14:37:ee:79:d7:3e:d4:6b:5f:aa:dc:ce:11:ce:61:77:07:
15:6f:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:53 2025 by rpki-client