Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B0A8C5A8EEF11F09F5C39B2DAE4EC9C.roa
File: 2B0A8C5A8EEF11F09F5C39B2DAE4EC9C.roa (raw, json)
Hash identifier: v7mC4z/neeP5GnJnrDJejG5nn2SfC6PkazS/fPlq+2I=
Subject key identifier: 23:E5:CD:27:95:31:A5:3F:F8:04:95:BD:F5:7E:40:4A:99:16:94:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017AC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B0A8C5A8EEF11F09F5C39B2DAE4EC9C.roa
Signing time: Thu 11 Sep 2025 09:10:32 +0000
ROA not before: Thu 11 Sep 2025 09:10:26 +0000
ROA not after: Fri 17 Oct 2025 09:10:26 +0000
asID: 398823
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96963 (0x17ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 09:10:26 2025 GMT
Not After : Oct 17 09:10:26 2025 GMT
Subject: CN=68c29208-2b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:c1:f1:ca:94:2b:37:82:cf:4d:b0:c1:3d:
aa:7f:a2:2b:90:b1:c8:9c:28:a4:63:44:9a:91:d4:
1b:1e:b9:00:ed:db:e9:ed:8c:c6:62:4f:3c:0e:08:
3f:d9:2e:93:53:e2:a5:f9:d8:5b:cf:6b:20:21:f5:
14:04:88:0f:af:36:c4:f9:dd:a1:9b:9d:61:61:98:
5d:7d:81:7b:b4:fb:58:73:f4:3c:c7:28:69:4c:85:
f1:23:b6:ff:c7:6a:44:31:61:21:a6:42:03:36:49:
29:95:17:8d:46:d1:c9:9b:06:97:0b:66:9e:94:2b:
d8:ad:fc:d7:ee:e5:3e:7a:eb:d0:00:5f:26:63:dc:
bf:f1:ee:14:79:23:46:9b:9a:fa:f7:da:2c:79:41:
91:9b:55:2b:72:88:79:16:02:2b:db:31:7c:d8:8b:
ec:5d:6a:b6:b3:c2:6c:5f:7e:82:e6:6c:0c:12:d0:
6c:fa:4e:ae:4a:e5:2c:81:7e:84:64:21:9f:0e:6e:
9b:06:1c:8a:e5:0a:06:1a:c1:b1:92:c6:23:75:93:
d5:e4:55:87:cc:20:07:d5:7f:7c:9d:f6:f2:72:20:
43:cf:5b:83:65:e8:43:61:04:da:1e:29:15:39:79:
80:3a:6c:f5:08:65:07:c8:a4:1c:ce:19:f6:26:33:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:CD:27:95:31:A5:3F:F8:04:95:BD:F5:7E:40:4A:99:16:94:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B0A8C5A8EEF11F09F5C39B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
19:0e:b2:9f:97:79:79:17:4f:50:36:0d:0f:ac:06:31:14:06:
e8:a5:6c:ab:ee:4f:60:68:ca:36:13:02:58:28:d2:03:33:52:
69:16:32:e8:b5:cb:62:56:41:63:11:25:34:4c:c0:2c:29:11:
00:04:0f:ae:bc:c1:e7:c8:aa:a4:84:8a:5a:04:32:9d:eb:1b:
c4:45:fd:c1:85:a9:17:e5:db:02:c9:2c:a4:53:f5:f0:57:87:
a2:81:24:d2:89:c2:31:eb:14:22:d8:72:90:58:86:39:de:42:
9b:09:e4:e1:b4:71:11:72:8a:41:46:3f:36:be:d3:74:b5:76:
89:74:ee:35:4c:90:42:cc:c0:93:ff:29:4b:72:0d:e4:60:ed:
bc:fe:46:b0:37:8d:74:5b:9a:e2:27:ef:af:f0:54:17:d7:f8:
ef:7a:41:28:14:07:f3:07:20:48:72:ac:81:45:f2:21:75:bc:
3d:a7:c5:dc:09:77:01:4b:5a:80:93:04:42:ba:46:83:45:ed:
1c:ed:94:f0:99:1c:d3:73:13:b6:68:b2:f4:bc:47:d6:39:4c:
47:84:e4:4e:31:09:22:46:c6:a6:cd:16:f3:38:37:7e:a3:77:
b9:c1:fa:b2:2f:4e:ef:d1:5c:89:65:e8:47:f9:a0:f3:c8:2c:
bb:29:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:34 2025 by rpki-client