Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF272AC83A711F08A3EDF8ADAE4EC9C.roa
File: 2BF272AC83A711F08A3EDF8ADAE4EC9C.roa (raw, json)
Hash identifier: 18/DMFLcJ65q+nUqVF4ZITjXfltwWeKvTIoPoCBkqHc=
Subject key identifier: 13:B0:D6:CD:6D:69:5F:A5:27:20:D7:2A:54:6B:32:7A:6E:DE:C3:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01721D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF272AC83A711F08A3EDF8ADAE4EC9C.roa
Signing time: Thu 28 Aug 2025 00:37:27 +0000
ROA not before: Thu 28 Aug 2025 00:00:22 +0000
ROA not after: Sun 23 Aug 2026 00:00:22 +0000
asID: 138995
IP address blocks: 45.192.215.0/24 maxlen: 24
45.192.216.0/24 maxlen: 24
45.192.217.0/24 maxlen: 24
45.192.218.0/24 maxlen: 24
45.192.219.0/24 maxlen: 24
45.192.220.0/24 maxlen: 24
45.192.221.0/24 maxlen: 24
45.192.222.0/24 maxlen: 24
45.192.223.0/24 maxlen: 24
45.192.224.0/24 maxlen: 24
45.192.225.0/24 maxlen: 24
45.192.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94749 (0x1721d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 00:00:22 2025 GMT
Not After : Aug 23 00:00:22 2026 GMT
Subject: CN=68afa4c7-2272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:d9:69:b8:f0:e6:d0:e3:7f:2b:6f:e0:92:
74:a0:fd:5b:a4:f7:c5:86:08:8b:2b:f4:ba:7a:47:
f5:c0:98:b0:47:51:75:b1:78:9f:79:e5:8e:e7:21:
94:f7:d1:77:7d:df:f8:a8:2d:52:82:dd:84:19:d1:
b7:be:5f:bf:34:8d:fa:8f:b0:b5:7e:d3:d5:e5:d0:
bc:9b:60:1d:32:eb:5a:01:6c:b5:ba:48:81:55:28:
ce:32:a8:c5:3c:20:22:1d:08:93:9b:6d:e4:a9:7c:
7c:c3:3c:9a:74:7c:30:6f:88:9d:8f:5a:af:a2:25:
72:64:3a:62:8f:76:e1:18:66:67:52:c2:e1:d9:8a:
99:3d:be:0b:06:7f:7b:e8:3c:a0:f8:7e:be:58:f6:
df:55:db:32:8b:4c:e1:3b:e1:38:ca:97:43:65:ce:
5e:86:7a:58:5d:4f:fb:db:93:ec:f4:76:d9:55:3f:
42:bb:1d:7f:65:f5:96:e3:e7:88:0f:dc:9d:6b:a8:
65:74:16:77:9b:e2:3b:36:8c:45:ea:c9:2b:61:7f:
c0:36:cd:63:74:ae:3b:c1:2f:65:13:33:38:3a:08:
60:55:e2:ff:b2:f5:c4:fe:77:1c:0a:2c:97:4f:61:
6d:fe:d4:06:10:63:4f:9f:20:fa:dd:db:9d:74:2e:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:D6:CD:6D:69:5F:A5:27:20:D7:2A:54:6B:32:7A:6E:DE:C3:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF272AC83A711F08A3EDF8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.215.0-45.192.226.255
Signature Algorithm: sha256WithRSAEncryption
62:76:09:26:40:00:97:5f:81:6c:cd:f7:d0:16:bc:94:7d:e5:
57:12:18:81:55:ac:e4:ae:63:05:e9:29:b4:1c:b3:05:60:bf:
bc:79:bb:3b:31:13:85:d7:6c:7f:c9:29:aa:c1:08:8b:15:98:
f9:be:be:88:36:6d:b3:f6:7e:8c:5e:bf:dc:da:8f:c5:f3:36:
fd:76:51:5a:9f:c6:53:58:3a:31:8f:7a:72:5c:8f:39:de:56:
07:9e:ef:b4:0b:1c:5d:ee:43:ef:5e:50:61:32:22:df:4b:0c:
f4:c2:21:65:10:af:41:cd:ad:a4:69:d7:5d:27:e6:dd:f8:13:
6f:3a:39:4f:30:1d:0f:40:f5:1a:ea:b6:c1:e0:89:ea:27:a7:
00:11:78:46:30:e3:c3:e5:02:97:72:ef:dd:32:0c:75:49:a7:
b0:e7:2b:63:75:69:a9:9a:98:96:5f:87:ec:97:82:65:f4:8c:
2c:b7:56:93:03:49:43:4f:3e:f0:28:9f:3a:19:ab:b2:34:a3:
6e:7f:0a:92:95:c3:6c:35:e9:13:b3:09:90:84:02:a2:78:e2:
b6:d4:24:7c:bf:5a:e0:3e:90:72:52:a3:63:4a:e1:03:96:fc:
0d:d2:a7:9c:91:4f:ef:01:83:2b:44:3a:5f:66:84:c2:7e:53:
f7:fa:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:20:47 2025 by rpki-client