Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E08A3AA804F11F082B0F6D3DAE4EC9C.roa
File: 2E08A3AA804F11F082B0F6D3DAE4EC9C.roa (raw, json)
Hash identifier: Q6viioJUiX848AyfdmOhxtWJtEBCqWfgJrxIr4m2hTg=
Subject key identifier: E2:03:01:70:B5:DD:BF:DD:A5:A2:E2:20:D2:C6:83:46:1A:6D:D9:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E08A3AA804F11F082B0F6D3DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 18:30:02 +0000
ROA not before: Sat 23 Aug 2025 18:29:54 +0000
ROA not after: Tue 30 Sep 2025 18:29:54 +0000
asID: 9304
IP address blocks: 45.198.5.0/24 maxlen: 24
45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.204.154.0/24 maxlen: 24
45.204.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94019 (0x16f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 18:29:54 2025 GMT
Not After : Sep 30 18:29:54 2025 GMT
Subject: CN=68aa08a9-0169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:c5:c0:7a:13:9b:0b:9c:9a:48:4d:9e:ff:
fb:b0:5e:62:05:45:96:09:13:c5:85:ee:55:35:15:
b6:c7:d2:50:c4:2d:08:d0:cf:de:64:bc:08:39:73:
e7:c3:ba:fd:75:08:a9:63:07:87:5c:4c:41:45:47:
b7:fc:42:95:aa:ad:bb:46:10:3f:9a:6f:d1:72:3e:
b1:e9:88:5b:c1:6f:bb:1a:4f:c9:32:65:91:fc:a8:
d6:5d:63:d2:6a:f3:a8:03:f9:59:6f:17:d6:5b:11:
9c:2d:fd:a8:2f:ff:5c:65:73:82:a3:ff:fe:5d:46:
86:20:60:f8:7f:21:0b:83:8c:a3:4b:ee:8e:d0:ab:
f8:6a:32:5e:8f:f7:d4:b2:59:08:88:ac:8f:1d:91:
ff:ae:3b:46:9b:14:9e:41:56:fa:3f:af:5f:8f:c0:
64:8d:6f:16:90:ad:b6:ef:fe:0d:05:0c:98:c7:c6:
83:21:3f:b8:3a:11:f8:6c:20:93:3a:10:a8:df:95:
77:18:32:25:9f:d5:b7:14:b9:67:21:92:81:01:46:
cf:23:96:b4:53:58:58:24:00:f5:f7:f3:12:ed:e5:
3b:aa:59:e9:ac:bd:dc:a6:e9:cf:0b:98:14:18:aa:
f2:e3:75:62:3b:a2:e1:b4:83:22:65:7f:6e:cf:2d:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:03:01:70:B5:DD:BF:DD:A5:A2:E2:20:D2:C6:83:46:1A:6D:D9:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E08A3AA804F11F082B0F6D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.5.0/24
45.198.16.0-45.198.18.255
45.204.154.0/24
45.204.181.0/24
Signature Algorithm: sha256WithRSAEncryption
43:56:0a:8b:92:ac:e4:09:69:a4:e4:ad:c6:26:fb:bb:ed:e3:
06:37:ce:54:b3:87:6b:f9:70:3e:89:74:f9:5f:e7:b6:fa:ce:
4a:bf:b9:8a:91:b7:1e:77:bd:e9:fa:c5:c7:5e:4f:4e:4c:92:
ad:61:c8:03:23:c7:cf:ad:f2:78:22:05:1b:f9:f6:89:69:d3:
da:88:3c:76:16:30:da:b6:51:83:31:cc:02:d3:68:d9:32:0f:
a0:41:40:f6:a2:ff:4c:2f:73:bd:c3:75:38:9a:6e:8f:92:f7:
3b:75:fd:4d:de:df:94:9b:49:8a:b1:b3:4f:68:5a:27:0b:59:
65:80:1f:27:36:67:d1:e2:1e:49:d3:48:bd:fb:9c:94:ef:2b:
a9:f4:09:c3:1a:3d:d2:e9:fb:bd:6a:22:58:88:cc:75:79:1c:
4a:99:32:fc:5b:38:11:87:5f:69:c0:7a:ae:bb:22:c9:b3:f2:
23:69:ad:2e:48:31:8b:c1:81:8c:21:b3:7e:de:9b:8d:1a:2b:
bb:6c:77:16:d4:40:30:21:26:dc:d4:d0:14:ca:8a:4c:a4:11:
7f:7b:a2:a1:67:83:7a:43:6c:d5:c9:2d:02:2b:a6:01:5e:6e:
fa:de:24:d1:5c:d5:58:a9:94:18:80:69:bf:fa:b1:b1:f1:b9:
50:bb:b2:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:20:47 2025 by rpki-client