Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBD126E9E7A11F0B7D2C1CFDAE4EC9C.roa
File: 2FBD126E9E7A11F0B7D2C1CFDAE4EC9C.roa (raw, json)
Hash identifier: T82aHolXiB/CLaUUucbW3vz+fkQqXaL0TIn7KlEqPtk=
Subject key identifier: 9C:54:72:E6:83:CC:7B:F4:76:8D:AF:40:92:AF:33:FC:B9:13:5E:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBD126E9E7A11F0B7D2C1CFDAE4EC9C.roa
Signing time: Wed 01 Oct 2025 03:53:28 +0000
ROA not before: Wed 01 Oct 2025 03:53:18 +0000
ROA not after: Sat 01 Nov 2025 03:53:18 +0000
asID: 984
IP address blocks: 45.196.101.0/24 maxlen: 24
45.196.102.0/24 maxlen: 24
45.196.103.0/24 maxlen: 24
45.196.105.0/24 maxlen: 24
45.196.108.0/24 maxlen: 24
45.196.113.0/24 maxlen: 24
45.196.120.0/24 maxlen: 24
45.202.103.0/24 maxlen: 24
45.202.104.0/24 maxlen: 24
45.203.137.0/24 maxlen: 24
45.203.138.0/24 maxlen: 24
45.203.248.0/24 maxlen: 24
45.203.249.0/24 maxlen: 24
45.203.251.0/24 maxlen: 24
45.206.53.0/24 maxlen: 24
45.206.56.0/24 maxlen: 24
45.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97844 (0x17e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 03:53:18 2025 GMT
Not After : Nov 1 03:53:18 2025 GMT
Subject: CN=68dca5b7-5ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:8b:cd:3f:98:91:a7:53:20:e3:7e:1b:15:
67:67:ce:5b:0a:27:7d:7e:82:f1:56:f6:48:cf:b2:
0f:73:9e:40:8c:f3:c7:c7:a1:d9:18:9b:44:3f:54:
2f:ac:0b:bb:0f:06:47:01:3f:60:e1:f7:5f:af:b3:
82:dc:0d:e3:23:d9:e4:d3:00:32:76:0c:12:f8:0d:
67:8a:5f:78:5d:f2:53:d2:86:2b:22:a9:35:8b:c2:
87:8b:0f:49:81:fe:1d:8f:04:67:5b:7a:d3:f9:b0:
3d:ac:45:43:84:da:62:4f:1c:2d:9c:8b:14:27:c2:
ec:f3:dc:c9:a0:6e:17:95:82:c8:af:f9:c8:4d:12:
7c:77:1a:73:98:45:85:b3:5c:53:06:93:89:df:cd:
a7:d7:80:75:72:95:f3:14:81:9f:79:02:4c:d4:2b:
99:e3:2b:13:c4:40:bb:52:e4:8e:0c:30:79:a5:19:
ce:ac:b5:b8:60:e0:17:46:57:d5:fd:3e:08:df:91:
29:05:8c:62:b6:59:43:13:82:eb:af:1f:33:2d:3c:
4c:f9:93:31:68:65:9f:ba:06:ec:87:61:60:6b:d8:
48:81:e5:bc:e8:f5:55:55:a0:27:93:eb:d6:aa:a1:
b7:32:ff:58:0f:15:a7:ab:f1:ff:ae:b0:0c:a5:ab:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:54:72:E6:83:CC:7B:F4:76:8D:AF:40:92:AF:33:FC:B9:13:5E:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBD126E9E7A11F0B7D2C1CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.101.0-45.196.103.255
45.196.105.0/24
45.196.108.0/24
45.196.113.0/24
45.196.120.0/24
45.202.103.0-45.202.104.255
45.203.137.0-45.203.138.255
45.203.248.0/23
45.203.251.0/24
45.206.53.0/24
45.206.56.0/24
45.206.59.0/24
Signature Algorithm: sha256WithRSAEncryption
02:55:60:b3:ad:28:6f:79:f2:ac:23:86:02:ed:54:13:dc:17:
33:d2:d6:57:9c:af:3f:50:c2:4f:dd:8b:69:5d:c0:4a:92:27:
00:53:e5:71:48:a8:92:69:4d:b8:5b:ce:70:ec:16:ed:68:b9:
c3:36:37:09:88:9c:c4:2b:5a:dd:7c:da:2b:2b:f0:47:91:f0:
41:c3:50:f5:16:ad:b2:f3:bd:37:c1:02:f5:ca:c5:cd:ef:c0:
cb:f8:e6:63:71:19:d3:39:69:c7:8f:22:28:4b:8b:55:d5:08:
89:5f:5a:cb:ba:85:f8:8d:01:68:ed:2b:1e:21:bb:17:77:f4:
5d:a8:c9:5a:cd:61:7d:bd:86:ae:06:41:67:76:9c:da:16:60:
9c:09:0d:a7:4c:5d:73:1c:22:2a:6d:a4:c0:1c:ae:e8:a5:4c:
9d:7a:0d:1c:d9:2f:5c:28:d5:7f:6b:59:2c:d9:92:c2:c7:70:
43:37:40:c1:c7:8e:ac:d5:13:54:76:48:e6:2c:09:b4:33:bf:
a2:b9:3f:34:06:ac:8d:e3:c0:d3:af:d3:31:13:21:1b:a5:86:
df:49:f2:7e:d7:27:7b:55:89:45:0f:b5:94:62:24:8e:f1:6c:
70:c3:98:c8:a7:a8:f3:4c:f3:e9:4d:bf:0a:18:1c:82:41:21:
99:48:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:42 2025 by rpki-client