Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3333791AA08711F0BDE30595DAE4EC9C.roa
File: 3333791AA08711F0BDE30595DAE4EC9C.roa (raw, json)
Hash identifier: /sh5DZ+MODcELfiMzWX/3pl98jSiYmUj9i6rSZfvno0=
Subject key identifier: ED:FE:4C:42:C1:50:DB:EF:72:9B:78:B4:D7:56:6F:9A:02:23:4A:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3333791AA08711F0BDE30595DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 18:31:39 +0000
ROA not before: Fri 03 Oct 2025 18:31:34 +0000
ROA not after: Sat 31 Jan 2026 18:31:34 +0000
asID: 328608
IP address blocks: 45.197.180.0/22 maxlen: 24
45.197.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97985 (0x17ec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 3 18:31:34 2025 GMT
Not After : Jan 31 18:31:34 2026 GMT
Subject: CN=68e0168b-536b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:9a:f0:6c:fd:01:fb:2e:90:7d:f2:1c:d9:
3f:29:e5:8c:a2:1a:1f:71:9a:a8:e0:d3:69:2c:15:
09:fc:02:aa:8f:2c:8c:f8:27:4a:9b:e5:30:13:62:
3b:0a:c5:64:60:b4:09:a7:36:16:09:a6:17:2e:5f:
5f:8c:c1:a6:9b:38:5c:0a:e4:c1:c7:1f:01:c7:82:
98:83:ef:bb:62:dd:01:9c:d1:cf:26:3b:2b:d3:da:
5e:06:42:c4:b5:a6:d6:5e:8e:9a:8b:0f:28:e5:ab:
d1:a3:39:fc:a8:60:44:c2:ae:98:f7:57:c9:74:e3:
11:35:95:cd:9a:0c:a0:7b:ba:f5:39:e6:80:c9:76:
2a:d5:b7:3d:94:05:30:af:c8:0b:66:ae:96:96:13:
f7:c4:b8:61:24:fc:bf:5a:38:a6:77:1a:d6:26:19:
83:de:72:ee:c9:93:16:18:1c:3c:b7:41:91:4c:63:
64:2a:47:58:24:f1:f7:55:8e:fa:76:fb:64:72:e9:
7a:b5:4e:98:07:23:6c:74:b6:41:64:59:ee:36:4c:
c1:08:07:40:10:69:de:9e:7f:0e:1e:0e:33:2b:8b:
c4:f2:ee:e7:a0:17:32:d0:48:64:42:87:09:77:ff:
14:cd:cb:1e:9f:4e:e5:d8:65:f6:1c:40:3d:b2:f5:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:4C:42:C1:50:DB:EF:72:9B:78:B4:D7:56:6F:9A:02:23:4A:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3333791AA08711F0BDE30595DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.180.0/22
45.197.188.0/22
Signature Algorithm: sha256WithRSAEncryption
72:72:c7:60:7d:e2:5e:5a:2a:5b:f1:01:73:04:77:9a:f8:62:
95:8e:a9:7c:70:63:89:db:1f:b6:de:81:b4:27:db:cd:5b:90:
db:8b:93:da:d3:3f:57:98:53:b3:ff:25:28:26:8b:4d:6c:1d:
ea:58:62:c9:14:aa:e1:2a:b3:97:1d:cd:f5:52:61:41:3b:d7:
bc:61:24:b1:fc:ec:70:18:02:f6:bd:2f:18:f4:79:27:a3:64:
6e:6f:cf:1d:85:04:8a:e5:2a:0b:3d:8e:3c:9a:8c:dc:e3:90:
b7:d1:51:52:c8:cd:5d:c2:f0:e1:38:85:cb:c9:ed:c7:9b:c4:
16:ca:1f:93:41:de:38:f3:55:73:2d:f9:11:be:3c:27:b7:5f:
d5:6d:96:f9:59:1b:f3:23:8b:ae:bc:8f:33:66:74:35:18:7d:
95:95:5d:e8:89:b3:d8:a9:58:6d:43:ab:b8:96:77:fd:fd:0a:
54:fd:98:16:0a:89:77:67:44:e2:c3:5f:39:a6:d7:7b:5f:72:
05:35:f0:cf:77:49:5c:cb:36:aa:29:8c:d6:66:58:9c:31:20:
bc:da:8b:0b:d0:5b:98:37:0d:ef:96:ab:13:07:dd:b8:3d:a5:
0b:52:fc:cb:13:7f:07:f4:9e:46:79:49:aa:44:fa:f4:bc:1e:
8a:fd:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:41 2025 by rpki-client