Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34002FEEA28C11F0824381BFDAE4EC9C.roa
File: 34002FEEA28C11F0824381BFDAE4EC9C.roa (raw, json)
Hash identifier: vambQmnxyuH6Arb3Loxnl7ETk+Ht4KGPfcB2vFyK5w8=
Subject key identifier: 4B:BC:F0:E5:8D:08:D9:68:FB:C3:C4:03:4A:6B:48:3E:E4:3B:E7:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34002FEEA28C11F0824381BFDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:12:31 +0000
ROA not before: Mon 06 Oct 2025 08:12:26 +0000
ROA not after: Fri 09 Jan 2026 08:12:26 +0000
asID: 142002
IP address blocks: 45.195.8.0/24 maxlen: 24
45.195.9.0/24 maxlen: 24
45.195.10.0/24 maxlen: 24
45.195.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98024 (0x17ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:12:26 2025 GMT
Not After : Jan 9 08:12:26 2026 GMT
Subject: CN=68e379ee-7a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:55:95:d8:3d:a4:21:c2:d9:6f:81:d6:e4:
d2:aa:0f:01:1a:63:5f:6c:5c:00:0c:5a:b9:e8:06:
8c:7c:a9:81:c5:4a:8b:37:a9:fe:7d:29:60:db:97:
92:d5:46:e7:cc:74:28:93:16:0c:5c:79:86:32:8a:
a6:97:04:7e:9a:f6:73:bf:52:be:ff:d2:86:da:72:
94:db:ab:4c:5c:07:b4:59:e3:a4:18:06:12:2e:bb:
f1:32:85:98:94:28:cd:f1:10:2b:ea:6c:bb:96:22:
90:78:88:d6:51:3b:8c:ae:76:69:bc:6f:5a:de:d3:
26:20:2b:03:11:60:b6:d5:2c:87:84:7d:22:9f:74:
70:19:6b:c2:ad:b7:c0:74:0a:90:cf:5a:6a:4d:54:
50:79:c6:7c:cb:fb:9d:1a:8c:d9:6c:96:ab:7b:4c:
eb:c6:fc:e8:25:59:68:50:af:32:f9:53:21:11:04:
00:d1:70:a7:ed:f0:40:94:74:c1:c0:4e:e0:58:ea:
3f:f8:bd:c2:45:0a:c3:3a:59:43:c7:31:ed:5f:ec:
5d:e5:c3:a1:ae:69:52:cd:fd:75:11:55:31:0d:0d:
91:10:a9:71:d1:98:c8:c3:ae:60:b3:37:5d:d0:f6:
b2:60:0f:35:4e:8e:d5:e0:7e:2c:ea:48:d5:27:03:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:F0:E5:8D:08:D9:68:FB:C3:C4:03:4A:6B:48:3E:E4:3B:E7:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34002FEEA28C11F0824381BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:ed:7e:5e:c5:10:4b:b1:0f:38:29:01:97:26:0d:17:92:d9:
03:a5:94:3d:93:f2:69:fb:df:bc:f3:71:e2:f3:f4:dc:63:83:
fd:3c:3c:81:bd:50:7b:d8:b9:45:8f:bd:a2:8c:a9:a9:4d:ba:
36:05:f9:6c:52:2c:35:89:bb:b3:ab:68:4b:4a:5e:36:2e:35:
ef:a1:94:82:44:d0:14:86:ef:fb:b8:4c:10:89:3a:6a:bf:89:
35:46:45:97:03:d6:bc:63:ec:94:82:af:16:61:b5:1f:13:7a:
31:72:50:91:c1:45:19:33:85:b1:13:63:85:e8:d8:54:5a:f8:
fc:0b:47:6b:5b:26:8f:fe:25:02:25:97:f2:9b:8d:68:b6:29:
f0:99:78:f6:c9:2e:7a:65:57:53:e8:24:e4:ec:92:dc:bf:b2:
f3:ce:61:e5:78:ce:ed:3e:7a:f5:36:4a:85:02:6d:04:28:a2:
2e:11:c3:27:55:f7:4e:a0:b0:37:98:44:68:1d:51:9d:9c:99:
8c:6f:19:75:8c:69:91:7c:f4:96:7d:6d:a0:dc:29:84:3c:77:
4e:2a:33:40:db:06:b8:35:3f:40:4a:6b:3c:55:b6:b4:c3:6c:
57:80:63:eb:7a:19:91:55:37:d3:ed:8b:af:65:0b:76:ef:37:
14:98:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:07 2025 by rpki-client