Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F800682952311F0B5D6CCD7DAE4EC9C.roa
File: 6F800682952311F0B5D6CCD7DAE4EC9C.roa (raw, json)
Hash identifier: RGEz97/U2dN2JDjwsCfsiv9la/byWqkLt3ZzodPvk7M=
Subject key identifier: 08:01:DF:E1:00:B1:58:5A:2C:8E:BA:38:90:78:15:49:E8:AA:41:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F800682952311F0B5D6CCD7DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 06:39:48 +0000
ROA not before: Fri 19 Sep 2025 06:39:43 +0000
ROA not after: Tue 18 Aug 2026 06:39:43 +0000
asID: 36680
IP address blocks: 45.204.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97325 (0x17c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 06:39:43 2025 GMT
Not After : Aug 18 06:39:43 2026 GMT
Subject: CN=68ccfab4-c475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:44:5c:c3:ab:64:ae:9e:cd:77:06:66:aa:
9b:61:2f:0c:89:f8:0c:f7:a8:76:a7:1f:ca:18:be:
9b:3a:bf:3a:9e:8e:24:d6:c8:68:a6:fa:59:a5:9a:
fa:81:b5:2b:18:6e:4b:e8:75:de:30:ea:a9:5c:95:
64:09:ce:03:e1:f9:e6:b5:26:7b:2f:75:60:0e:00:
31:47:c3:6b:c0:35:1c:9e:72:47:33:ad:1b:26:03:
43:b4:ab:99:40:2e:82:20:ad:1c:23:5f:46:e2:94:
06:28:10:14:ac:d7:5d:4a:7a:ca:69:f9:bc:4e:e6:
3f:34:30:e7:05:a2:0e:1e:5b:90:f4:61:99:80:a4:
9e:49:2a:a2:1e:ff:76:d3:70:da:16:36:a0:f5:ac:
4e:8d:f6:1d:ef:60:0d:9d:d7:27:3e:db:74:8b:36:
99:3c:19:86:c2:b2:52:98:eb:4e:a7:46:98:e7:b1:
1b:02:7e:f8:0a:ac:7b:3d:c1:c6:78:01:98:0a:65:
21:78:86:3a:07:b8:b5:1c:be:63:9e:f7:73:6b:06:
99:60:13:c1:b4:ca:55:b9:46:f0:38:52:b0:dc:16:
3b:91:6e:45:20:53:1f:f6:54:9c:37:e9:33:77:40:
c2:d9:42:97:47:58:32:e7:75:83:d4:0b:95:9f:d1:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:01:DF:E1:00:B1:58:5A:2C:8E:BA:38:90:78:15:49:E8:AA:41:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F800682952311F0B5D6CCD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.60.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b9:5b:10:91:d5:6b:a9:a3:97:87:16:53:e8:2d:da:2e:b8:
86:e8:2d:ed:3c:2b:e0:ac:54:18:2f:fb:b9:49:f5:e5:d2:b0:
d6:46:29:7a:f5:15:12:7f:7e:aa:41:51:ca:44:40:d1:d4:7d:
4b:1d:a2:79:92:bf:dd:76:2d:a1:6a:a2:cf:ff:4a:3a:0d:cb:
bd:09:16:0c:d7:5d:cd:92:e3:3e:05:93:9f:8a:84:eb:a5:60:
3f:08:de:d8:59:3e:84:2b:6a:e7:8f:fe:20:24:91:40:ed:eb:
cd:79:a7:b0:9d:fd:f0:92:64:31:09:c0:42:70:11:19:22:7a:
0a:fb:f9:58:43:38:5e:76:c6:5b:51:dd:d3:f0:ad:b1:0f:d4:
36:95:b8:68:5f:aa:1f:53:fd:7a:47:9a:e2:ac:c1:21:e6:4d:
4f:3b:5a:4e:50:f0:3a:9c:68:61:21:02:2b:4d:43:6e:08:b6:
ed:20:c3:23:7e:8b:a1:80:ec:e0:3a:46:ea:97:27:40:04:dc:
dd:67:16:5b:79:36:0e:56:84:7b:f8:ba:82:32:ab:d9:78:b6:
ff:eb:a1:fa:92:a7:c9:8b:0e:74:7a:a2:1e:78:41:26:a0:e7:
c6:01:99:15:33:12:33:cb:13:c8:72:10:4a:f1:c4:bf:85:de:
23:3f:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:09 2025 by rpki-client