Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8450EB5AA34A11F08D754A90DAE4EC9C.roa
File: 8450EB5AA34A11F08D754A90DAE4EC9C.roa (raw, json)
Hash identifier: P3wilTLTPNoBFupTTt1gOlfAM2DY6PXA4/P/MVZ2rHo=
Subject key identifier: 6B:FA:A2:A9:9F:DE:AE:5C:B8:5C:1D:42:26:72:E4:ED:DB:69:5A:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8450EB5AA34A11F08D754A90DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 06:54:50 +0000
ROA not before: Tue 07 Oct 2025 06:54:42 +0000
ROA not after: Mon 10 Nov 2025 06:54:42 +0000
asID: 395793
IP address blocks: 45.195.133.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98074 (0x17f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 06:54:42 2025 GMT
Not After : Nov 10 06:54:42 2025 GMT
Subject: CN=68e4b93a-a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:35:ba:9d:b5:78:2d:9a:44:5c:e9:14:6c:
a6:d1:54:73:08:ff:d2:63:05:ef:33:c8:4f:2b:c7:
ec:da:ed:7b:76:6e:af:62:e0:4c:32:63:6d:ad:dd:
b5:69:dc:f6:a3:24:64:55:5c:59:d2:77:38:8e:1a:
74:ca:3c:47:c5:1f:cf:24:b9:a3:2d:49:11:72:43:
1a:d1:69:b3:30:79:b9:2e:bf:0f:52:c5:98:f8:18:
a3:39:42:56:fd:61:dd:51:c6:02:14:c4:af:1a:4e:
ef:8f:e6:d5:e1:37:75:8e:1f:d7:0d:68:96:d5:9b:
50:b9:22:f8:6a:cb:8c:00:5c:14:d6:ad:9b:cf:d8:
d2:55:af:ec:f5:ff:d8:51:d1:9f:c8:45:a0:0d:49:
6c:74:fc:06:be:45:e8:59:b3:45:7b:0d:16:86:94:
62:c2:86:ff:a0:48:7c:6a:bb:2c:8c:c3:da:a9:f0:
3b:39:d7:4a:2e:5e:36:13:82:67:6c:e4:20:17:dc:
b2:4d:32:71:91:ab:ab:9f:dd:8c:87:41:80:3b:ee:
e3:9e:d2:01:60:c4:f0:39:f7:5d:5c:82:73:33:87:
f8:c8:a1:f9:a5:07:e6:f6:8a:42:af:cc:33:70:6a:
d7:ca:6f:76:8c:eb:39:23:ab:b2:e7:98:55:3b:81:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:A2:A9:9F:DE:AE:5C:B8:5C:1D:42:26:72:E4:ED:DB:69:5A:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8450EB5AA34A11F08D754A90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.133.0/24
45.201.28.0-45.201.32.255
45.204.147.0-45.204.150.255
Signature Algorithm: sha256WithRSAEncryption
9a:1a:6e:85:fc:83:61:93:70:ee:5e:d4:89:05:24:2f:f5:f6:
e9:10:08:fb:79:4f:d8:1c:4d:fa:2e:7d:b8:4a:eb:7d:8e:b7:
e8:e5:1c:f8:09:eb:ee:09:06:59:a4:ba:30:ad:32:ae:31:3f:
0c:3b:87:fd:4f:45:99:e6:8d:17:3e:31:e0:42:4e:e2:a5:6b:
ca:9c:0d:1c:04:08:34:6c:6b:12:25:65:68:ce:7f:8a:1e:f2:
5b:b2:46:f9:7f:2c:c3:70:d0:5d:c4:61:ee:15:54:89:0b:9c:
f1:43:6f:15:6d:c7:ab:f1:fb:58:7f:10:48:b4:8d:49:fb:88:
4a:e4:c6:0c:d2:6e:93:af:eb:08:3b:d9:07:b1:6c:55:96:ce:
4a:22:7e:f4:76:a2:44:bb:9d:b2:10:a7:84:06:70:d4:81:78:
b3:16:f5:56:de:40:a7:cd:5c:a1:43:cc:be:32:61:51:93:ab:
35:c3:43:46:af:ee:2f:2d:5e:ef:c7:35:75:46:b0:2d:f7:73:
84:d7:7c:c9:c5:04:88:b5:91:b2:9a:2f:fb:56:c3:03:89:f8:
c0:7a:cf:2a:06:91:97:61:4d:6b:64:e5:05:de:a0:7b:2e:c1:
b0:ac:f4:43:da:b4:c8:e9:29:27:27:30:bb:2e:de:da:f0:2e:
a7:fb:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:16 2025 by rpki-client