Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C7E3209DCA11F0AFE448E4DAE4EC9C.roa
File: 84C7E3209DCA11F0AFE448E4DAE4EC9C.roa (raw, json)
Hash identifier: LuXQHmT4Nd3VsU4EgOttduIb9RNDVWEJVVBqCuXT3V4=
Subject key identifier: 29:47:13:C5:F0:19:4B:C7:78:81:C9:DA:06:37:24:F0:C6:DD:0A:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C7E3209DCA11F0AFE448E4DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 06:55:59 +0000
ROA not before: Tue 30 Sep 2025 06:55:51 +0000
ROA not after: Thu 06 Nov 2025 06:55:51 +0000
asID: 19318
IP address blocks: 45.202.92.0/22 maxlen: 24
45.202.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97796 (0x17e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 06:55:51 2025 GMT
Not After : Nov 6 06:55:51 2025 GMT
Subject: CN=68db7eff-9bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:95:79:fa:fd:0d:06:5a:18:54:dc:3d:0c:
d4:58:e9:17:32:6c:05:c9:c5:c9:39:b7:bb:46:db:
1e:d3:d1:0a:c2:4f:78:ed:ac:8b:28:58:a5:92:d9:
57:03:ea:19:4e:b4:66:c5:14:73:01:a6:c4:7e:60:
30:bf:6f:d8:a7:43:0d:09:43:00:67:4a:5f:63:83:
a7:87:34:06:31:5b:29:1a:8c:02:0b:34:31:c7:dd:
d1:19:2f:60:d7:67:36:5f:a9:b7:7b:45:d0:ea:3c:
34:9f:30:24:43:42:58:0d:77:3b:90:90:e8:4c:70:
f2:17:f5:12:11:d3:13:30:8a:e4:18:ab:66:9f:bb:
e8:1d:c2:93:0e:fa:07:cd:83:42:f6:8f:62:4d:d7:
1a:f4:50:93:18:82:22:be:40:b9:f0:ec:bb:ed:5c:
ce:ef:f3:5f:8d:82:11:40:58:f7:9f:0d:f7:c7:79:
15:60:d7:9e:35:34:9b:9a:3c:e3:bb:1c:ab:e4:be:
6d:2d:3c:b0:f4:23:36:bd:fb:34:fd:11:3e:ce:a8:
ac:12:43:9c:47:57:10:14:fb:f2:17:ab:67:06:5c:
13:66:1c:cb:e6:7a:dd:72:a7:d7:38:25:7d:ed:9e:
40:f3:e7:15:95:c3:8f:72:e8:cc:d8:39:6f:10:09:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:13:C5:F0:19:4B:C7:78:81:C9:DA:06:37:24:F0:C6:DD:0A:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C7E3209DCA11F0AFE448E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.92.0-45.202.99.255
Signature Algorithm: sha256WithRSAEncryption
2b:cb:6e:91:bd:f3:b7:4e:ec:05:be:bf:a1:af:f6:43:c1:e7:
32:fc:d7:58:80:4f:94:8c:2a:3e:5c:55:20:d7:f3:c9:6f:9d:
f4:b1:a4:0e:26:36:3b:6f:4f:d9:9c:10:4e:61:db:f3:b6:af:
0a:b7:df:a0:69:9a:cf:15:c2:20:2a:69:4a:0d:c2:1f:ec:a6:
fd:06:86:3e:18:40:d5:b6:71:f3:34:2d:f5:b6:37:1a:d8:10:
dd:22:13:fa:3d:0f:dd:d0:dd:0a:04:36:a8:bf:cb:0f:fc:b9:
7c:aa:cf:5f:08:76:1c:52:ed:78:e1:c6:23:3a:25:0d:64:fa:
20:a9:ef:b9:ef:1b:22:77:4e:fd:13:02:5a:60:38:2a:68:fb:
50:87:90:ca:22:e9:8b:35:79:0b:72:ae:ca:24:32:e8:fa:a5:
a6:97:cf:d0:0c:1f:8e:8a:79:7b:af:63:1e:90:49:c8:29:8e:
ae:b9:3c:42:f4:06:0a:1d:8c:65:63:ad:16:6b:ff:ac:6a:a0:
ab:e9:21:d9:3d:41:f2:e4:b7:e4:56:91:6e:12:ab:ba:ad:c2:
60:82:11:3a:cf:95:ea:ae:97:5c:5c:50:90:5e:87:b2:c6:f0:
0d:fe:b6:66:f2:60:4c:64:a3:d5:bd:7a:93:96:4d:5c:66:64:
87:4b:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:24 2025 by rpki-client