Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9295AFF695E511F0903A71C2DAE4EC9C.roa
File: 9295AFF695E511F0903A71C2DAE4EC9C.roa (raw, json)
Hash identifier: bMbVY7439Kkg82t4hryFmKNa9li0HQYtt0Vz8KdU+LE=
Subject key identifier: BD:25:AA:74:A8:E1:CC:B6:16:44:B5:A5:56:A0:05:92:C8:C2:AD:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9295AFF695E511F0903A71C2DAE4EC9C.roa
Signing time: Sat 20 Sep 2025 05:49:29 +0000
ROA not before: Sat 20 Sep 2025 05:49:23 +0000
ROA not after: Sat 21 Mar 2026 05:49:23 +0000
asID: 136907
IP address blocks: 45.202.176.0/21 maxlen: 24
45.202.184.0/21 maxlen: 24
45.203.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97410 (0x17c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 20 05:49:23 2025 GMT
Not After : Mar 21 05:49:23 2026 GMT
Subject: CN=68ce4069-f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ea:f3:7d:9a:8c:67:fb:db:07:fb:f9:e9:15:
f7:75:a1:94:42:7d:cc:0c:6b:6d:62:55:3c:a2:34:
95:e4:07:ab:70:46:17:dc:e8:03:f1:dc:13:cb:b3:
20:be:e6:2a:40:d2:04:55:fe:73:b7:f5:24:bd:23:
2b:1d:ed:05:9a:20:35:03:2a:b1:88:77:a6:d7:24:
34:b9:d6:52:d2:69:e9:ca:77:54:b2:f6:49:13:65:
75:65:09:82:35:31:41:2b:e9:62:03:c1:b8:0c:64:
9e:99:4d:85:35:26:c3:da:a0:ac:a9:24:2d:af:d0:
57:43:b2:f1:55:bf:e6:33:1e:06:ed:98:e2:d0:dc:
31:b2:6f:92:73:6f:2c:18:42:19:37:ef:eb:78:2e:
3a:2c:3f:47:ed:84:d5:19:b6:02:e0:e7:e6:d2:e7:
7c:7d:1d:96:e9:f1:15:15:50:a3:d0:c0:ca:08:8f:
2c:52:2e:82:60:9a:64:15:66:00:4b:17:f0:d2:2a:
6d:ff:49:1f:51:2a:7a:09:d2:8d:70:d4:92:68:d2:
15:c8:e4:bd:96:01:e5:96:27:06:c1:a2:ab:94:66:
25:36:dc:21:18:3f:fa:db:91:84:ca:d9:43:d5:ae:
7a:79:d9:60:d2:a7:53:8c:f5:c3:79:85:54:29:85:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:25:AA:74:A8:E1:CC:B6:16:44:B5:A5:56:A0:05:92:C8:C2:AD:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9295AFF695E511F0903A71C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.176.0/20
45.203.40.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:73:3a:11:8a:57:c7:ff:2f:94:cd:ed:b0:8c:ea:93:c2:ac:
b1:a6:57:cf:3a:49:c9:91:b0:d2:29:49:3c:86:cd:d7:68:e6:
02:fb:ac:8a:41:c0:74:fc:46:ac:86:6b:18:63:d3:be:4a:2c:
be:61:1a:4d:aa:53:08:e1:49:c6:8a:88:ca:89:9c:85:6e:1c:
79:0e:16:40:f9:49:29:f9:0e:2e:fe:d3:be:a3:7e:88:a6:d2:
ff:13:8b:44:af:18:d7:5a:a3:d6:1b:6b:71:a5:e2:23:70:4d:
6e:bd:aa:ad:1b:d5:a7:af:99:6c:e6:9d:49:25:83:1c:f4:c1:
f7:27:b8:29:c8:79:fb:6c:05:e8:e1:7f:36:0f:e4:cc:c2:c9:
86:36:05:53:f8:d0:b9:e6:8b:a2:e4:6c:02:f8:3c:d0:e2:d3:
09:2c:e8:6c:e9:05:96:40:84:7e:9f:48:d2:18:41:1a:d0:20:
80:86:f1:f6:48:3a:7a:c0:c8:f2:54:d4:6f:b0:43:e9:c4:e8:
20:a1:b7:4c:d3:9c:d9:3b:36:72:28:6c:3a:07:c4:27:e6:e6:
08:10:b9:cd:43:34:8f:90:b3:0b:f5:ce:b2:52:d9:1b:3d:2e:
9f:08:aa:f4:cc:de:53:45:f6:4a:64:a4:f8:03:fd:e8:ac:5a:
f0:b1:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:14 2025 by rpki-client