Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99FF8FF29D6D11F0B34A1F7CDAE4EC9C.roa
File: 99FF8FF29D6D11F0B34A1F7CDAE4EC9C.roa (raw, json)
Hash identifier: t/CvQL3TQRyf1iNh9zTKQiniVly3dLGRTC4hj3oPUog=
Subject key identifier: C8:75:D7:84:26:FE:CA:8C:B4:88:BE:50:FF:55:FB:2A:61:E7:2A:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99FF8FF29D6D11F0B34A1F7CDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 19:50:51 +0000
ROA not before: Mon 29 Sep 2025 19:50:46 +0000
ROA not after: Mon 03 Nov 2025 19:50:46 +0000
asID: 151407
IP address blocks: 45.196.220.0/23 maxlen: 24
45.196.220.0/24 maxlen: 24
45.196.221.0/24 maxlen: 24
45.207.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97771 (0x17deb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 19:50:46 2025 GMT
Not After : Nov 3 19:50:46 2025 GMT
Subject: CN=68dae31b-dd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:b8:af:d7:62:75:73:a7:32:0b:99:1c:07:
8f:74:48:fb:58:96:b5:ce:5d:c7:75:a5:e7:b1:19:
2e:60:54:6f:e4:97:69:ba:b6:43:e3:b0:57:fd:a8:
8d:a3:2e:37:bb:93:5e:43:08:16:3b:98:c4:d1:5b:
07:7b:c2:ba:21:66:93:bb:96:33:0c:78:87:fd:12:
11:04:9a:0c:34:06:35:ab:82:f7:12:e1:0e:a9:a2:
c0:cd:ee:67:62:4f:af:98:b1:80:e7:89:2c:b5:b7:
9f:39:5c:42:94:b3:f1:30:13:aa:25:a8:7a:d3:0e:
3a:d3:cf:d8:3d:6d:ca:1d:3c:af:ff:c5:fe:0b:df:
8f:c0:45:5f:1b:64:32:89:54:c9:25:44:b9:db:02:
22:03:93:10:9d:5f:2c:04:24:77:ab:ac:20:bb:ce:
30:3b:d6:20:f5:1a:ea:8a:ab:54:5a:23:71:f4:c1:
63:b8:5a:83:b6:c7:e5:3f:d7:90:60:76:02:0f:82:
02:c8:49:7f:b6:66:9f:66:cd:1f:92:06:00:a6:29:
4f:4e:4d:ef:74:c2:ac:0f:ec:bf:08:a0:7e:87:ba:
c1:46:f5:85:4e:c9:03:7f:4d:8a:32:09:ed:b4:62:
b0:9c:e3:7a:fd:0d:34:24:a3:98:84:99:97:f3:e4:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:D7:84:26:FE:CA:8C:B4:88:BE:50:FF:55:FB:2A:61:E7:2A:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99FF8FF29D6D11F0B34A1F7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.220.0/23
45.207.152.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c0:fe:ac:ff:1f:a8:b0:ee:61:ee:c5:e8:f1:19:4a:91:01:
16:6d:f0:ce:ab:75:60:d3:d0:52:3c:b1:06:ec:53:9d:80:ab:
6a:f8:c6:4c:0b:60:55:37:a6:90:d7:fe:94:33:01:eb:30:7c:
a9:b8:56:72:b7:d3:ce:18:b4:bc:37:2a:6d:60:3f:2f:e9:17:
eb:0a:68:2e:e9:e6:92:88:93:a0:e4:bd:b8:8f:dd:c7:9b:9e:
bb:ea:83:93:41:29:ac:e1:fe:d7:da:3e:44:7b:f1:fc:e3:25:
07:8d:e0:c6:c3:7a:46:dc:81:18:f1:62:f5:79:af:ce:af:f9:
c8:aa:54:ba:3b:f6:65:eb:a8:9b:60:c8:31:e1:e5:91:7a:25:
52:7b:f9:29:93:90:c2:45:5d:f5:3d:f6:42:58:3d:fe:e9:e2:
34:1d:b0:d5:cc:47:b5:c8:ee:db:01:88:3c:05:4f:c6:07:e2:
11:72:de:17:ec:12:67:2c:02:a6:2e:36:05:6f:4d:da:75:22:
0c:9f:b0:23:ae:bd:f5:75:47:fe:c2:6e:f9:20:52:39:7d:73:
f3:13:67:0f:d3:67:d0:63:63:cb:48:10:6c:24:e6:46:30:fc:
42:27:ef:c0:c1:69:4d:bd:ca:d7:3a:7e:70:25:b4:9a:25:29:
04:18:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:50 2025 by rpki-client