Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B725560EAA7211F0872241ABDAE4EC9C.roa
File: B725560EAA7211F0872241ABDAE4EC9C.roa (raw, json)
Hash identifier: P8VsmKL1pRPNY3+B35nUpgHGxirlz24eS+OPc4f/8PY=
Subject key identifier: 35:F6:83:AD:71:DC:23:F2:B8:46:68:64:4B:7E:D5:7E:2C:E0:91:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018110
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B725560EAA7211F0872241ABDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 09:30:13 +0000
ROA not before: Thu 16 Oct 2025 09:30:07 +0000
ROA not after: Mon 17 Nov 2025 09:30:07 +0000
asID: 54600
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98576 (0x18110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:30:07 2025 GMT
Not After : Nov 17 09:30:07 2025 GMT
Subject: CN=68f0bb25-7364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:34:85:df:f6:fb:89:2d:50:4b:d9:96:21:
1c:0e:fc:5e:5e:44:ab:97:7a:b6:97:0b:45:65:09:
3c:f5:97:58:ea:49:bd:60:d4:5c:ae:f8:04:ca:d5:
71:46:d5:fe:08:46:a1:48:c1:a5:d9:d7:f5:54:5b:
d0:78:75:46:82:e9:73:99:ec:d1:cc:c6:22:6c:d9:
b3:06:05:d3:39:93:2b:d2:68:68:ae:95:f0:87:b4:
75:8a:13:84:f3:c5:15:81:ac:2f:ec:43:9f:4b:ff:
63:7d:e8:6a:99:be:6c:c7:ec:c9:38:b2:c2:0d:62:
38:d3:ce:e5:6a:18:00:6e:97:2d:51:5f:0a:4c:c5:
93:f1:85:e2:84:72:51:5d:e5:45:e3:54:19:70:0d:
dd:93:4a:fa:a1:8c:12:ad:18:65:45:ee:f3:f8:5f:
5e:f8:3a:1c:14:37:3f:35:d0:b9:1f:fa:67:0b:b6:
67:32:7d:36:71:89:c6:d4:58:7a:6a:8b:22:b4:cb:
15:59:8d:17:63:6c:0f:f9:2b:0f:6c:12:5f:44:c6:
c6:6b:0e:cc:9e:a2:b8:41:6b:3f:ad:10:79:03:25:
08:ee:bd:d1:1a:60:6f:88:76:45:45:87:c6:36:fb:
3d:20:b9:6e:af:e3:05:92:a8:0d:95:ff:83:47:8b:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F6:83:AD:71:DC:23:F2:B8:46:68:64:4B:7E:D5:7E:2C:E0:91:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B725560EAA7211F0872241ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
21:b7:ad:b3:31:8b:a5:fd:0d:86:ab:84:1b:a2:b1:ef:ab:b8:
74:c8:a4:0a:50:7e:a2:72:91:36:06:9f:70:6d:fe:90:15:44:
f2:48:42:49:fa:1c:06:63:f7:a6:c6:b8:69:11:d2:c8:68:b6:
db:17:42:d0:49:b0:98:6d:ad:8b:5d:27:45:2a:5e:07:57:2b:
44:17:c5:58:16:89:17:11:8b:ff:d9:cf:b4:eb:f6:87:4f:c2:
32:12:d1:7c:bc:f4:7f:3c:10:b8:ac:a7:d8:55:c4:0e:b0:8f:
3a:45:ab:8b:4f:b0:2c:01:6e:f1:a4:2c:37:5a:01:9d:5a:87:
56:0b:6d:01:f9:1f:a0:b9:11:4d:6c:8f:da:1c:7e:4b:6d:32:
c0:10:85:f5:8e:7f:35:13:41:8d:9d:a6:56:b2:6a:6e:37:88:
4a:2a:70:34:9f:e4:f8:be:bb:37:6f:9c:b6:5e:76:7d:2a:47:
7e:89:39:b2:43:c1:d6:19:6c:c9:a2:77:d6:06:63:42:b7:60:
55:1a:8b:3b:fc:f9:bc:0b:63:90:a6:97:33:5a:89:f3:8c:e1:
9e:5d:a4:ea:83:02:e4:ee:95:82:eb:00:3d:0e:f4:ab:f7:4b:
10:a9:f1:cf:20:36:dd:f4:b7:64:1e:d2:ac:3c:88:f9:fc:2c:
93:d3:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:13 2025 by rpki-client