Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D6CFA2A28B11F0B0F55EBBDAE4EC9C.roa
File: B9D6CFA2A28B11F0B0F55EBBDAE4EC9C.roa (raw, json)
Hash identifier: FU34qWdb3UgS+SvLWP7BmHo3vAeE4L9ziRdJUTGJFc4=
Subject key identifier: 54:43:DD:C7:80:6A:30:DF:F8:CC:DF:4D:B8:B3:95:31:A5:AC:38:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D6CFA2A28B11F0B0F55EBBDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:09:05 +0000
ROA not before: Mon 06 Oct 2025 08:09:01 +0000
ROA not after: Sun 09 Nov 2025 08:09:01 +0000
asID: 6079
IP address blocks: 45.202.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98022 (0x17ee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:09:01 2025 GMT
Not After : Nov 9 08:09:01 2025 GMT
Subject: CN=68e37921-193d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:c7:c2:6a:5b:cc:c4:00:33:15:14:e3:ff:
6e:34:72:0c:10:bf:7d:78:55:d6:c1:e7:65:07:b1:
d6:ed:87:62:f7:44:09:04:3c:38:63:04:21:31:18:
1d:94:2f:60:ae:95:3b:e1:fe:ba:81:8d:93:14:5c:
ed:05:b8:80:64:52:e3:4f:5d:ee:7b:75:71:a2:18:
fa:6c:65:5c:22:0d:40:48:80:d8:11:99:84:ec:95:
eb:45:cd:2f:5f:3b:95:f8:a3:2a:47:a0:7a:17:2e:
3c:56:17:7e:47:a3:df:f5:bf:d6:32:e7:53:49:65:
d3:e4:81:90:1e:3a:52:8d:8d:48:ca:bb:f8:4b:3f:
42:ef:28:2e:9f:92:9e:c6:00:eb:0a:3f:df:13:a4:
00:76:7e:d0:fc:1a:e9:1d:75:00:d2:c1:90:65:b6:
34:e3:6a:e5:3b:36:41:cd:dc:3b:6d:51:00:cf:56:
01:36:69:03:95:74:73:e8:61:db:c2:1d:7e:a2:c4:
1d:93:de:a2:b7:0f:8a:45:06:8b:e8:5f:4a:43:31:
f6:bf:0c:84:74:78:80:77:b8:49:e6:d0:56:c4:33:
17:57:f7:18:03:19:93:f8:a2:de:31:e0:9b:e8:1f:
ce:52:18:09:4b:36:0e:d2:da:e0:34:ef:a3:dc:c0:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:43:DD:C7:80:6A:30:DF:F8:CC:DF:4D:B8:B3:95:31:A5:AC:38:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D6CFA2A28B11F0B0F55EBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
04:de:3f:48:a5:96:75:9b:85:06:a0:d8:af:b1:7a:3c:17:b7:
bc:0a:9c:a8:70:19:05:82:c8:71:a3:fa:4b:44:54:28:9d:5d:
60:34:80:42:d4:3c:bb:c6:c2:c7:d2:4b:b4:3c:0c:0b:d1:38:
72:03:85:20:48:12:ad:f8:ed:51:14:80:8c:19:f6:b6:90:2c:
20:8a:85:4b:3d:0e:81:cf:4b:c8:3a:9d:ff:19:41:ad:3f:5f:
f8:57:8b:66:b7:21:04:ad:d4:81:27:e4:cf:af:2c:6e:b2:e8:
2b:e8:32:bb:06:7c:70:c5:1b:2d:9e:eb:00:f4:24:8c:1a:43:
b4:8e:99:14:17:28:9e:8c:23:ee:4c:9f:59:97:1e:d3:d8:26:
97:5e:70:2b:1a:1d:95:c9:7f:1e:f2:35:af:6c:bc:57:8f:c9:
74:f8:13:52:a1:49:42:fe:28:30:ad:07:db:59:0b:b9:e5:09:
17:d0:9f:db:2e:da:b6:cd:af:b4:b6:fb:63:76:10:5b:93:a4:
a7:eb:38:61:87:33:da:21:91:ba:c4:f5:7c:5e:86:1c:36:0d:
c7:89:b2:b8:cc:3f:96:7b:be:9b:1c:ff:98:50:b7:57:f5:b5:
cd:45:9d:83:26:c8:59:48:13:d8:45:44:c3:7f:a1:15:c7:c6:
1d:fc:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:46 2025 by rpki-client