Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2203D8A43C11F0926937ADDAE4EC9C.roa
File: BB2203D8A43C11F0926937ADDAE4EC9C.roa (raw, json)
Hash identifier: ofFj3s3b/gGGEl5Hz7fiZZOIMwagxyoVLYQNxJI9J3A=
Subject key identifier: B4:55:B1:78:75:08:56:F3:3A:E7:43:87:D9:53:51:79:B4:EA:AD:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2203D8A43C11F0926937ADDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 11:48:40 +0000
ROA not before: Wed 08 Oct 2025 11:48:35 +0000
ROA not after: Sat 22 Nov 2025 11:48:35 +0000
asID: 40779
IP address blocks: 45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98176 (0x17f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 11:48:35 2025 GMT
Not After : Nov 22 11:48:35 2025 GMT
Subject: CN=68e64f97-d35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:de:cd:d6:2d:f7:7b:b0:7c:23:46:ca:df:
43:be:72:c1:ba:ef:f9:b9:a2:2f:31:cf:a3:d6:02:
0a:f6:5b:62:b0:7f:a5:36:c0:82:36:67:96:47:69:
b5:f9:a0:86:40:bf:86:44:71:a3:de:76:00:f5:9c:
60:ee:80:cf:37:82:b3:c2:6c:fa:1c:bd:b6:57:da:
88:e4:f1:60:79:3c:c3:88:e9:7f:8c:4e:38:f8:d9:
82:af:a0:ef:4a:25:5b:02:91:34:52:ff:43:f8:16:
66:16:de:a6:e1:ca:84:82:bf:b2:be:19:e9:e5:87:
4f:cd:2a:ed:2b:e0:7a:b6:7e:2f:92:bd:3c:71:e1:
69:fa:b9:3f:80:c2:0c:68:22:75:d4:00:71:27:c0:
59:86:99:d2:6b:be:36:92:cb:e1:58:bb:02:76:d3:
0b:38:79:75:78:19:61:14:32:56:f8:2c:0d:38:41:
fc:ad:2b:c1:db:33:db:fc:08:0e:3c:97:c7:dc:68:
bb:b9:c7:38:cd:c7:08:b3:74:5b:58:7d:f4:9b:93:
f6:a8:42:57:f7:ad:31:e9:f9:ef:4c:3f:78:de:b9:
a0:52:43:a1:e6:bb:09:0e:28:eb:a8:f9:5b:ea:12:
25:3c:4d:3a:d9:0a:4f:b5:fe:8f:aa:45:73:5b:aa:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:B1:78:75:08:56:F3:3A:E7:43:87:D9:53:51:79:B4:EA:AD:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB2203D8A43C11F0926937ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:f1:c3:d1:1a:32:69:5e:54:87:df:81:ac:f3:f3:61:43:a3:
5f:38:2b:fb:64:a7:72:62:d6:e3:f7:86:ef:34:a0:57:d1:7d:
b6:b6:f9:a2:06:33:ca:c3:ef:e3:cf:9b:c9:fa:2a:85:ff:58:
39:53:13:5a:30:71:74:4f:bb:27:d1:8c:9a:8a:84:f7:c4:25:
eb:07:78:e8:6d:e4:cf:5e:17:36:81:ec:22:be:7b:d2:a3:be:
4e:02:cc:ab:25:c7:b8:e0:41:b8:00:a6:a1:d2:09:e6:f8:a6:
bf:12:6b:14:24:86:1d:d3:1d:5b:04:fe:84:be:2f:2c:d7:ee:
34:0a:c8:03:ac:93:ca:f2:fa:8e:41:4a:96:21:8b:1d:51:d0:
61:4a:8d:2f:3f:ea:47:0a:9b:74:9d:4d:ca:13:1e:77:78:17:
e7:41:54:a5:6c:3a:ba:6e:f8:8d:fe:25:4f:57:ad:7e:5b:de:
f6:aa:19:a2:2e:bf:c6:89:15:16:b9:fe:06:60:1d:81:0e:88:
cc:c9:95:c7:37:9a:6d:6b:8c:36:c7:b3:3c:c6:52:3d:0b:f9:
8c:5b:2b:73:5a:a5:dd:78:91:01:ba:a1:96:45:7a:92:ea:f7:
c7:ec:2e:7e:3d:5b:06:67:ae:6d:48:37:de:42:d0:eb:7b:19:
ee:c5:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:58 2025 by rpki-client