Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB459F2A4E711F097CA2487DAE4EC9C.roa
File: CBB459F2A4E711F097CA2487DAE4EC9C.roa (raw, json)
Hash identifier: /HICs4E+JHDqjjDwf7wSow4i3AUOnXzbkmOE8yadrQ0=
Subject key identifier: 88:81:7A:A8:DE:E2:01:99:05:A9:7B:F7:9C:F5:B2:9B:E9:C2:B2:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB459F2A4E711F097CA2487DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 08:13:11 +0000
ROA not before: Thu 09 Oct 2025 08:13:06 +0000
ROA not after: Mon 10 Nov 2025 08:13:06 +0000
asID: 213702
IP address blocks: 45.207.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98219 (0x17fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 08:13:06 2025 GMT
Not After : Nov 10 08:13:06 2025 GMT
Subject: CN=68e76e97-7f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:f2:2d:a3:34:98:23:43:b5:3b:8a:5e:ba:
23:f0:2d:fb:77:6e:20:0c:c7:b5:46:82:ba:33:da:
60:38:cd:92:f5:bd:9d:f1:ba:db:3c:c8:e8:35:e0:
e6:e5:e2:8c:0a:bf:10:bb:06:db:ad:c2:64:de:10:
22:70:83:df:20:5e:c7:85:ff:a3:28:9d:ef:cf:bf:
b9:fa:3d:e2:33:c9:22:44:c9:6e:12:80:5f:ad:49:
a0:77:17:46:0d:cf:17:39:76:de:b2:f4:73:9b:e2:
d9:23:fa:6e:e9:d8:92:f6:38:bf:26:d7:38:bd:48:
09:cc:ef:98:45:f9:9d:70:89:16:ac:7e:6c:06:b7:
ea:39:3d:67:c0:8c:33:fe:a1:75:ad:cd:e9:0f:15:
f4:2a:77:58:77:02:73:05:90:f4:17:ea:cd:8b:2d:
92:d1:47:61:f7:53:3b:ba:29:fd:b1:a7:7c:0e:31:
f0:58:4e:ef:c4:d5:f8:13:00:7d:3b:33:42:e4:2c:
4c:d3:e2:84:f1:06:8a:49:b6:e2:b0:ee:8a:d0:7f:
af:37:6f:67:5b:b2:5c:7d:d9:b1:87:5b:a8:e1:1d:
a8:78:e9:d2:01:f1:b2:69:8f:43:d3:c4:d1:c8:d8:
0a:c1:75:3f:69:4a:52:23:bb:34:4b:15:78:f0:3f:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:7A:A8:DE:E2:01:99:05:A9:7B:F7:9C:F5:B2:9B:E9:C2:B2:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB459F2A4E711F097CA2487DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.164.0/23
Signature Algorithm: sha256WithRSAEncryption
44:9f:c5:a8:f0:50:bf:4c:a6:17:ce:d4:f1:1e:2f:05:24:0c:
e0:d6:62:04:48:65:16:4b:18:b4:ea:b3:74:3e:fc:91:ee:ff:
4d:5e:c6:2d:06:0a:e8:de:92:60:ae:ed:6a:60:41:31:0b:44:
07:65:19:52:7c:4c:0a:bf:ee:cb:d9:b9:ec:d2:68:c6:18:f7:
03:78:46:30:8e:bc:6a:dc:a7:df:a2:56:ff:06:96:c7:c1:bb:
49:11:1c:d4:da:c4:0d:d5:72:e7:60:37:ca:9d:5a:be:3a:35:
6f:c7:b3:97:fc:67:9b:c2:4c:35:9d:24:20:6a:11:95:cf:ef:
88:51:9c:f6:9d:8d:06:56:46:bb:cb:2b:e4:cb:16:9f:af:19:
7e:83:7d:e7:dc:69:a3:19:72:b1:21:bd:da:05:00:fb:b7:5c:
e1:c0:a4:64:7e:89:0a:cd:96:30:35:ea:9f:f4:80:fe:3d:8d:
58:7f:9e:2c:27:c9:c5:4d:9f:0b:29:52:23:d3:40:45:c4:2e:
a1:d3:26:80:fc:01:13:7c:1a:8d:a7:79:f9:d7:dc:d5:53:ff:
8d:8a:79:bb:6f:26:fc:e3:6d:f4:78:c7:cc:87:e3:48:7f:56:
f9:5c:0e:20:7f:a8:b4:2c:74:96:b6:c9:b5:3d:68:de:45:d9:
17:53:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:16 2025 by rpki-client