Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D203B6B2ADA311F09C0A9DD7DAE4EC9C.roa
File: D203B6B2ADA311F09C0A9DD7DAE4EC9C.roa (raw, json)
Hash identifier: JIvPKn+0yV9X2Mmkpht6mmRuN1s8wkIPsOUF7YkP+6Y=
Subject key identifier: 35:3B:20:15:D5:DE:46:2F:21:F8:4A:C9:D9:B8:1C:30:D6:AD:C5:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D203B6B2ADA311F09C0A9DD7DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 10:59:17 +0000
ROA not before: Mon 20 Oct 2025 10:59:09 +0000
ROA not after: Sun 30 Nov 2025 10:59:09 +0000
asID: 62468
IP address blocks: 45.204.211.0/24 maxlen: 24
45.204.212.0/24 maxlen: 24
45.204.213.0/24 maxlen: 24
45.204.214.0/24 maxlen: 24
45.204.215.0/24 maxlen: 24
45.204.216.0/24 maxlen: 24
45.204.217.0/24 maxlen: 24
45.204.218.0/24 maxlen: 24
45.204.219.0/24 maxlen: 24
45.204.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98741 (0x181b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 10:59:09 2025 GMT
Not After : Nov 30 10:59:09 2025 GMT
Subject: CN=68f61604-1350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:88:4f:db:d3:63:ca:0d:e6:8e:f8:6f:9f:
df:27:9c:bd:b6:ed:ad:ef:cc:a7:f9:4e:6a:a8:50:
49:a6:9a:75:de:65:ce:2a:69:7b:26:e9:9c:73:39:
05:49:92:ac:2c:3c:10:7b:09:0d:be:1f:dd:c4:21:
89:28:80:ee:e2:ee:00:e6:a3:f1:33:da:c2:8c:05:
07:6c:a3:fd:c0:a4:8f:5d:1c:08:7b:ae:58:97:83:
7e:dc:4b:27:28:04:b9:28:f1:f4:d6:a2:4d:8c:d0:
a5:d7:2e:98:94:da:07:c2:ff:3a:cd:d9:a7:87:b4:
33:5a:33:cd:e8:f4:d1:3b:6d:f0:90:4a:f7:06:b8:
87:b3:28:30:02:52:d9:66:05:08:ad:ba:b4:52:96:
80:79:be:72:67:32:a2:db:e3:af:5d:c9:25:8e:70:
1c:3f:fc:90:ad:ee:88:10:16:5b:c6:19:c7:63:e5:
59:a1:b4:23:06:d9:32:5f:2b:fc:ef:07:ed:73:1c:
8b:00:48:0f:88:d8:28:c0:56:c1:b5:9c:a9:4f:fb:
b4:f8:74:b9:fc:02:6c:fe:1d:91:7e:32:3c:eb:b8:
90:e1:9f:a5:19:96:76:00:5d:2d:ee:d9:8c:63:87:
01:c6:8e:14:d3:e4:f4:e8:39:41:bd:7d:c2:ae:bf:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:20:15:D5:DE:46:2F:21:F8:4A:C9:D9:B8:1C:30:D6:AD:C5:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D203B6B2ADA311F09C0A9DD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.211.0-45.204.220.255
Signature Algorithm: sha256WithRSAEncryption
3a:6a:33:c2:e8:82:8d:3e:70:a0:cd:39:b9:10:f4:dc:b7:70:
f7:b8:ef:90:7b:29:c8:f1:d4:fe:76:3d:54:3b:1e:44:27:68:
da:13:79:a9:f0:5a:7b:f9:01:a3:cb:a4:47:60:22:9d:d8:6a:
4a:02:cd:4b:34:9a:d6:5b:57:65:12:40:b0:41:dc:02:a8:94:
f5:bf:98:0b:d8:0f:db:22:2d:b7:f7:68:34:0a:3c:04:c0:78:
07:3b:97:38:49:0d:e3:cb:24:d3:7e:59:68:a8:3f:fd:a3:36:
34:a8:2e:c9:33:fc:e2:13:eb:7d:b7:cc:6e:f2:c6:fe:2b:cd:
a8:2a:db:e1:8e:5c:15:17:c8:85:fb:89:ec:09:bb:15:20:c9:
f7:f7:27:b1:b4:46:e3:e6:cf:4f:47:9a:c7:3d:28:2c:03:72:
fc:e8:32:d6:ff:a3:8a:ec:ae:f8:3d:d1:4b:69:4c:e3:0a:5a:
b0:75:30:9d:46:2b:15:23:24:ae:36:cd:33:8d:56:87:f4:32:
09:d9:71:c1:ce:e4:fe:0a:eb:9f:fe:43:9f:75:50:88:81:2f:
fe:03:03:07:13:3d:ba:10:da:0c:8a:21:83:aa:8c:99:a6:c9:
23:d3:66:26:8e:16:2d:08:d9:bd:80:25:37:75:b2:39:18:c7:
91:c1:48:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:57:55 2025 by rpki-client