Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F06B929D6C11F0A3E909F4DAE4EC9C.roa
File: D3F06B929D6C11F0A3E909F4DAE4EC9C.roa (raw, json)
Hash identifier: mjKg6gp3mSEZAM1u5lo1O2vjgrSyxZYVi50fGg8j2sE=
Subject key identifier: CB:08:30:97:12:E9:64:3D:DB:B5:96:32:14:4B:99:AA:94:FB:42:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F06B929D6C11F0A3E909F4DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 19:45:19 +0000
ROA not before: Mon 29 Sep 2025 19:45:14 +0000
ROA not after: Mon 03 Nov 2025 19:45:14 +0000
asID: 401434
IP address blocks: 45.196.216.0/23 maxlen: 24
45.207.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97769 (0x17de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 19:45:14 2025 GMT
Not After : Nov 3 19:45:14 2025 GMT
Subject: CN=68dae1cf-53a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:00:5a:04:8c:f2:eb:92:32:7b:7d:c9:3c:
53:2d:88:64:d9:24:7d:6f:b1:f8:95:31:f9:c0:56:
cd:2f:e9:27:04:9e:91:53:61:e4:ce:56:54:cf:ad:
48:3f:6c:95:5c:49:54:94:10:a2:1f:a9:36:60:63:
43:94:ff:b6:65:97:1c:1a:35:41:36:be:36:d9:38:
e5:b5:92:46:4a:a0:43:47:3a:db:d5:30:74:0b:57:
21:5f:12:e9:b2:81:b7:e4:92:19:0f:9d:c1:03:3e:
e0:8e:3e:36:10:76:24:b2:3e:a2:9a:da:68:6b:07:
84:dd:17:bc:0d:9b:7c:fd:0a:ed:6b:95:48:24:2e:
76:54:fb:e9:24:53:b9:84:f4:a6:49:81:33:56:9f:
aa:4c:ea:d7:41:5d:5b:39:f9:4e:a3:1c:e0:d2:eb:
7f:0e:a6:63:df:29:54:0f:ce:dd:01:e9:2a:e4:ce:
bb:15:59:8c:17:f2:0c:34:1c:93:4c:3e:51:04:8d:
1b:7f:63:94:01:e9:86:52:7b:c3:0b:6f:35:12:68:
e3:f7:d0:76:f7:25:ac:a0:b4:ae:b6:72:a8:cb:8b:
49:f6:83:a5:76:76:23:cb:32:e6:4a:b3:b7:7b:71:
bf:74:9a:8d:ec:6c:d9:99:72:66:15:4e:49:52:2f:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:30:97:12:E9:64:3D:DB:B5:96:32:14:4B:99:AA:94:FB:42:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3F06B929D6C11F0A3E909F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.216.0/23
45.207.154.0/23
Signature Algorithm: sha256WithRSAEncryption
73:4e:ba:f3:6d:9f:ba:29:99:15:44:71:fc:7d:09:56:93:24:
8a:8b:13:49:01:ff:80:b3:eb:09:12:8d:f6:8b:32:93:7a:e9:
f2:25:a5:00:64:81:36:dd:9e:58:56:87:cb:a5:4c:3a:c3:2c:
6b:58:5b:b3:09:5d:97:07:a6:26:27:5d:e4:21:e7:a7:84:0d:
a0:8b:5e:3a:b5:1f:03:77:e7:0b:c7:e7:21:0f:ca:d1:ac:d4:
76:fa:05:c9:68:e1:52:e2:6f:47:09:ce:bb:ef:17:e7:a2:ab:
cc:a2:ce:47:04:6c:0f:50:76:90:e3:34:9b:72:e1:f0:1f:e5:
fa:34:6a:1b:36:4b:d7:c3:ac:48:56:12:b5:f9:9f:3d:ce:2b:
2d:89:40:4a:4c:4a:f9:85:68:7d:0d:8d:26:fc:61:8d:64:d7:
20:21:e7:61:a7:85:fd:f2:4c:3c:d7:6d:eb:b8:62:f3:4d:26:
ff:04:5c:98:23:1c:c9:6d:a0:03:d7:0e:ce:7b:e0:de:df:01:
b4:e8:fe:de:48:cc:a1:56:05:62:3f:92:2b:65:a4:51:2a:ed:
5d:f0:0e:2f:db:d5:1a:5b:a1:fc:bb:2e:16:c5:41:78:96:04:
50:08:07:41:55:05:4a:ce:95:4f:54:62:70:66:37:76:18:6d:
90:8f:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:02 2025 by rpki-client