Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C2C2DCA5BF11F0AA39C87CDAE4EC9C.roa
File: D7C2C2DCA5BF11F0AA39C87CDAE4EC9C.roa (raw, json)
Hash identifier: xHL6lIlCmttceiiGclhUm780stOj38f1Tux5k6IjbRQ=
Subject key identifier: 36:9F:EF:94:90:08:90:7B:0B:30:F1:F9:C3:56:C1:80:5A:16:5D:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C2C2DCA5BF11F0AA39C87CDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 09:59:43 +0000
ROA not before: Fri 10 Oct 2025 09:59:38 +0000
ROA not after: Mon 17 Nov 2025 09:59:38 +0000
asID: 11404
IP address blocks: 45.204.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98296 (0x17ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 09:59:38 2025 GMT
Not After : Nov 17 09:59:38 2025 GMT
Subject: CN=68e8d90f-a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:4d:18:bb:64:a2:90:c4:8f:50:0a:b9:fd:
4f:e4:af:0c:2c:25:d5:28:78:0c:04:af:60:ba:4d:
d2:e8:17:77:f2:cc:87:aa:fd:0a:77:d2:8b:98:5b:
05:d9:06:20:35:39:bc:b3:b5:2e:f7:e7:c2:69:39:
7f:14:63:c9:03:7f:66:2a:4c:c2:45:e0:23:25:b2:
31:9c:34:b2:e0:c8:3f:9a:0c:02:77:cf:00:8f:09:
56:65:e7:5e:62:76:07:25:aa:a7:02:f0:03:03:a3:
2c:91:7e:81:16:a7:f3:17:87:cb:bc:4c:eb:3d:ef:
e4:a5:1a:56:23:dc:c5:2b:cb:df:b9:a4:a5:09:47:
21:4a:d0:59:98:8c:27:fe:c4:03:9f:16:81:9b:5c:
d4:8e:4d:ea:05:67:c6:0d:39:10:90:b3:f0:68:d9:
80:30:80:3e:e0:8a:a5:01:2a:aa:25:22:86:9a:f2:
ad:96:51:77:05:7c:d5:7b:0a:27:f5:0c:b0:56:d1:
e4:a7:e1:b8:1e:5c:3f:7d:2e:f9:cf:90:ea:50:c8:
1f:1f:19:d8:2d:98:83:73:70:0b:8b:c7:b9:b1:0a:
0b:0a:18:bb:14:de:39:b5:91:c3:54:73:74:1b:27:
9a:09:cd:79:9f:95:e1:bb:27:f7:02:25:b6:e6:00:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:EF:94:90:08:90:7B:0B:30:F1:F9:C3:56:C1:80:5A:16:5D:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C2C2DCA5BF11F0AA39C87CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.112.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:26:dc:57:83:c4:84:18:db:47:3c:52:4d:d2:28:99:82:05:
de:85:29:73:c0:39:6b:2a:04:ee:98:92:1d:40:94:33:a7:bc:
e2:88:00:1b:e5:b3:8c:91:b9:ba:1f:8f:8f:03:5b:6f:cd:2b:
56:3e:db:9a:d2:44:c5:bb:e7:cb:c7:d2:f9:78:b2:2a:91:04:
36:db:ae:06:10:ba:72:bd:cd:8b:68:f5:4f:b5:0d:55:f7:8a:
4a:2a:ea:56:26:8c:e6:7e:85:77:72:11:a2:e3:c4:b8:bd:53:
93:b9:7e:4e:56:a8:3b:65:0c:a9:f0:0e:70:86:09:0c:63:00:
a2:63:d3:39:7f:d1:45:2e:a6:0a:78:5e:53:7b:33:f6:c8:bf:
37:1d:d0:44:76:f8:0e:0a:8d:fd:98:a5:16:27:c4:4b:9d:8f:
20:bb:40:a5:66:6b:65:73:76:3f:56:15:2a:7d:fe:69:64:61:
74:2b:af:1c:09:6b:3e:c8:c0:65:cd:2c:a5:a9:a6:09:62:8f:
3c:e1:86:fd:88:13:60:fa:78:84:d7:b3:ae:f1:a1:72:27:57:
5c:f8:5e:11:4f:d6:ce:9d:e4:ae:8c:5f:2f:34:d4:57:b4:17:
8e:7a:2f:5e:a5:41:82:24:14:53:fa:a3:ec:7e:0b:28:f4:6e:
9b:2a:6d:6b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX/4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDEwMDk1OTM4WhcNMjUxMTE3MDk1OTM4WjAYMRYw
FAYDVQQDEw02OGU4ZDkwZi1hMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvQtNGLtkopDEj1AKuf1P5K8MLCXVKHgMBK9guk3S6Bd38syHqv0Kd9KL
mFsF2QYgNTm8s7Uu9+fCaTl/FGPJA39mKkzCReAjJbIxnDSy4Mg/mgwCd88AjwlW
ZedeYnYHJaqnAvADA6MskX6BFqfzF4fLvEzrPe/kpRpWI9zFK8vfuaSlCUchStBZ
mIwn/sQDnxaBm1zUjk3qBWfGDTkQkLPwaNmAMIA+4IqlASqqJSKGmvKtllF3BXzV
ewon9QywVtHkp+G4Hlw/fS75z5DqUMgfHxnYLZiDc3ALi8e5sQoLChi7FN45tZHD
VHN0GyeaCc15n5Xhuyf3AiW25gDpkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDaf
75SQCJB7CzDx+cNWwYBaFl2nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EN0MyQzJEQ0E1QkYxMUYwQUEzOUM4N0NEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcxwMA0GCSqGSIb3DQEBCwUA
A4IBAQBMJtxXg8SEGNtHPFJN0iiZggXehSlzwDlrKgTumJIdQJQzp7ziiAAb5bOM
kbm6H4+PA1tvzStWPtua0kTFu+fLx9L5eLIqkQQ2264GELpyvc2LaPVPtQ1V94pK
KupWJozmfoV3chGi48S4vVOTuX5OVqg7ZQyp8A5whgkMYwCiY9M5f9FFLqYKeF5T
ezP2yL83HdBEdvgOCo39mKUWJ8RLnY8gu0ClZmtlc3Y/VhUqff5pZGF0K68cCWs+
yMBlzSylqaYJYo884Yb9iBNg+niE17Ou8aFyJ1dc+F4RT9bOneSujF8vNNRXtBeO
ei9epUGCJBRT+qPsfgso9G6bKm1r
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:56 2025 by rpki-client