Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC685EAA90FC11F09769AAE8DAE4EC9C.roa
File: DC685EAA90FC11F09769AAE8DAE4EC9C.roa (raw, json)
Hash identifier: vaf7ZofefklZ/u+/0kzQtFZLB/Zzxu+NFpa9KrFTAIk=
Subject key identifier: 75:1C:E8:14:88:92:5A:F7:AA:1C:BF:AC:58:4A:97:F6:D8:77:AF:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC685EAA90FC11F09769AAE8DAE4EC9C.roa
Signing time: Sat 13 Sep 2025 23:53:36 +0000
ROA not before: Sun 14 Sep 2025 23:53:31 +0000
ROA not after: Tue 23 Sep 2025 23:53:31 +0000
asID: 136907
IP address blocks: 45.202.128.0/19 maxlen: 24
45.202.160.0/20 maxlen: 24
45.202.176.0/21 maxlen: 24
45.202.184.0/21 maxlen: 24
45.203.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 12:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97025 (0x17b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 23:53:31 2025 GMT
Not After : Sep 23 23:53:31 2025 GMT
Subject: CN=68c603ff-52b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:57:6a:14:d9:cf:28:b4:55:6f:0b:f8:bc:
37:54:aa:02:6e:8d:72:44:52:4b:eb:54:1f:14:26:
d8:ee:3c:b3:e1:01:db:32:42:6d:5d:6f:70:ce:e3:
38:45:bd:90:c7:12:16:47:c1:66:0d:8c:70:9b:56:
17:f2:08:fb:41:06:df:36:60:87:a1:e9:dc:c0:31:
58:bb:ed:0d:be:cf:48:20:7e:cb:1f:e7:6e:72:20:
b9:e8:d0:10:7a:83:32:23:3b:ba:2c:01:d5:54:ea:
e5:fe:7e:2f:70:0d:af:31:b4:ce:55:31:ef:51:13:
24:90:6a:66:00:bb:ba:ec:4b:fe:25:1c:e7:80:67:
57:37:ae:d7:ea:4f:f8:06:4a:05:d9:d5:86:66:b8:
7e:f4:f6:36:85:93:d1:b5:3b:1e:39:a2:fd:a1:c7:
5f:d3:dc:8e:1a:00:ee:60:93:b9:2c:1d:70:43:00:
c2:8c:64:bd:c4:a9:11:cd:35:4b:26:ec:be:bf:cf:
fb:7d:83:79:de:9a:33:36:fa:06:1d:27:aa:50:9d:
2e:5a:ac:6b:c2:95:5f:b2:04:3f:fb:2d:63:a2:6a:
ce:83:cc:b2:33:49:b4:c6:15:f8:ef:4d:c5:ee:d0:
e1:4f:c8:e4:10:fa:cc:f0:75:79:20:c4:bd:57:17:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1C:E8:14:88:92:5A:F7:AA:1C:BF:AC:58:4A:97:F6:D8:77:AF:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC685EAA90FC11F09769AAE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.128.0/18
45.203.40.0/21
Signature Algorithm: sha256WithRSAEncryption
86:14:29:3a:15:60:f3:fa:7f:cc:4c:9f:18:da:eb:7b:37:75:
f9:f0:9b:6e:2e:38:0a:e9:be:c9:2e:00:64:28:04:28:49:0d:
56:82:56:1d:3a:5a:a6:41:a1:39:97:e7:3a:8e:b9:f5:dd:8f:
57:52:dc:48:7f:b8:a9:72:c2:7f:0d:1a:7c:b5:0a:3a:2e:5a:
61:23:fd:db:4c:ae:eb:61:81:75:de:a1:4e:02:48:c4:b0:3d:
d5:d8:a4:15:a7:33:bc:94:6c:42:cc:88:fc:68:7f:3f:02:b0:
08:f5:69:ed:0c:43:bc:de:29:00:30:0d:8c:35:4a:31:f1:5c:
e9:ae:b4:61:8e:ea:6a:35:06:37:3c:f7:fc:70:7a:52:74:43:
95:0f:ae:82:aa:39:a0:72:4c:39:20:0b:a6:e7:20:e8:a0:ad:
12:9b:f1:2f:f7:94:ae:3f:80:af:2c:d4:cc:61:84:c4:0a:4d:
8b:55:75:8f:10:54:cc:a0:d7:1b:c1:46:c8:bf:8d:4a:0c:5f:
17:dd:41:5c:9a:55:2e:8a:c0:d9:ba:33:8e:67:d4:f9:3f:35:
ce:8b:89:33:19:12:75:03:aa:ae:70:64:a2:bd:b2:a1:a3:a2:
59:b9:f5:cb:9d:67:79:87:94:1e:91:b3:63:d8:77:8b:f1:a6:
c4:aa:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:46:53 2025 by rpki-client