Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45569109F7311F0B02840A6DAE4EC9C.roa
File: F45569109F7311F0B02840A6DAE4EC9C.roa (raw, json)
Hash identifier: ENbKsjsxCU5MtE2klpIO3BbGM7q7KYrrEbZZiIKW42M=
Subject key identifier: 55:22:FD:97:6D:75:28:14:3E:68:3E:B5:D8:CE:B0:2C:42:86:72:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45569109F7311F0B02840A6DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 09:41:22 +0000
ROA not before: Thu 02 Oct 2025 09:41:17 +0000
ROA not after: Sun 09 Nov 2025 09:41:17 +0000
asID: 200373
IP address blocks: 45.206.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97900 (0x17e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 09:41:17 2025 GMT
Not After : Nov 9 09:41:17 2025 GMT
Subject: CN=68de48c2-8430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:e2:7c:14:9a:bd:4b:07:e8:ec:d8:b4:1d:
72:07:1a:73:7b:88:0d:f3:e0:53:20:c6:20:97:47:
9d:c8:b6:07:22:db:c5:10:8b:a8:e9:f1:ab:d0:50:
5e:cc:0d:f6:e3:44:7b:f9:e6:1d:8d:dd:ce:31:e3:
c5:81:5b:a0:40:63:f4:5e:a6:75:68:8a:61:db:83:
a5:22:8e:b1:6d:11:0a:c8:35:f9:0c:d8:22:6e:d1:
2c:55:ac:49:f3:67:e4:92:57:ac:38:02:f2:93:e6:
63:5e:2b:3d:26:eb:b6:a9:82:82:1c:74:78:f2:b8:
e0:e8:a1:94:33:5f:9a:ef:4c:83:9d:98:7a:48:de:
9a:7b:1e:7c:28:8f:e0:50:d5:1f:f5:b1:33:98:2f:
8a:fc:f0:1e:81:40:ff:ac:84:94:cb:dd:e4:c7:bd:
a3:0c:d3:5c:a6:1d:72:e3:f2:05:11:39:2c:63:32:
92:df:63:03:3a:ff:66:b3:55:da:b8:ff:06:ea:73:
73:f1:4b:81:0c:fe:33:07:a6:20:ec:77:6a:05:4f:
aa:d5:c4:69:98:27:e1:95:b5:32:62:4e:c2:16:e7:
48:b2:97:88:78:71:11:53:f0:3f:da:47:54:ee:d3:
8d:27:7c:b0:6d:2f:83:fb:2e:4c:87:c2:c0:d9:1d:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:FD:97:6D:75:28:14:3E:68:3E:B5:D8:CE:B0:2C:42:86:72:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45569109F7311F0B02840A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.72.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:bd:56:4b:8f:b5:9e:3b:6b:00:b4:fe:cd:6e:2a:27:66:95:
9b:4a:9b:a8:51:e6:fb:dd:06:ae:06:f6:28:f8:52:cc:18:d0:
c8:e3:2c:99:09:eb:29:e4:ab:58:88:a3:8a:6e:bf:90:50:b8:
37:e0:9e:ff:7b:3d:a8:1b:08:d9:dc:ba:34:08:5c:a1:4c:7b:
66:3b:99:6f:cc:1f:c0:f7:d8:e9:fd:3b:4b:53:78:17:99:8e:
ec:96:e2:d9:ff:b0:67:91:88:0d:50:10:6e:16:71:84:fd:02:
1b:e0:10:7f:f7:d3:31:c5:20:15:10:1c:a0:a7:88:12:6e:8f:
06:33:0b:bf:05:81:e5:a8:e8:15:63:0b:2e:bb:b8:cd:91:11:
79:2c:a7:77:cf:33:2f:76:4d:49:6b:74:c5:d2:12:8c:3b:1a:
9c:6c:4a:28:02:1e:0c:9c:43:5b:49:b1:01:07:88:b8:ff:0f:
d1:98:88:42:26:90:e5:97:ac:00:27:65:c9:88:12:39:89:b7:
b3:d8:58:51:27:d7:0b:b9:f0:3e:f8:87:1d:3d:28:59:51:60:
4f:8d:b2:c9:f2:d9:f0:ab:b9:8c:b9:cf:ec:bd:f9:e1:82:a4:
e2:dc:e0:c4:13:a8:9e:77:38:72:77:bb:c0:7f:68:c9:3c:35:
51:4a:1d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:46 2025 by rpki-client