Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23216DE8A81611F0B01B6A9FDAE4EC9C.roa
File: 23216DE8A81611F0B01B6A9FDAE4EC9C.roa (raw, json)
Hash identifier: g05bFQ6J3krFUbSENj4BT2hJtXZPpoMKc9Gi2qBhQWU=
Subject key identifier: A3:31:CD:CE:8D:2A:16:F4:25:7E:55:3D:F7:AF:2D:79:2B:10:E8:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018051
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23216DE8A81611F0B01B6A9FDAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:22:28 +0000
ROA not before: Mon 13 Oct 2025 09:22:21 +0000
ROA not after: Thu 20 Nov 2025 09:22:21 +0000
asID: 57043
IP address blocks: 45.202.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98385 (0x18051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 09:22:21 2025 GMT
Not After : Nov 20 09:22:21 2025 GMT
Subject: CN=68ecc4d4-abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:ef:cf:d4:ab:17:98:d2:fb:e5:f0:f3:d6:
2b:fe:0b:92:18:1f:d5:da:a2:ec:9a:72:f0:35:59:
77:f0:fd:9f:60:05:ef:60:38:17:ae:0b:d5:a3:05:
41:65:ff:94:22:59:e5:a6:21:3a:bb:d8:5c:03:35:
8f:53:ea:ed:72:c4:0c:ed:a5:03:43:e6:61:40:8a:
cc:08:0b:ac:65:9f:8d:f0:da:43:55:5b:e1:be:9b:
ca:bf:ea:eb:28:d4:f6:cd:38:34:ab:fa:80:93:33:
03:3f:1e:8f:15:bf:4b:f6:17:e1:5e:e6:70:1b:96:
03:e0:d4:0a:53:71:dc:c9:11:12:00:68:3e:99:77:
ee:ca:fa:a4:90:69:1c:f9:3c:f9:0e:f0:ad:a7:db:
0f:8b:2e:4d:94:b9:86:0d:05:7f:28:1e:d8:32:7a:
53:16:fd:b7:db:7c:3b:53:6e:42:85:e3:40:28:ea:
6b:e5:18:4a:35:9b:95:13:f3:ce:77:2c:f7:5d:1f:
c2:df:4c:db:5e:d3:07:d2:0e:9e:34:3d:99:0f:9a:
60:03:a3:a9:f3:65:02:15:36:be:18:01:e9:54:69:
c3:af:0e:7e:17:19:5a:0b:20:84:62:45:c8:85:8d:
8f:13:21:17:3d:15:1c:06:da:ea:83:ef:12:0b:b9:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:31:CD:CE:8D:2A:16:F4:25:7E:55:3D:F7:AF:2D:79:2B:10:E8:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23216DE8A81611F0B01B6A9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.109.0/24
Signature Algorithm: sha256WithRSAEncryption
03:47:a3:22:c7:1a:3b:98:23:ac:96:c5:41:ee:c9:a0:7d:41:
a7:6d:3c:78:ea:5c:64:4a:96:ed:05:49:c9:c9:f0:d7:a4:5d:
a1:1f:06:c3:d8:f3:80:ff:d9:65:1f:9d:ce:f0:33:71:46:9d:
aa:64:af:fa:b2:9e:7b:00:8b:3d:e8:36:11:8d:bc:89:38:a8:
49:76:e7:2c:74:df:0f:e9:93:77:17:85:7a:3f:c3:b8:27:7f:
20:92:4f:25:ea:d4:7d:ce:c1:b6:6b:00:f5:e2:dc:8a:69:81:
8f:ce:78:76:31:c7:f1:87:ba:11:d4:cd:26:36:9d:3c:3e:5a:
1d:52:e1:59:e6:cd:77:cf:9c:15:e2:75:50:66:10:c2:3a:8f:
c8:c4:15:ae:ff:b1:3f:bf:2a:d4:37:64:de:1e:10:83:82:5a:
ba:2e:1d:d0:41:e6:fe:16:95:2d:a3:6c:1b:70:b4:da:d3:08:
03:b0:ee:6a:45:24:d7:5a:13:88:e0:2b:56:77:7b:b7:cb:cd:
ed:82:35:84:f2:48:71:49:b2:b3:80:ba:dd:8d:23:1f:2f:a0:
5d:77:d5:13:37:5a:09:2a:99:52:4a:9c:9c:af:9b:f9:70:02:
2a:cb:bf:81:fe:89:20:94:44:00:6c:66:ec:1e:18:5d:aa:75:
a3:8a:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:06:58 2025 by rpki-client