Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/267FA266A9A111F0AE8E1893DAE4EC9C.roa
File: 267FA266A9A111F0AE8E1893DAE4EC9C.roa (raw, json)
Hash identifier: fbQ/ibDmswH5NdVUTL/NLvcS/Z1cGwPInvdHrFleCD8=
Subject key identifier: 87:2F:73:E2:4A:E2:59:D8:D6:E0:61:6A:8E:EF:84:F1:AE:6C:7E:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018090
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/267FA266A9A111F0AE8E1893DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 08:30:05 +0000
ROA not before: Wed 15 Oct 2025 08:30:00 +0000
ROA not after: Mon 17 Nov 2025 08:30:00 +0000
asID: 36137
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98448 (0x18090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 08:30:00 2025 GMT
Not After : Nov 17 08:30:00 2025 GMT
Subject: CN=68ef5b8d-daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ee:6e:23:85:b3:c7:62:90:1f:a3:f6:8c:40:
30:6c:d2:8b:ef:d8:d2:ea:58:4c:03:b6:52:0b:c4:
9b:42:03:a8:d4:86:83:26:65:35:55:0b:b1:8b:08:
8d:8c:f4:a8:19:bb:fc:60:74:5a:f3:e8:e1:4c:3e:
52:b5:d2:85:80:f3:16:2c:bf:31:e7:24:bf:80:4e:
8e:8e:1f:b9:3d:10:59:35:6f:dd:6d:c9:34:c8:23:
85:fb:e2:d9:0b:70:00:e0:2d:3b:f4:81:9c:5e:99:
39:4e:58:39:dc:fa:81:88:25:5f:21:08:c2:87:96:
4a:22:6e:6d:0f:a0:01:b9:ff:65:03:0b:9e:7c:fc:
5e:af:21:93:8b:3f:c8:75:d3:6f:75:90:84:5d:13:
30:77:b3:37:3d:cb:c2:b5:17:f0:16:2a:7e:57:d7:
85:4d:d6:5b:28:fd:c6:d6:74:e7:1d:c5:aa:ef:ad:
21:bc:80:2f:b5:af:0e:6b:cd:30:19:97:1c:f8:8a:
1d:ff:fd:14:b1:9c:f2:e0:1e:25:08:02:b6:65:aa:
fc:9e:71:b1:95:52:a9:1f:64:99:4c:d9:28:4c:cf:
0a:43:28:dc:c2:03:25:44:eb:05:09:3b:cd:06:7c:
e5:be:b4:3c:30:f0:db:5b:05:ab:ac:d5:b9:91:6a:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:73:E2:4A:E2:59:D8:D6:E0:61:6A:8E:EF:84:F1:AE:6C:7E:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/267FA266A9A111F0AE8E1893DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
92:06:29:2b:31:b5:b5:4b:06:a7:b6:05:d9:35:4f:af:de:70:
74:ca:fc:61:9a:f8:22:6b:2d:f7:15:8d:40:41:58:b6:0d:2f:
e1:72:c8:65:d4:6c:ba:d6:fa:7d:03:48:52:cc:ef:5a:4d:bc:
af:0f:2a:a3:ef:d9:29:c4:55:d0:42:77:fe:b2:08:8f:0b:f2:
e6:f8:03:74:13:cf:9f:b0:b3:b7:bf:9c:38:3b:81:ba:40:3a:
c2:ec:8f:a8:49:16:52:11:49:29:a6:71:a0:dd:9f:4b:0b:67:
8b:c4:19:08:40:03:64:9c:63:e5:f8:9a:ad:bc:4b:2f:92:0a:
c2:c9:e3:b5:d0:b0:7a:b1:f9:53:7b:97:ae:8d:d5:f1:3b:78:
da:a7:42:7a:b5:f5:90:65:4f:05:d7:fd:69:ae:79:90:1b:aa:
2b:3a:6f:49:1f:ff:1b:8d:20:a7:95:73:fb:72:35:bf:01:dc:
ac:10:45:5d:d6:27:6b:9b:4f:91:2c:9b:63:f4:96:14:67:d9:
2c:56:07:e1:66:fc:af:88:d0:1f:3d:19:0d:a5:70:8d:dc:64:
fe:fb:f1:f5:67:d2:a3:23:bf:e9:cf:b6:a0:1c:2e:71:ed:54:
14:c9:ff:3c:ec:4e:e2:ff:c1:75:e9:50:68:6c:bb:cf:73:82:
5a:73:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:47 2025 by rpki-client