Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D05881CA42A11F0A9A90BBADAE4EC9C.roa
File: 6D05881CA42A11F0A9A90BBADAE4EC9C.roa (raw, json)
Hash identifier: dhyWzTAGgtD93XFeWpGrSAkL2/v2g0dWJ13CmIWU3h8=
Subject key identifier: E9:E5:FB:7C:BD:D5:D1:18:70:65:5D:67:DB:60:E9:C3:7C:25:7C:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D05881CA42A11F0A9A90BBADAE4EC9C.roa
Signing time: Wed 08 Oct 2025 09:37:38 +0000
ROA not before: Wed 08 Oct 2025 09:37:33 +0000
ROA not after: Tue 11 Nov 2025 09:37:33 +0000
asID: 203020
IP address blocks: 45.196.0.0/21 maxlen: 24
45.196.8.0/22 maxlen: 24
45.196.12.0/23 maxlen: 24
45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98146 (0x17f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 09:37:33 2025 GMT
Not After : Nov 11 09:37:33 2025 GMT
Subject: CN=68e630e1-8769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:48:6d:b4:24:8a:87:dc:82:bc:b3:6c:34:
71:5e:0c:b0:19:50:f4:7c:69:c3:c0:0f:af:0a:ac:
01:f8:78:27:9c:47:bc:53:4f:d1:2e:93:7f:8d:1e:
ac:1b:d5:a7:d2:d3:82:df:3e:f6:1b:0d:43:49:c0:
bb:87:7f:ff:90:53:be:a9:b8:45:13:98:2e:3c:ba:
60:9e:65:b1:cb:e9:36:cd:a6:da:d6:94:29:8b:e3:
47:86:f8:2d:b1:3c:fa:4b:aa:6f:ac:9d:05:b8:1e:
1d:e9:24:f1:05:4e:8c:c3:09:ed:67:04:b1:5c:ec:
50:2e:de:fb:ec:7e:f3:93:79:5d:44:37:3d:58:f0:
97:2c:ec:20:91:7f:0e:6a:58:2d:5d:7e:62:35:95:
21:6a:f6:3d:05:99:8f:62:d1:a4:28:75:be:ff:2b:
18:0f:a8:6c:cd:be:9f:ec:9e:2e:b3:7d:d4:93:45:
16:43:d8:53:f1:58:6e:d4:d3:d3:7d:81:b5:a9:f3:
db:ec:df:68:20:98:2e:fe:fa:de:1f:d7:4a:bc:a9:
06:bf:48:1b:a1:2d:c4:2f:54:bd:78:55:41:a4:ad:
49:68:33:b4:79:5e:b2:0e:75:71:37:9d:e8:d9:5b:
2e:0d:2d:c4:42:9b:44:a6:be:34:21:f8:e0:89:c1:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:FB:7C:BD:D5:D1:18:70:65:5D:67:DB:60:E9:C3:7C:25:7C:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D05881CA42A11F0A9A90BBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.0.0-45.196.13.255
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
93:60:6a:72:7a:d2:93:0a:7c:c3:b8:81:9e:a9:6f:4b:fa:db:
fb:f4:ce:cc:e6:d5:c1:b1:82:d7:46:bc:f8:33:ac:d6:81:77:
3d:ff:28:51:c1:57:1e:9e:a7:8e:a4:6f:d8:a9:51:40:86:16:
51:2f:65:1b:65:9e:f1:3e:45:74:19:9c:a6:93:86:e2:74:9a:
14:47:9b:15:52:17:cd:e0:f4:05:6d:a6:b0:da:64:55:f0:c9:
13:91:2b:97:d0:26:f5:94:b9:82:55:17:01:dd:9b:ec:ea:66:
55:14:98:d0:f5:c8:b4:3a:e0:b2:2f:a4:ce:0c:5c:03:c4:64:
4e:e9:43:dc:e1:d1:de:c1:19:51:ee:30:f3:f6:f6:f4:12:b6:
88:ae:b7:81:64:77:65:3e:00:05:b4:fa:67:83:61:64:eb:de:
ba:68:ce:20:c1:9c:aa:a9:f6:2b:d0:e6:43:07:b6:43:34:fc:
34:bd:ad:0f:26:59:6e:64:0e:72:f3:07:62:14:52:52:ce:60:
91:0d:34:06:8b:f1:b4:16:bb:39:c2:bc:6b:e6:0f:20:14:7b:
f3:d7:b3:01:9a:dc:dd:a2:52:26:05:56:90:4b:c4:20:fd:52:
6a:ef:0f:8c:c1:12:f5:35:bd:ce:f2:e7:78:39:e6:d5:be:85:
c2:bc:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:10 2025 by rpki-client