Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/973967F88E2111F0B0E0E27CDAE4EC9C.roa
File: 973967F88E2111F0B0E0E27CDAE4EC9C.roa (raw, json)
Hash identifier: hu/kUuy14CHixX1CAa7gPGbEGB1b5Rm9e7NM09ndEWk=
Subject key identifier: 83:12:22:98:6D:E1:39:E5:60:B2:63:4E:4E:3B:01:65:86:81:27:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/973967F88E2111F0B0E0E27CDAE4EC9C.roa
Signing time: Wed 10 Sep 2025 08:38:58 +0000
ROA not before: Wed 10 Sep 2025 08:38:52 +0000
ROA not after: Mon 20 Oct 2025 08:38:52 +0000
asID: 61112
IP address blocks: 45.196.233.0/24 maxlen: 24
45.196.234.0/23 maxlen: 24
45.196.235.0/24 maxlen: 24
45.196.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 08:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96856 (0x17a58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 10 08:38:52 2025 GMT
Not After : Oct 20 08:38:52 2025 GMT
Subject: CN=68c13921-8ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:d8:e0:82:f4:a5:f7:32:06:af:30:1b:53:
1b:8a:40:7a:82:9e:5b:cc:7e:db:e1:6f:59:09:04:
dd:71:41:12:90:70:0c:5d:ca:c9:22:b0:bf:48:d7:
1c:45:ed:01:e8:63:19:98:03:36:11:30:cd:2c:4c:
a6:b2:ed:cf:2d:da:b8:15:d3:8c:21:a1:08:d4:e0:
69:82:ad:e3:fd:dd:6e:c5:83:76:34:66:43:c1:cd:
72:b4:ed:c4:2f:4b:f9:39:6f:30:ce:bb:d8:d9:18:
e7:4f:69:5c:ec:f1:fa:4a:24:1d:a3:d2:bd:67:5e:
11:ac:31:2f:1e:1e:36:cd:f1:14:f9:93:10:be:60:
f5:6c:01:3d:5c:2c:bb:06:06:df:25:55:61:5f:f4:
03:5e:4f:b1:dc:df:ab:6e:ab:5b:32:04:e8:09:c1:
94:ce:0b:92:50:36:b5:48:ec:ac:46:80:09:5c:b3:
e3:dc:75:f7:f7:0a:f6:69:32:ab:0d:37:9f:7f:76:
bd:fa:b5:e6:d6:e0:6a:ac:6e:41:1d:f2:2d:bb:12:
ef:d5:c0:52:23:fa:36:aa:35:c0:12:6a:2a:90:fc:
ba:aa:a8:21:8d:04:97:70:10:0d:9d:f7:bf:f7:2c:
e1:8a:99:59:30:c2:d6:0d:b6:05:af:d2:32:73:ee:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:22:98:6D:E1:39:E5:60:B2:63:4E:4E:3B:01:65:86:81:27:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/973967F88E2111F0B0E0E27CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.233.0-45.196.235.255
45.196.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:07:06:8d:1b:bb:1c:95:42:da:4d:76:cd:12:d1:a2:92:36:
89:42:bf:cc:ae:f8:b8:fd:88:71:75:b1:cf:a9:8b:db:ed:5d:
71:83:2c:31:9f:d3:97:d1:7e:aa:0f:bc:90:80:d3:84:f8:e2:
a7:fe:d6:f2:eb:0a:96:65:f1:4c:72:b8:f4:05:86:b2:a4:d0:
0e:9c:db:a6:a4:18:f4:41:02:19:78:93:7a:44:2f:87:b2:c7:
38:63:b8:bf:3f:5d:50:e5:26:10:18:66:c9:10:60:8b:23:4c:
a6:dc:00:01:51:30:18:3e:49:93:33:4b:a5:12:c1:64:de:ab:
75:d2:2b:86:5a:5a:bb:a1:17:08:50:3a:0a:aa:44:61:a7:15:
06:30:fd:0e:04:2c:f5:14:8d:a2:3a:74:ea:0e:24:bb:19:b9:
6f:ec:c0:46:09:e5:ba:cf:d1:ad:ee:da:0e:fc:7e:23:8a:24:
85:db:9b:3d:f7:93:11:78:2b:11:bf:c1:48:8e:54:ac:9c:41:
24:da:e2:3c:4a:1a:05:e7:ef:09:47:02:e3:b0:0f:fd:97:0d:
ea:5a:e0:64:b4:5a:3c:ad:f1:6e:96:cc:d9:f3:81:d7:77:ac:
2a:55:0a:03:58:11:fe:8b:78:b8:7b:45:74:ce:e7:89:7f:18:
29:bb:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:26 2025 by rpki-client