Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD892FB09ACA11F0AE50C2EFDAE4EC9C.roa
File: AD892FB09ACA11F0AE50C2EFDAE4EC9C.roa (raw, json)
Hash identifier: S3hKMBoCgXRx8NKXBxsQJgyNNxIImVFZ2iWro8ij6Cw=
Subject key identifier: 67:7A:BB:2B:D4:0C:65:F7:FA:73:66:EB:A3:E1:7D:B9:D7:4F:6C:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD892FB09ACA11F0AE50C2EFDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 11:19:34 +0000
ROA not before: Fri 26 Sep 2025 11:19:29 +0000
ROA not after: Sun 09 Nov 2025 11:19:29 +0000
asID: 63139
IP address blocks: 45.197.103.0/24 maxlen: 24
45.197.104.0/24 maxlen: 24
45.197.105.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97665 (0x17d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 11:19:29 2025 GMT
Not After : Nov 9 11:19:29 2025 GMT
Subject: CN=68d676c6-e34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:10:51:63:a2:79:42:69:d8:d2:1f:91:5c:
02:e7:0e:72:20:60:9f:31:a9:24:07:b4:2b:fb:90:
7d:95:19:74:03:7b:a5:0a:5c:0c:08:cd:94:67:c4:
8b:b9:75:4a:23:b5:05:02:2e:da:fd:33:24:36:14:
81:50:0e:cf:42:e8:1a:77:5d:38:1b:22:e5:49:65:
25:bf:1d:78:f8:5a:4d:4f:e5:3d:22:fd:cf:71:d9:
ab:91:ea:26:80:e6:52:5e:8d:79:d9:53:2a:90:d0:
6f:36:65:2c:03:ae:1c:11:da:f4:3d:19:a2:69:5b:
ed:92:fb:e1:1d:d4:7b:c6:15:37:b7:72:74:20:0b:
60:c3:10:70:64:b1:5d:d5:a4:81:3a:9a:52:49:fd:
83:b0:31:3d:c1:6b:c7:d6:ec:62:62:ab:a7:66:60:
bc:07:65:25:79:3f:49:ce:50:fa:33:9f:7d:75:77:
da:e4:9c:f8:58:29:e3:b4:75:af:9c:fe:d7:e5:74:
60:b5:da:8d:4c:12:9e:9a:ef:4c:32:c8:ef:2c:ff:
c1:5f:b9:88:00:79:fc:c6:7b:73:07:db:36:50:c0:
47:bd:8c:62:97:0e:8d:ca:6c:2a:19:6d:15:93:d2:
c9:3f:ea:25:c9:80:99:3f:43:e3:2e:5b:e0:77:93:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7A:BB:2B:D4:0C:65:F7:FA:73:66:EB:A3:E1:7D:B9:D7:4F:6C:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD892FB09ACA11F0AE50C2EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.103.0-45.197.107.255
Signature Algorithm: sha256WithRSAEncryption
5c:db:4f:fb:ed:39:85:63:56:bb:f8:b1:6d:4b:41:c2:c7:61:
44:59:95:b0:30:1f:ae:ce:3f:4b:a9:dd:f1:4b:9b:4c:e1:9a:
7a:0e:04:3e:fd:cb:42:81:50:7e:59:fc:bf:79:37:6d:36:47:
71:d8:71:8c:13:4c:ad:8d:80:34:07:80:96:40:39:d7:42:4c:
74:c9:e7:63:74:cb:2b:75:bd:6a:76:9e:3c:be:b2:d3:ae:1d:
07:3e:85:a1:8a:fe:66:8f:dd:aa:0a:2a:f7:3e:2f:0b:f4:b9:
47:f9:6f:8a:7d:ac:69:cf:4d:a3:14:d9:e5:7c:67:6c:cd:65:
a5:a9:9a:85:f1:5e:fa:d7:a2:88:39:fe:8c:ba:54:95:a0:ab:
ba:fe:83:e5:c9:b8:c0:27:11:ca:f6:a4:bc:0d:b8:8d:5b:ca:
e9:7c:1c:ce:2c:58:bd:f8:dc:d0:c4:7c:71:ce:1b:1c:8a:a9:
a8:53:d5:fa:5b:58:6d:d8:2d:64:7f:0a:c3:b9:7b:0a:d1:2a:
e6:4c:18:b5:98:e2:c0:cd:04:c4:b3:f8:0d:54:31:85:23:c6:
2c:a9:7b:a6:1a:b3:2c:2a:c8:75:f1:3b:47:c2:cf:63:0c:21:
dd:0e:b7:6b:f5:45:a9:fc:21:3b:76:d5:8c:4f:6d:3f:d1:ff:
a3:60:74:a3
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAX2BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI2MTExOTI5WhcNMjUxMTA5MTExOTI5WjAYMRYw
FAYDVQQDEw02OGQ2NzZjNi1lMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyK4QUWOieUJp2NIfkVwC5w5yIGCfMakkB7Qr+5B9lRl0A3ulClwMCM2U
Z8SLuXVKI7UFAi7a/TMkNhSBUA7PQugad104GyLlSWUlvx14+FpNT+U9Iv3Pcdmr
keomgOZSXo152VMqkNBvNmUsA64cEdr0PRmiaVvtkvvhHdR7xhU3t3J0IAtgwxBw
ZLFd1aSBOppSSf2DsDE9wWvH1uxiYqunZmC8B2UleT9JzlD6M599dXfa5Jz4WCnj
tHWvnP7X5XRgtdqNTBKemu9MMsjvLP/BX7mIAHn8xntzB9s2UMBHvYxilw6Nymwq
GW0Vk9LJP+olyYCZP0PjLlvgd5OgcwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGd6
uyvUDGX3+nNm66PhfbnXT2xPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDg5MkZCMDlBQ0ExMUYwQUU1MEMyRUZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtxWcDBAItxWgwDQYJKoZI
hvcNAQELBQADggEBAFzbT/vtOYVjVrv4sW1LQcLHYURZlbAwH67OP0up3fFLm0zh
mnoOBD79y0KBUH5Z/L95N202R3HYcYwTTK2NgDQHgJZAOddCTHTJ52N0yyt1vWp2
njy+stOuHQc+haGK/maP3aoKKvc+Lwv0uUf5b4p9rGnPTaMU2eV8Z2zNZaWpmoXx
XvrXoog5/oy6VJWgq7r+g+XJuMAnEcr2pLwNuI1byul8HM4sWL343NDEfHHOGxyK
qahT1fpbWG3YLWR/CsO5ewrRKuZMGLWY4sDNBMSz+A1UMYUjxiype6YasywqyHXx
O0fCz2MMId0Ot2v1Ran8ITt21YxPbT/R/6NgdKM=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:40 2025 by rpki-client