Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/193DAF98B4BA11F087F2BAC5DAE4EC9C.roa
File: 193DAF98B4BA11F087F2BAC5DAE4EC9C.roa (raw, json)
Hash identifier: J9cFl6zH0IT69Ntn4XyNg8q5lCFSiBWW4MMYmxWrlhs=
Subject key identifier: D9:6B:03:7F:44:7B:A4:A4:C7:2B:E9:23:F5:4F:2D:DA:BA:AE:70:AA
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 062E
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/193DAF98B4BA11F087F2BAC5DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 11:26:25 +0000
ROA not before: Wed 29 Oct 2025 11:26:17 +0000
ROA not after: Tue 27 Oct 2026 11:26:17 +0000
asID: 55154
IP address blocks: 45.221.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Oct 29 11:26:17 2025 GMT
Not After : Oct 27 11:26:17 2026 GMT
Subject: CN=6901f9e1-fd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:63:c8:62:e6:15:30:bc:5c:1f:69:45:7a:
c4:20:b1:8e:23:54:05:9b:ef:c9:a9:7d:5f:76:35:
40:b6:93:d6:80:d4:be:2e:d4:d8:a7:3c:bc:cd:6c:
0d:6c:20:29:8e:f5:fc:db:91:9d:94:f5:e9:e3:8a:
41:b5:a5:00:aa:bd:18:3d:f6:d3:e4:fb:25:33:4d:
34:b9:49:88:dc:a8:cb:dd:24:8b:4f:f5:7f:cc:dd:
37:70:2e:0f:af:45:4d:ad:91:cc:51:d2:4c:9b:54:
d4:e2:7d:db:63:95:94:6b:be:8e:27:f1:6b:02:e7:
59:61:ac:c2:f7:ef:f4:01:f0:d4:c6:95:62:4a:5c:
6f:3f:28:c6:18:b9:21:a3:e2:71:c0:c8:76:e5:c2:
09:d5:73:ad:24:1a:2c:40:9c:98:e1:cc:e4:39:04:
4e:65:ff:d9:06:47:bf:b6:66:ef:6a:da:a7:20:ef:
8b:67:36:92:91:d6:ec:a0:17:06:b7:fd:73:45:16:
bf:58:11:ec:fa:4f:e0:86:94:3c:f4:ad:0d:4a:ee:
db:3f:ca:9e:d4:7a:dc:46:c6:b0:1b:8e:53:30:a0:
86:b0:b6:41:46:92:6f:33:c3:86:eb:1b:d2:d7:3c:
1f:15:a0:2e:93:70:72:3a:3b:6d:80:ef:ed:3f:dd:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:03:7F:44:7B:A4:A4:C7:2B:E9:23:F5:4F:2D:DA:BA:AE:70:AA
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/193DAF98B4BA11F087F2BAC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.70.0/24
Signature Algorithm: sha256WithRSAEncryption
27:90:98:d7:0d:3c:3d:e5:4b:6e:8e:ee:94:cb:5e:0c:83:33:
bb:fe:e9:e7:77:cc:86:86:4b:80:b4:9e:54:01:ef:19:03:1a:
34:02:a0:3c:7e:4e:b9:28:b0:79:ea:cf:f3:cf:26:31:3c:be:
be:40:ba:c0:69:15:06:06:fd:57:18:ed:06:6a:50:76:88:f3:
8e:6d:9c:9a:08:fa:25:19:1b:b4:08:7f:42:7f:c0:37:a0:f4:
b3:c8:18:61:f8:5b:98:27:99:59:6e:18:2d:cb:40:1a:9c:0e:
d4:c5:45:30:a2:3c:d5:da:23:2f:99:c1:34:07:10:01:d1:c2:
4e:51:cc:d7:85:fc:99:64:1e:91:72:cf:e1:99:58:0c:b7:cd:
c7:f5:bd:c3:9a:74:46:da:e9:6d:d4:1a:e8:61:08:14:67:0c:
7c:96:77:e2:75:b6:78:68:06:05:e6:7f:0f:be:87:df:bf:76:
2d:aa:96:db:91:f3:26:2a:f4:ba:ba:08:dc:58:14:73:53:38:
c8:3a:7e:d0:a2:74:97:54:e7:de:bd:e4:58:50:10:30:01:b3:
cf:1b:18:67:f2:aa:3e:c9:3e:02:89:29:32:61:c3:81:72:94:
b9:5a:77:a7:b3:5e:fb:8e:72:49:77:a3:6c:86:6c:f1:eb:0b:
24:b5:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:20:10 2025 by rpki-client