Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/9DC45B8CB4BE11F084A4EEDEDAE4EC9C.roa
File: 9DC45B8CB4BE11F084A4EEDEDAE4EC9C.roa (raw, json)
Hash identifier: U6viFYbvqJE7YEGWKkiWZTJIIipG0IMk3E+oER0wCdU=
Subject key identifier: 3B:5B:23:6D:AE:40:86:31:62:0B:BC:0B:43:C2:D4:E8:92:6E:BA:C2
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0631
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/9DC45B8CB4BE11F084A4EEDEDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 11:58:43 +0000
ROA not before: Wed 29 Oct 2025 11:58:39 +0000
ROA not after: Tue 27 Oct 2026 11:58:39 +0000
asID: 55154
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Oct 29 11:58:39 2025 GMT
Not After : Oct 27 11:58:39 2026 GMT
Subject: CN=69020173-3d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:e2:ca:4c:e2:87:18:8a:37:8c:25:f6:d4:
3a:a1:39:f4:80:ce:0e:e4:66:e7:dd:40:9b:a7:72:
54:d6:b3:cd:d8:c7:1e:5f:18:5d:aa:d7:f7:92:b1:
2b:c6:83:4a:57:80:b4:f2:d6:d9:d2:eb:a3:55:4f:
a9:d6:19:79:64:8f:4d:d9:ac:a1:58:18:e7:0c:a9:
4d:0d:b0:6b:0d:da:29:4b:f5:00:5e:d4:88:81:04:
c5:98:79:60:ad:c4:53:e1:63:84:7e:7c:f0:35:30:
ad:e7:eb:0f:80:87:0d:ab:f7:4d:71:b2:dd:4d:df:
7a:23:fd:ab:e1:b6:fa:86:50:7a:5c:f4:71:d8:99:
25:56:fa:32:f4:99:b9:47:85:47:e2:2b:e8:02:39:
81:37:39:25:01:55:c9:24:1f:28:db:ab:00:14:c6:
33:7a:fe:da:64:59:b4:dd:40:5e:9c:e4:f2:4c:85:
dd:c9:40:2e:eb:22:01:1d:d4:31:f7:6c:26:0f:4c:
95:6b:ed:5e:2d:9a:ed:d3:7d:16:9f:d4:7e:65:9a:
95:90:d6:18:17:04:2e:a0:7f:8f:bd:e7:4d:db:09:
4d:ab:62:31:e3:f1:96:65:8b:46:07:d1:65:10:9d:
a0:28:9e:3a:5e:e4:31:06:ab:d2:07:5e:25:bd:cd:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5B:23:6D:AE:40:86:31:62:0B:BC:0B:43:C2:D4:E8:92:6E:BA:C2
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/9DC45B8CB4BE11F084A4EEDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a9:70:e5:9f:c5:01:24:49:cd:34:0a:6d:7a:df:59:f5:3d:
d9:ee:5c:03:ed:10:bf:de:3f:ff:cf:c3:84:ed:b8:a3:43:bf:
03:00:1b:9a:07:53:e2:ce:49:10:64:68:ef:23:47:26:37:f5:
40:66:da:12:35:89:73:fa:08:27:09:c7:22:15:3b:3e:e6:5c:
ae:18:e4:6c:3a:49:d4:d3:52:ec:78:88:bd:1c:97:1e:20:01:
bf:83:4d:60:80:89:99:22:9f:4a:dd:9c:40:15:37:37:6f:5c:
ec:5c:87:dd:45:b9:2d:49:de:46:47:c3:7a:22:2a:3b:06:ce:
5b:5e:f7:51:bf:1e:35:5a:47:27:06:b5:69:6c:db:8c:a5:a7:
db:e1:99:2a:a6:98:e1:ab:ec:f3:13:cd:b7:4a:78:13:30:00:
67:90:16:a8:29:5c:97:ff:45:ff:a9:32:81:96:52:6d:47:8a:
72:9b:b0:f5:72:5f:64:13:20:88:84:55:00:4e:d3:85:bd:9f:
2f:d7:a0:e9:bc:2d:ea:07:0e:93:62:b7:ed:4b:2d:20:1e:34:
85:03:08:cb:b4:cc:71:79:65:db:01:71:86:4b:9e:9a:8d:2a:
95:86:30:52:df:bd:d8:03:6f:83:28:e5:38:41:bd:59:d5:6a:
dd:ac:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:37:52 2025 by rpki-client