Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44FC3772B85B11F0940B008ADAE4EC9C.roa
File: 44FC3772B85B11F0940B008ADAE4EC9C.roa (raw, json)
Hash identifier: AZZjqWajSKbJvq3C9KKzfZU46KvTsWvJSuEMSzLS/D4=
Subject key identifier: 4D:A1:D9:D9:88:66:43:24:00:DD:28:9D:B3:3B:E7:4B:5E:3E:E8:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01844B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44FC3772B85B11F0940B008ADAE4EC9C.roa
Signing time: Mon 03 Nov 2025 02:17:40 +0000
ROA not before: Mon 03 Nov 2025 02:17:33 +0000
ROA not after: Sun 07 Dec 2025 02:17:33 +0000
asID: 25198
IP address blocks: 45.197.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99403 (0x1844b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 02:17:33 2025 GMT
Not After : Dec 7 02:17:33 2025 GMT
Subject: CN=690810c4-83c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:34:1c:62:04:b3:4c:64:df:a4:1f:6d:2a:
bd:2f:fd:77:c4:bd:b0:47:f6:85:aa:fe:e2:56:98:
b1:98:29:05:28:18:1a:16:a6:78:fa:23:d9:7c:48:
bc:12:cf:5d:db:88:d1:c4:c1:57:8b:2d:d7:96:c3:
e7:71:b3:2b:52:96:41:1b:87:a2:dd:97:78:c7:16:
eb:eb:13:69:74:09:e2:ba:6e:42:5a:16:ba:0a:16:
c9:e7:c7:41:95:e8:1e:8e:32:81:24:38:ec:9d:dd:
8c:f5:94:99:b1:59:be:76:cd:32:29:e0:4b:9d:a2:
7e:9c:9c:d3:b3:c1:b6:60:a5:e2:79:67:f0:3e:00:
8d:47:87:63:ae:ef:1c:97:c8:25:38:65:ba:a2:de:
01:e6:68:70:4c:07:c1:6b:12:4c:7e:c6:74:8b:96:
6f:bd:52:8d:fe:7c:09:f3:ef:e2:3a:74:02:ea:85:
86:f3:90:09:a8:68:0e:dd:43:f3:1e:d4:53:ab:8c:
ff:5a:68:36:a6:f6:b6:88:8e:1a:e0:34:ea:d9:95:
2d:41:c8:d9:0e:19:ca:a0:8b:54:6f:01:88:91:c3:
b2:06:ea:80:40:ec:0b:83:73:3a:13:f0:2c:36:96:
24:36:a2:1d:27:18:2d:c5:d7:0b:45:76:f1:2a:98:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A1:D9:D9:88:66:43:24:00:DD:28:9D:B3:3B:E7:4B:5E:3E:E8:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44FC3772B85B11F0940B008ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.21.0/24
Signature Algorithm: sha256WithRSAEncryption
15:13:54:b4:96:d4:bb:98:71:57:19:b8:01:69:b8:9a:99:40:
f7:a8:8b:39:4e:f4:79:79:c2:5b:6e:64:6b:0d:b8:bc:23:05:
b2:76:cf:e2:c9:1b:fe:33:29:9c:6c:07:e2:5b:70:24:57:8b:
7c:11:a7:86:d3:ca:50:da:a3:1a:f0:57:e3:31:ae:38:b4:a4:
c0:1a:9d:80:0e:b6:21:5f:34:31:3a:ad:28:a4:6c:53:1d:b6:
ba:0b:c1:61:c0:ed:2c:af:bc:f8:f8:3f:30:d4:4b:1d:74:a1:
76:ea:98:bb:a7:99:b7:a8:fd:b7:f1:e0:6a:55:af:db:4f:cb:
39:63:3d:4b:0a:6c:f7:2b:65:84:c5:d5:1d:04:4f:8e:91:57:
e3:d2:49:74:74:f0:be:59:a5:05:2c:b0:73:23:a1:fb:7e:04:
63:22:73:b4:5c:4d:56:12:78:ac:02:36:ff:5c:68:9a:58:03:
ca:21:c2:e3:e8:0e:20:6e:ed:ae:54:e2:fe:e3:c5:d0:27:13:
13:50:ce:58:2f:b8:26:46:ec:ee:14:c4:4e:27:4c:1a:fe:42:
5c:cf:c3:64:48:48:bc:9c:db:e4:f0:ee:f7:ba:17:cc:12:dd:
c6:a6:d9:fc:e5:28:90:d6:a7:99:e2:71:f5:c4:9e:b8:0e:77:
45:3a:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:11 2025 by rpki-client