Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/651641C0B4A911F0BAB44FE5DAE4EC9C.roa
File: 651641C0B4A911F0BAB44FE5DAE4EC9C.roa (raw, json)
Hash identifier: hJkgnseB2OPOMpN7KWsEordbv3ZzLs4LhaUEZki1W5A=
Subject key identifier: 70:56:A4:29:28:69:42:12:1A:37:D6:E5:04:38:E9:39:FE:B9:5C:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/651641C0B4A911F0BAB44FE5DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 09:26:49 +0000
ROA not before: Wed 29 Oct 2025 09:26:44 +0000
ROA not after: Fri 05 Dec 2025 09:26:44 +0000
asID: 44509
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99244 (0x183ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 09:26:44 2025 GMT
Not After : Dec 5 09:26:44 2025 GMT
Subject: CN=6901ddd9-f38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:ae:39:12:d0:45:1a:f7:ae:91:7a:91:11:
70:6f:a7:7f:bb:b8:97:73:09:c4:0d:f2:5b:7f:3a:
98:65:82:e0:8e:e3:dd:73:f6:e2:ba:22:b3:56:32:
9a:40:fe:71:92:78:1a:24:42:21:26:24:b2:9f:98:
0c:ba:0a:4e:bd:35:ac:fb:d2:cf:55:46:55:b6:5c:
d4:ee:d7:13:ae:a7:1b:d4:27:fc:f9:0b:80:73:8b:
31:6f:fa:8f:2c:c7:05:86:53:8b:cc:64:c8:52:c8:
d3:8f:15:e0:19:27:e1:8c:9f:0c:cb:b1:8e:f1:89:
27:dd:cd:4d:d8:f7:98:70:d3:5c:fe:7b:ec:7c:fb:
c8:06:16:af:3d:67:79:5d:0e:5d:a5:c8:ff:2d:89:
a1:e3:f7:b9:10:0e:7e:5c:cc:03:8d:c8:43:f2:4e:
93:dc:c9:11:b0:5e:31:7b:1e:5e:54:00:3e:4d:ff:
6f:0b:02:03:d1:f0:09:25:6c:52:f9:96:f9:0b:cb:
b2:02:f7:cc:8e:8b:fd:fc:01:2a:09:30:ef:5e:1b:
ca:8a:4b:d3:aa:ff:ab:36:35:2c:46:83:2d:80:0c:
af:54:d6:0b:41:26:b7:79:da:cf:6d:ca:4f:82:fc:
22:26:ae:04:fe:76:24:f8:72:01:9e:ed:de:44:be:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:56:A4:29:28:69:42:12:1A:37:D6:E5:04:38:E9:39:FE:B9:5C:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/651641C0B4A911F0BAB44FE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
95:90:2e:f1:6f:54:9b:da:19:ef:27:c5:3e:5e:29:a2:0e:a1:
47:a3:a4:ad:36:1e:77:0b:9a:47:99:46:8c:f2:32:56:72:e5:
96:fe:6c:69:b8:86:bc:c2:66:c1:0f:e8:d7:a7:87:f8:46:6e:
db:d6:d1:5a:ea:05:c7:1b:57:9a:f6:15:c3:dd:90:20:f3:4d:
7d:f2:ff:8a:e5:31:33:4a:98:c3:6f:55:dd:b2:e9:9e:10:7c:
9c:04:00:01:40:a3:b1:bb:b4:47:97:39:3b:c2:d3:7f:f7:c4:
90:b2:88:e6:04:f6:1e:5c:6a:7a:51:15:4c:4f:49:1e:44:a6:
73:f0:12:a5:0c:f8:74:fd:01:eb:86:ff:f7:c8:47:56:6b:bc:
07:d9:3b:10:80:c8:10:9e:11:72:ad:2f:3a:92:ed:40:a1:c5:
99:7d:c6:f0:6e:05:3a:06:90:5c:3f:36:ce:33:f2:2c:c7:4d:
5e:db:39:ac:35:76:43:32:6b:3b:ef:77:6f:23:33:d8:cc:1a:
35:48:63:2d:03:70:2b:89:78:af:a1:28:59:c3:62:58:84:fa:
7d:a4:6e:3b:22:fe:4e:b5:76:f4:ce:ad:d1:fb:d4:85:95:ed:
9a:df:69:fb:38:48:c6:40:5d:54:b4:35:e3:5e:80:3e:11:3b:
f1:a0:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:34:33 2025 by rpki-client