Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7294CB2EAF1C11F0A7203DD6DAE4EC9C.roa
File: 7294CB2EAF1C11F0A7203DD6DAE4EC9C.roa (raw, json)
Hash identifier: qQRm+U7DYQ1o5yDHij2p9MsDertLE979eA7fY+IZ9Dg=
Subject key identifier: EA:0A:1D:EE:AA:FD:3A:AA:3E:AA:65:97:6B:6F:F0:3B:23:57:75:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7294CB2EAF1C11F0A7203DD6DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 07:55:17 +0000
ROA not before: Wed 22 Oct 2025 07:55:12 +0000
ROA not after: Thu 27 Nov 2025 07:55:12 +0000
asID: 27951
IP address blocks: 45.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98797 (0x181ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 22 07:55:12 2025 GMT
Not After : Nov 27 07:55:12 2025 GMT
Subject: CN=68f88de5-a43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:ab:69:b8:92:74:42:f9:17:66:e7:7a:85:
09:d2:63:dd:2d:c2:22:98:16:95:c4:0d:12:f6:a6:
f3:bd:09:54:7a:16:6f:1b:13:a9:8b:f5:52:bd:ea:
a4:e9:1f:f3:0e:00:d8:66:66:28:8b:5c:66:ce:62:
8a:02:23:46:d8:fa:af:64:d8:d9:25:07:00:a3:9d:
06:b9:44:ba:43:dd:7e:88:7e:6e:f7:8d:4b:dc:45:
f2:94:94:c0:24:4c:af:5c:3a:55:34:6d:f0:df:fc:
9e:b4:8e:32:79:ac:19:4a:35:13:e9:1d:97:60:de:
8e:10:ee:d5:5a:2e:40:8e:d0:e5:a1:c7:34:9b:fb:
92:95:b0:aa:2d:ef:66:a0:55:4b:1d:53:4d:3d:1b:
e6:a4:2e:aa:83:91:4d:9c:60:3b:31:9e:4a:bf:c1:
23:95:fb:40:27:fe:c6:22:0d:7d:1e:a8:ea:74:68:
8b:7a:6e:6b:53:ce:3f:e3:a0:e5:aa:44:4d:07:83:
20:fe:03:bc:1d:17:fd:a9:48:d0:57:e7:f3:61:e5:
24:c5:ae:c1:18:3f:f3:f6:5a:80:16:d9:4d:26:2c:
22:72:0c:f0:59:04:9c:f6:2e:bc:03:4f:69:0d:5d:
c3:47:25:8f:b4:68:2a:cc:e7:57:ba:0d:86:ad:68:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:1D:EE:AA:FD:3A:AA:3E:AA:65:97:6B:6F:F0:3B:23:57:75:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7294CB2EAF1C11F0A7203DD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ce:be:8f:36:48:9a:22:86:c9:fd:5e:7a:78:3b:3e:03:b3:
bb:6f:85:5d:9b:1b:48:ee:b8:76:46:a9:64:d4:9f:f7:17:35:
fc:b1:a6:0c:22:08:d6:2d:de:3a:d8:b0:c9:b4:e6:f4:5f:19:
5b:e1:b0:45:61:37:57:a1:8d:5f:de:e2:1f:ef:3d:48:27:5e:
c9:2b:81:d3:88:f2:02:bb:46:5b:69:07:2c:05:7f:71:26:5e:
f5:79:7e:f1:64:29:78:dc:1d:f1:ab:f5:8b:32:9a:09:7d:c2:
f8:1b:6d:f2:38:92:9b:23:a7:d6:fc:77:af:83:49:03:35:fb:
9d:f2:ab:b3:df:2e:85:0a:1e:b8:f2:06:85:f8:68:d4:cf:e1:
ab:4d:ff:d1:fa:03:fc:c4:fb:72:33:af:4b:8b:85:42:39:f3:
d2:0a:f1:f6:c9:2e:68:9c:1a:f2:56:8f:58:e0:ee:1c:19:3a:
e9:3a:4c:ad:94:59:cb:8d:ed:f8:83:20:02:ff:62:ef:31:bf:
57:da:3b:91:69:5f:ac:15:fd:0d:94:91:1a:b2:49:44:86:a2:
08:79:61:b6:b6:7f:ff:73:c7:cc:d8:60:5c:ca:a7:e2:60:0a:
63:ae:07:58:b4:b5:57:30:e5:48:83:ed:df:4d:42:13:57:93:
0b:b5:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:38 2025 by rpki-client