Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76322592AFE411F0B33472EADAE4EC9C.roa
File: 76322592AFE411F0B33472EADAE4EC9C.roa (raw, json)
Hash identifier: rQndhpcPdD9BVCWpr7ouW691U0D7TYh6oRtUpKa3QZE=
Subject key identifier: 59:9B:4B:23:F2:18:1D:B7:83:1E:3D:70:F2:7E:D3:E6:ED:CA:58:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018213
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76322592AFE411F0B33472EADAE4EC9C.roa
Signing time: Thu 23 Oct 2025 07:47:02 +0000
ROA not before: Thu 23 Oct 2025 07:46:57 +0000
ROA not after: Sun 23 Nov 2025 07:46:57 +0000
asID: 208185
IP address blocks: 45.207.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98835 (0x18213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 07:46:57 2025 GMT
Not After : Nov 23 07:46:57 2025 GMT
Subject: CN=68f9dd76-cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:ca:3c:a0:1b:10:47:fe:5f:8c:a4:fa:f0:
e2:a3:bf:f6:56:88:7d:64:9f:08:c8:4f:c8:3d:84:
d8:c5:81:66:10:60:5a:3a:9a:c6:5e:7d:97:c9:45:
dd:d7:5f:75:c2:1d:8e:b9:f6:5f:04:2d:a0:93:a5:
aa:60:17:52:28:9f:7d:d9:f3:08:f0:5a:da:c2:9b:
45:45:de:0e:66:53:fa:f1:3c:2e:ee:f0:1e:f2:e3:
a5:df:fb:dd:d9:8c:a3:1e:37:a5:84:5a:f8:27:e9:
7b:61:2e:85:52:99:18:91:23:66:5a:5a:b5:c8:b5:
da:89:8b:ec:c6:25:9a:68:49:6c:8c:3c:d0:db:b6:
6b:a0:0c:20:d0:a8:11:5c:f2:c7:81:08:c1:42:6c:
94:ea:c8:65:74:cc:ce:40:f9:6e:4e:7c:8e:f2:d2:
14:e7:35:54:c7:35:46:76:92:c5:c6:18:23:07:51:
97:d3:d7:3a:dc:32:1c:62:a6:73:65:a1:97:ca:4e:
ed:02:9f:88:9d:98:5f:07:48:ab:d6:2b:48:be:db:
9c:aa:a6:27:cc:a0:04:a8:93:e1:31:91:f1:c3:a9:
9b:4c:9e:f7:88:06:d4:60:77:a9:62:63:fc:c4:80:
9c:9c:f2:43:98:4b:b8:8e:ca:8c:2f:61:15:e9:ef:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:4B:23:F2:18:1D:B7:83:1E:3D:70:F2:7E:D3:E6:ED:CA:58:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76322592AFE411F0B33472EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0b:d9:cf:ad:2d:08:b1:bb:96:15:f2:41:4f:43:e1:b9:d3:
15:62:31:88:7e:fd:42:65:50:03:f6:17:74:82:e1:1e:d4:69:
81:77:cf:f4:58:fd:81:d8:e4:5b:8f:e9:58:27:b2:b1:18:c2:
00:46:a0:37:30:9c:4c:d1:af:ba:09:8e:9c:21:bf:f6:c1:7a:
48:d7:d5:a0:ef:4d:cd:eb:aa:67:40:dc:16:ca:b0:3f:29:34:
58:71:28:12:5a:51:c4:c9:1c:90:58:e6:29:28:e3:39:ec:25:
3e:bd:33:9f:d3:2a:9d:e3:13:7f:bf:8a:85:bd:29:20:b5:1c:
a3:5b:f5:e5:ca:96:0c:5f:02:83:52:fa:00:ac:b1:e9:14:f5:
88:da:8b:a4:e8:7d:7b:ae:b4:8d:2a:23:22:62:2e:d9:3a:90:
35:dc:0a:8c:a4:7c:4f:cd:8d:ed:5a:80:eb:6f:97:71:1d:5c:
15:43:05:4c:a2:33:76:f4:7a:69:b3:d1:7a:ac:39:10:e5:ee:
a0:22:23:82:b8:ec:57:52:d7:6f:cc:6e:63:f6:e0:00:e3:81:
cc:1e:60:0c:e3:35:52:27:d0:92:29:0e:61:0f:3a:7a:38:b7:
d6:8c:c0:84:a3:e6:f7:89:98:9e:7b:ec:6e:34:64:68:d7:d3:
f8:2f:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:46 2025 by rpki-client