Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9921A502B51911F084239A89DAE4EC9C.roa
File: 9921A502B51911F084239A89DAE4EC9C.roa (raw, json)
Hash identifier: z27uEl+ee8aKJcez9ervmLqVysYKy6GmJbcdTppm4fc=
Subject key identifier: 93:20:FD:4B:86:29:E5:46:DA:D3:46:A1:8D:5E:54:78:38:F5:73:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9921A502B51911F084239A89DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 22:50:00 +0000
ROA not before: Thu 30 Oct 2025 22:49:53 +0000
ROA not after: Sat 29 Nov 2025 22:49:53 +0000
asID: 20326
IP address blocks: 45.207.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99311 (0x183ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 22:49:53 2025 GMT
Not After : Nov 29 22:49:53 2025 GMT
Subject: CN=69029a18-826e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:ab:10:ca:01:92:71:ef:ff:11:09:4f:14:
65:33:a0:12:76:0c:e9:b0:a6:a6:19:7c:50:b2:93:
50:ec:a7:82:1c:6f:14:49:8b:cc:2a:ac:fe:e3:60:
67:05:85:4b:3c:93:f8:f3:2b:44:9f:a6:cb:9f:fb:
e0:4f:43:49:e0:bb:d9:f3:43:0b:81:51:cb:71:df:
5d:e5:36:d0:d8:ae:0b:9b:43:a9:ac:81:0c:cb:ea:
a2:90:2c:44:be:f8:ed:d1:8e:99:8c:4e:73:10:1e:
b9:80:2e:40:ca:ec:c4:d7:04:c1:1c:45:b1:61:1a:
71:4b:d0:0f:82:63:30:3a:ca:b3:ec:54:1d:43:72:
ca:9b:c7:e4:bf:3e:71:5c:5a:7e:03:ea:41:29:6b:
b4:e8:28:3b:06:51:64:d6:5e:51:d7:60:29:97:da:
a4:83:1b:f0:12:d5:6d:fe:3b:d1:32:49:00:20:63:
d8:cf:5a:3f:fb:d9:83:10:7c:32:dd:51:2e:a5:6e:
65:4b:8f:52:b8:0c:62:df:b6:f2:ee:ed:36:df:3f:
55:1f:d3:34:65:d1:f6:7f:b1:07:28:b5:21:44:03:
92:61:89:07:02:78:9b:11:9c:e7:1d:9e:3e:1a:f1:
b5:6c:4b:c8:9f:af:89:7b:b1:c7:5d:57:ea:39:09:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:20:FD:4B:86:29:E5:46:DA:D3:46:A1:8D:5E:54:78:38:F5:73:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9921A502B51911F084239A89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.174.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c5:32:d3:da:98:8a:52:72:97:9d:b5:19:7b:11:ab:0c:db:
e8:22:cb:df:f9:62:dc:ee:f4:0a:df:65:d8:6d:62:99:76:ae:
3e:27:bf:2e:30:54:f1:0c:73:d2:7f:f2:89:aa:bb:3d:00:f1:
15:71:57:7e:02:77:43:7e:ee:87:76:3d:6c:d3:47:af:b7:3e:
a0:35:b5:c8:19:b2:d4:ec:14:d0:ec:ba:02:03:96:45:59:f8:
12:29:6d:ad:76:8d:34:d0:d0:1f:56:3f:29:47:34:41:dd:48:
56:af:85:8c:e0:b4:18:a1:c2:29:54:ea:05:9e:db:39:5a:57:
5d:5f:b4:d1:a5:53:72:46:38:c7:a6:91:de:64:f3:8f:44:25:
b6:72:2b:1e:ac:8f:09:c4:02:bc:2b:48:a6:9d:dc:24:ac:ff:
be:b3:46:5a:79:50:8b:4a:f8:e7:2c:20:cb:e8:27:b9:e3:22:
f6:79:81:60:26:59:74:7e:f7:d7:4d:f2:8f:b1:e9:b6:1e:53:
15:07:54:3e:8d:cd:10:2a:01:49:18:fa:ae:11:4c:dc:cd:11:
f4:20:a7:6c:81:14:c5:b4:82:ea:c8:b1:1c:d7:2d:87:61:be:
83:95:1f:3a:21:ef:ea:66:81:f8:cc:f1:bf:da:ca:e4:9d:33:
d1:68:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:10 2025 by rpki-client