Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/997ACAAAB3F311F09F4123E8DAE4EC9C.roa
File: 997ACAAAB3F311F09F4123E8DAE4EC9C.roa (raw, json)
Hash identifier: aj71C6S9IyeQD9T431wninKGCmhlILMfgQlUAyr1acY=
Subject key identifier: 5F:79:62:54:9C:9E:83:A8:83:6D:80:FD:23:18:DC:4B:05:69:A1:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01836E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/997ACAAAB3F311F09F4123E8DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:45:29 +0000
ROA not before: Tue 28 Oct 2025 11:45:24 +0000
ROA not after: Mon 08 Dec 2025 11:45:24 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99182 (0x1836e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 11:45:24 2025 GMT
Not After : Dec 8 11:45:24 2025 GMT
Subject: CN=6900acd8-4c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:99:79:42:8d:dd:79:45:b5:2e:9c:60:89:
c8:76:ab:26:0e:0c:ab:e1:ca:4d:69:30:9b:e1:ac:
05:0e:e0:4c:a3:08:58:ec:48:37:45:57:98:0b:3e:
a3:89:df:ba:49:b6:a3:fb:2d:5a:e9:d1:79:de:31:
c8:81:be:b9:c5:3c:cb:8c:a4:8e:5d:54:1c:10:77:
1a:0c:a6:bb:4b:ef:3c:a8:6e:59:a9:2f:fe:56:fe:
26:28:bf:11:fd:75:0b:46:fd:39:b6:de:97:97:42:
a9:e8:85:82:ca:92:8b:34:5f:74:ed:b5:5b:c0:c9:
03:b9:d4:ea:37:5c:48:50:12:68:fa:9d:ae:50:84:
58:8a:c7:b0:89:76:86:2d:b2:47:b1:67:a8:b2:38:
47:a3:12:82:f5:bd:eb:3c:a3:2e:a8:6a:33:14:d0:
72:4d:c3:2f:1c:26:8f:8e:2e:61:0d:a3:94:cf:4d:
30:22:dc:12:63:df:d3:5a:59:f4:dc:02:ec:18:ea:
65:fa:84:21:99:11:69:67:d6:a0:d8:b3:56:82:15:
f7:4a:ea:e4:3e:f2:c6:ef:f8:a9:61:44:44:d2:ed:
5f:2f:7a:2f:55:10:b2:61:01:9d:72:4f:23:f7:c1:
fa:01:dc:3c:1b:c5:16:c2:5b:5d:49:35:2e:ee:cc:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:62:54:9C:9E:83:A8:83:6D:80:FD:23:18:DC:4B:05:69:A1:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/997ACAAAB3F311F09F4123E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:61:8b:cf:f9:ce:52:93:58:b3:81:f5:9e:5a:85:07:dd:5a:
07:99:a2:79:be:7b:a2:3c:8b:50:62:b6:b0:85:15:08:f6:d8:
23:03:08:aa:dd:e3:5b:1e:36:f9:4a:d3:38:7c:77:8e:f1:8a:
75:0c:8c:e5:aa:a9:f5:d5:9e:45:df:c9:b6:7b:42:5e:1c:4d:
2f:df:1f:40:2d:27:76:24:a8:78:47:67:ef:6b:e6:0c:0e:69:
d8:78:e2:f6:d7:a1:66:1e:03:6e:4e:31:26:ac:0a:5f:6c:40:
7e:e8:1d:bf:9a:97:b4:ea:26:fd:56:56:41:23:56:ad:ae:74:
7f:96:9f:15:e8:28:52:64:be:9c:12:e8:8a:eb:78:8d:d8:f5:
0d:d1:a1:8c:94:77:b0:ef:d3:0c:44:f3:4b:44:17:ad:1a:6f:
ce:d4:5d:b5:b3:29:a4:ed:26:fc:f4:aa:09:2f:25:6b:24:12:
66:03:48:cb:d2:87:50:b4:76:99:6b:4d:d5:e7:d8:97:e5:e6:
55:80:26:ab:6b:cc:35:ee:e8:ed:32:05:eb:35:ea:9a:83:7e:
d2:a9:1d:ec:4d:1e:eb:f5:9c:fb:1c:43:04:64:25:73:32:95:
63:4d:bb:5d:65:4b:dc:a1:21:42:6f:5e:b9:8a:e1:6c:af:4f:
62:8b:fe:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYNuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MTE0NTI0WhcNMjUxMjA4MTE0NTI0WjAYMRYw
FAYDVQQDEw02OTAwYWNkOC00YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp5KZeUKN3XlFtS6cYInIdqsmDgyr4cpNaTCb4awFDuBMowhY7Eg3RVeY
Cz6jid+6Sbaj+y1a6dF53jHIgb65xTzLjKSOXVQcEHcaDKa7S+88qG5ZqS/+Vv4m
KL8R/XULRv05tt6Xl0Kp6IWCypKLNF907bVbwMkDudTqN1xIUBJo+p2uUIRYisew
iXaGLbJHsWeosjhHoxKC9b3rPKMuqGozFNByTcMvHCaPji5hDaOUz00wItwSY9/T
Wln03ALsGOpl+oQhmRFpZ9ag2LNWghX3SurkPvLG7/ipYURE0u1fL3ovVRCyYQGd
ck8j98H6Adw8G8UWwltdSTUu7sycyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF95
YlScnoOog22A/SMY3EsFaaHZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTdBQ0FBQUIzRjMxMUYwOUY0MTIzRThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIGMA0GCSqGSIb3DQEBCwUA
A4IBAQCgYYvP+c5Sk1izgfWeWoUH3VoHmaJ5vnuiPItQYrawhRUI9tgjAwiq3eNb
Hjb5StM4fHeO8Yp1DIzlqqn11Z5F38m2e0JeHE0v3x9ALSd2JKh4R2fva+YMDmnY
eOL216FmHgNuTjEmrApfbEB+6B2/mpe06ib9VlZBI1atrnR/lp8V6ChSZL6cEuiK
63iN2PUN0aGMlHew79MMRPNLRBetGm/O1F21symk7Sb89KoJLyVrJBJmA0jL0odQ
tHaZa03V59iX5eZVgCara8w17ujtMgXrNeqag37SqR3sTR7r9Zz7HEMEZCVzMpVj
TbtdZUvcoSFCb165iuFsr09ii/6x
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:58 2025 by rpki-client