Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8AF666B89B11F0A490C3AEDAE4EC9C.roa
File: 9A8AF666B89B11F0A490C3AEDAE4EC9C.roa (raw, json)
Hash identifier: j3YjPgiHL5COK3p8krfQB7EDOmqQ2fxOTuDvCtFXOJ4=
Subject key identifier: C6:08:0B:59:F9:31:3D:75:28:C6:07:AE:18:91:83:71:7E:93:F1:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018487
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8AF666B89B11F0A490C3AEDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 09:58:10 +0000
ROA not before: Mon 03 Nov 2025 09:58:06 +0000
ROA not after: Mon 08 Dec 2025 09:58:06 +0000
asID: 149940
IP address blocks: 45.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99463 (0x18487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 09:58:06 2025 GMT
Not After : Dec 8 09:58:06 2025 GMT
Subject: CN=69087cb2-9c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:e0:08:f4:bc:f5:c5:29:43:ea:97:63:d3:
7c:ad:c0:04:28:ff:a5:c1:e2:89:f9:c2:c0:ab:d6:
a5:0e:93:89:3b:d2:96:18:e8:92:10:14:4e:7e:1d:
51:ac:05:f3:6b:7c:48:5d:8c:0f:3c:5a:d4:4e:0a:
cb:ae:17:e2:ef:d7:78:f6:38:a0:db:57:89:72:0a:
23:e3:2e:40:17:ef:d2:d2:ee:7d:78:3b:e7:13:88:
0e:52:18:fe:77:96:84:db:0e:84:34:9b:f0:c5:f7:
24:33:e2:d0:ba:b8:87:3b:91:de:b8:36:ea:ce:2f:
75:19:ab:9e:75:42:08:ef:f0:c0:c3:7e:78:7d:82:
d6:4d:f9:cf:13:80:e1:c8:f3:56:5f:d2:bd:ac:ac:
0c:e8:99:76:fc:38:81:46:9e:20:8a:6a:39:a2:81:
5f:bc:bd:ae:bb:69:f4:1f:4a:33:65:de:6e:f2:12:
ad:ab:2f:f0:46:7c:f1:40:b9:f9:3d:41:b2:01:c2:
93:2e:11:5c:05:be:4a:78:51:ef:c1:70:78:f8:3d:
38:c7:94:ba:94:84:53:08:84:61:39:ae:79:a8:90:
96:6b:b7:7d:75:85:38:e5:82:16:f4:76:50:94:43:
f1:d7:f0:b9:d1:05:07:53:bf:b6:35:87:94:53:37:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:0B:59:F9:31:3D:75:28:C6:07:AE:18:91:83:71:7E:93:F1:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8AF666B89B11F0A490C3AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a3:a8:d7:32:c7:fd:91:c1:2b:7e:b5:1a:46:f5:71:70:70:
c1:03:ef:79:e7:d4:61:df:a8:1a:fd:07:a7:4e:f8:ac:ce:51:
6a:f4:66:67:db:21:b3:fe:ec:a8:1e:72:c0:d6:e1:3f:2b:55:
74:c4:11:25:01:6c:de:26:8d:9c:9f:8f:d7:11:4d:62:ca:62:
9f:a7:8c:e5:ba:de:d2:98:9a:b0:49:16:de:ed:b5:d5:06:7b:
c0:c6:0a:b5:1f:03:29:29:de:9b:29:c5:c5:1b:86:64:b0:c2:
0b:bc:9f:87:10:18:da:6e:21:55:5f:2b:7a:14:5d:a5:b4:c8:
55:44:92:03:f9:74:0f:38:75:cc:8e:54:51:0d:ea:5b:14:5c:
78:eb:e8:8f:96:f1:a8:c6:b0:4d:87:4d:9d:ae:d6:99:db:63:
cc:0d:d6:10:5a:e9:bd:8f:e2:c4:25:90:f9:6c:fb:49:ba:8d:
fe:49:a8:80:e6:1e:55:59:cf:95:8c:b1:15:69:7b:34:0d:04:
43:0f:fe:f8:44:a6:c2:97:df:97:1c:c0:aa:01:06:49:3d:d4:
42:fe:05:63:4b:15:93:8f:50:2d:49:75:b3:48:b3:33:2d:c7:
0c:48:db:7d:6d:08:96:1b:56:c2:a5:ae:b2:57:e5:58:23:44:
16:aa:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:17:44 2025 by rpki-client