Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C74AC5D0AD8A11F09C52B0B8DAE4EC9C.roa
File: C74AC5D0AD8A11F09C52B0B8DAE4EC9C.roa (raw, json)
Hash identifier: SC57G9aYJ46MshSjL3QVx4U8tts8kmKgsRoRuJ5IhZo=
Subject key identifier: 1C:F3:BE:C7:E9:3E:F6:E5:D3:51:D5:B8:EC:FD:AC:28:E6:36:FE:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018189
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C74AC5D0AD8A11F09C52B0B8DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:00:01 +0000
ROA not before: Mon 20 Oct 2025 07:59:56 +0000
ROA not after: Tue 25 Nov 2025 07:59:56 +0000
asID: 2914
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98697 (0x18189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 07:59:56 2025 GMT
Not After : Nov 25 07:59:56 2025 GMT
Subject: CN=68f5ec01-8723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:1f:a5:6f:75:41:37:be:02:2b:99:99:dc:
2b:a2:b4:ee:18:cb:fd:ed:fa:f9:01:1e:57:25:ee:
96:a2:06:77:fa:74:51:a9:8e:fd:0f:99:d7:e3:ff:
d7:19:d5:0e:de:78:e8:e2:34:16:3f:29:e2:c2:0a:
28:af:74:35:43:68:5c:44:cc:5b:43:3c:cf:41:1e:
f6:6c:3c:7f:36:54:c4:d3:a0:9b:fa:70:95:50:4d:
25:68:42:1c:4a:88:0f:41:a1:3d:32:5a:48:da:8e:
99:d4:34:bd:ef:8c:11:06:61:dc:7d:04:88:7a:44:
cc:61:51:c1:4f:31:62:d1:50:2c:05:fb:81:e2:de:
2e:90:3b:47:17:e4:b5:44:44:71:db:de:a0:38:10:
c0:dd:08:d0:ad:90:f9:b0:21:7d:e1:cf:84:13:15:
dc:1c:ca:b1:74:e4:38:f0:de:7d:dd:14:bb:f6:96:
41:3b:60:2a:f9:fe:3e:42:9f:f9:52:02:9c:bb:07:
5e:6a:d8:85:b5:67:c0:7c:f3:47:71:36:28:4c:4b:
49:40:84:af:3d:9f:9b:9b:f1:30:ff:f0:bd:ff:57:
16:ff:3c:6f:90:ae:82:0f:a7:b1:83:63:bb:50:2c:
4d:62:3d:c0:05:33:3c:1e:24:7a:88:32:ad:c2:ea:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F3:BE:C7:E9:3E:F6:E5:D3:51:D5:B8:EC:FD:AC:28:E6:36:FE:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C74AC5D0AD8A11F09C52B0B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b3:ef:23:5c:79:cd:97:1a:6d:68:12:84:54:7a:ff:43:a3:
79:39:2d:ff:41:fa:3e:f2:19:19:c7:2f:5e:2d:47:5c:61:24:
95:32:76:2c:4b:5d:ff:06:8b:93:fb:2f:6f:f0:3a:37:81:ce:
d8:58:7f:ab:40:2a:66:dd:d2:40:54:ba:8a:9b:a0:9d:00:5c:
8f:6f:2d:87:a5:0b:ad:88:50:3e:08:c3:c4:ca:b9:f1:4e:8d:
8b:f9:cf:d4:d6:e0:7b:fa:34:d6:14:7d:4d:88:89:44:94:0c:
8b:49:51:83:3e:08:0d:c1:62:12:f3:ed:0c:c2:44:62:d0:4f:
67:cb:67:97:5d:00:78:c1:9c:bd:a7:41:d9:17:9f:78:1a:73:
37:45:e2:07:ff:a2:67:78:66:ae:24:2e:b6:be:45:f0:d7:9a:
b3:a7:83:be:6f:d6:47:49:de:49:c3:20:ce:3c:86:f8:ac:09:
47:7e:91:d3:1a:fe:83:bb:c3:28:32:02:44:b6:8e:53:ca:d2:
60:94:ae:9d:f6:c8:4c:b1:5e:ae:cc:be:32:8c:74:c8:78:2f:
f4:ab:53:91:33:5c:5d:ed:0a:de:d1:64:d5:a7:cc:cb:e1:5a:
80:48:18:82:82:f6:a6:28:c0:0f:d3:67:0d:02:42:66:3c:ab:
6a:71:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:29:34 2025 by rpki-client