Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C741BEB55E11F0BEE72FD2DAE4EC9C.roa
File: D7C741BEB55E11F0BEE72FD2DAE4EC9C.roa (raw, json)
Hash identifier: YC0ePr1mVDlw6N48w1iSvRZszkjQnazhJjGqGkerKYc=
Subject key identifier: A3:10:C2:85:50:1D:A0:1A:7C:98:CE:B1:FE:7B:28:43:53:72:34:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C741BEB55E11F0BEE72FD2DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 07:05:40 +0000
ROA not before: Thu 30 Oct 2025 07:05:36 +0000
ROA not after: Mon 08 Dec 2025 07:05:36 +0000
asID: 8796
IP address blocks: 45.205.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99325 (0x183fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 07:05:36 2025 GMT
Not After : Dec 8 07:05:36 2025 GMT
Subject: CN=69030e44-8dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:71:e3:fa:42:ba:bc:80:ee:50:4b:6e:0a:
d4:4f:13:cf:e8:ea:af:f2:21:d1:e0:fb:f3:26:8b:
9f:f5:fc:63:7a:8f:34:b6:be:2a:d1:ee:0d:eb:35:
4d:53:88:db:ea:2d:c2:19:35:48:45:3c:08:1b:44:
71:05:1d:41:0a:9d:03:4c:60:8b:f8:6e:34:44:2d:
51:6a:21:a1:8b:be:8d:6d:9b:0c:1e:24:11:64:d4:
d2:35:23:7f:fb:ba:78:b8:a2:d5:e0:6d:84:0f:7b:
5a:23:89:3a:9a:d7:bd:93:a9:40:77:f9:e2:fe:d8:
0f:9e:58:7a:d7:84:e3:c5:6b:d8:4a:75:be:26:fb:
c3:36:85:73:44:de:4d:cb:e8:1a:fb:08:98:51:0a:
68:78:59:e7:eb:9a:88:15:e6:c2:b3:b9:dd:a2:43:
6e:59:9d:96:83:09:12:a3:f3:ea:fe:14:85:41:e6:
de:4c:b7:f1:93:06:3a:e6:c4:6d:a0:b8:b6:87:4e:
e7:bb:47:c3:1f:74:3e:02:aa:d3:41:be:4b:7c:af:
90:f0:25:4b:00:c1:ad:84:a9:96:b0:22:b3:63:fa:
58:3a:cd:6b:76:04:4b:38:8b:73:c3:82:09:41:cb:
06:3d:f2:7d:89:3f:7e:09:c3:bd:46:ae:71:dd:84:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:10:C2:85:50:1D:A0:1A:7C:98:CE:B1:FE:7B:28:43:53:72:34:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7C741BEB55E11F0BEE72FD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b8:7b:3a:2a:8f:6e:57:b2:3b:fc:d6:28:15:ed:b0:9b:d5:
86:f3:5e:5e:dd:c7:66:a3:8d:1e:7e:00:bb:8e:bb:f1:0c:7d:
91:2d:bf:24:34:0a:c4:8c:cf:ea:50:4a:61:ac:d7:ec:f9:fd:
05:e8:a7:e6:ad:14:bb:b6:a8:f5:23:68:10:30:fd:3a:94:b3:
2a:7a:76:19:2b:c1:63:fc:26:0b:36:cb:d7:26:82:7a:43:b0:
78:4d:28:32:19:91:50:7f:9e:1b:c1:19:76:b5:b5:da:34:87:
b8:af:e0:af:8f:87:55:f5:fb:45:13:be:67:89:38:e7:c2:e2:
66:63:16:b9:8c:c1:ba:79:cf:3b:4e:78:77:51:fb:5e:bb:57:
fc:9d:81:eb:35:8f:4f:dc:95:e2:de:62:bf:b7:74:dc:1e:af:
75:2b:74:91:5d:cc:5b:c0:0a:20:bf:90:ce:f9:8f:3e:11:5a:
c8:70:51:f4:63:67:d5:7c:53:04:b9:6a:1f:d6:d6:96:e7:38:
a4:ba:23:81:3f:b3:9f:e1:d3:a4:97:c0:28:e9:93:43:8e:14:
9c:82:2c:98:64:5a:0d:34:29:21:d9:36:7c:92:0f:58:91:f3:
8b:92:d4:e1:7c:74:59:d1:0f:74:a9:77:29:f3:cc:7f:63:05:
27:24:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:58 2025 by rpki-client