Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAEB03FCAFEC11F0BB1885A0DAE4EC9C.roa
File: DAEB03FCAFEC11F0BB1885A0DAE4EC9C.roa (raw, json)
Hash identifier: T6ChttdHfScLYyFGvKr1jAAfR1tKeX+ZH9MvEnPTevI=
Subject key identifier: C4:CE:10:BF:76:B4:D7:87:C3:51:D0:D3:C9:C5:AC:A8:41:7B:93:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01821D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAEB03FCAFEC11F0BB1885A0DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 08:47:07 +0000
ROA not before: Thu 23 Oct 2025 08:47:00 +0000
ROA not after: Sat 08 Nov 2025 08:47:00 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98845 (0x1821d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 08:47:00 2025 GMT
Not After : Nov 8 08:47:00 2025 GMT
Subject: CN=68f9eb8b-5d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:2b:2e:00:c2:08:81:41:e2:d7:59:6d:ba:
ec:e8:e2:20:5f:05:b9:d9:36:93:89:14:3c:ea:4a:
20:3c:b7:d1:32:ef:4f:e2:0f:96:fe:ac:03:02:56:
c6:33:3d:3f:02:af:0b:43:6c:09:17:7c:e0:91:51:
27:23:3a:73:c2:85:37:d6:23:98:1c:d2:d1:34:c1:
05:46:38:e7:37:7c:60:af:05:57:13:41:a2:c0:a3:
63:b8:7c:f8:ca:3a:78:b3:75:12:be:21:e1:54:ca:
a0:5d:5a:92:f7:86:1e:5f:1f:54:37:c0:f9:4a:3a:
be:3a:86:6a:d5:a7:64:56:17:57:c6:21:e2:5a:c4:
99:65:bc:ab:22:08:63:64:bd:c7:5d:40:5c:b9:7c:
09:32:c3:f7:29:64:22:04:b1:fe:9a:76:b4:5d:af:
11:d7:da:98:ef:ae:aa:4f:97:67:6c:6e:23:13:e8:
f7:5f:69:bf:55:67:cd:05:49:21:7f:47:b9:22:f1:
5b:2b:ad:60:79:29:dc:8c:81:9d:3e:79:a0:db:a6:
37:5f:11:b5:79:7f:09:3c:34:2a:a2:c5:5f:c8:81:
2d:5a:a6:d4:92:b1:8e:97:f1:48:97:51:55:95:b9:
41:48:d7:97:5e:1e:59:03:c5:43:97:7a:16:a0:f0:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:10:BF:76:B4:D7:87:C3:51:D0:D3:C9:C5:AC:A8:41:7B:93:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAEB03FCAFEC11F0BB1885A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:af:b2:fa:ec:7d:3a:10:fe:c3:7a:e9:c4:62:ab:07:5f:42:
bb:a8:3d:cf:34:cf:82:13:86:95:98:c0:cc:bb:05:51:a2:66:
1f:e1:6e:63:48:51:63:6b:24:af:c3:05:78:d9:4c:7e:80:7a:
23:9c:64:ed:69:94:fe:a6:7a:2d:86:2e:f1:3a:5b:c6:70:72:
fe:a5:18:92:4f:9d:35:0a:c4:ac:d8:02:1d:e8:ce:a8:00:03:
dd:8c:f7:fc:da:ef:af:d0:55:00:b5:79:a3:74:da:5f:be:32:
fa:f1:ed:ad:fb:7d:5f:80:ef:c6:41:d1:7d:a8:95:e0:44:98:
bd:f8:da:3c:0f:67:da:8f:86:82:ac:8c:01:6b:4e:e8:8c:3c:
bd:17:04:45:f3:49:35:20:d4:73:4c:6f:cd:6f:e2:c2:1e:2c:
0c:7e:f6:69:0d:d6:b8:0e:78:8e:5f:ee:63:98:af:b4:f7:21:
b3:66:51:e0:27:c6:51:ac:19:a4:ef:81:8c:40:6d:5d:6c:50:
b1:17:4b:6d:5d:1c:de:70:c8:61:c9:e9:71:f7:3b:cb:a9:d8:
c1:67:9b:66:14:75:3d:4b:3c:ec:53:28:75:db:50:79:6c:83:
2a:81:fb:7f:53:ac:86:2d:5b:db:f8:bd:da:43:53:ed:46:23:
4a:c8:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:50:02 2025 by rpki-client