Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E41D4BE2B3FC11F09EC7E5A2DAE4EC9C.roa
File: E41D4BE2B3FC11F09EC7E5A2DAE4EC9C.roa (raw, json)
Hash identifier: 1JSwGfjzpfdtdEtSlrAov6Ubm2CMhNJZJA3OVzCoIy0=
Subject key identifier: 4A:2B:72:1D:51:E8:09:10:07:01:74:DC:4A:CB:6D:ED:A4:FC:AD:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018382
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E41D4BE2B3FC11F09EC7E5A2DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 12:51:59 +0000
ROA not before: Tue 28 Oct 2025 12:51:54 +0000
ROA not after: Wed 10 Dec 2025 12:51:54 +0000
asID: 63139
IP address blocks: 45.197.67.0/24 maxlen: 24
45.197.68.0/23 maxlen: 24
45.197.68.0/24 maxlen: 24
45.197.69.0/24 maxlen: 24
45.197.70.0/24 maxlen: 24
45.197.71.0/24 maxlen: 24
45.197.72.0/24 maxlen: 24
45.197.73.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99202 (0x18382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 12:51:54 2025 GMT
Not After : Dec 10 12:51:54 2025 GMT
Subject: CN=6900bc6f-a212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:1c:ec:0e:4b:9e:58:dd:f0:cc:3f:13:4b:
bc:7d:87:b9:ae:79:5b:de:41:a6:16:72:8e:35:3c:
98:59:b6:01:92:81:5e:a0:e4:53:57:65:a3:1a:52:
94:19:be:d1:8e:b1:e3:e7:d6:73:e0:d7:a7:4e:4b:
01:50:25:87:1c:1e:ca:ac:23:ec:cb:e8:3e:8f:ed:
60:21:1b:6a:c2:3a:73:89:20:32:d5:75:2c:08:68:
08:ad:08:b4:15:70:a1:e3:d8:ba:62:1a:b9:ee:2f:
43:38:b1:3d:bb:f3:35:f0:46:de:b0:1a:0a:5e:cb:
67:9f:b4:36:38:c3:db:f2:57:68:5c:d5:7d:81:3c:
83:67:82:13:30:35:4e:47:2a:76:7e:67:13:13:21:
86:ef:af:1d:ed:88:f6:0b:76:4b:5c:5a:df:55:3e:
29:fd:9c:6e:ef:33:10:71:10:9b:19:fe:e2:c6:3c:
5f:95:5d:9e:4e:d2:12:1e:56:af:21:c6:8d:42:fd:
d3:77:22:04:41:4f:13:0c:fb:59:0a:3d:83:a0:4b:
22:5b:62:bc:56:8d:0c:56:2b:8b:78:af:d2:db:3b:
32:2e:4e:ba:d0:0a:36:d7:13:47:d5:ba:f8:87:9d:
9e:bf:aa:da:53:ac:34:83:21:d3:30:82:c6:36:9b:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:72:1D:51:E8:09:10:07:01:74:DC:4A:CB:6D:ED:A4:FC:AD:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E41D4BE2B3FC11F09EC7E5A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.67.0-45.197.75.255
Signature Algorithm: sha256WithRSAEncryption
3c:25:92:a7:3f:1b:a8:7d:86:3a:9a:40:8f:37:0c:73:54:aa:
59:d8:ae:5a:a3:86:a5:c6:13:2b:d3:e5:01:13:e6:7e:fc:52:
e8:1f:02:62:ae:62:5b:f3:16:41:67:b9:f7:b3:cb:bd:ac:56:
0e:b9:ef:81:1d:a6:37:af:3c:b9:07:ad:eb:13:db:a8:8b:d9:
e7:09:9b:5f:57:25:b8:2f:b8:bc:10:e2:a7:5e:0c:03:4f:6e:
fb:36:4b:6c:41:50:71:7e:2e:e5:8d:59:7d:a0:f8:8b:ae:c5:
f8:41:ed:6f:fe:0d:a8:c5:16:90:ce:67:c7:dc:00:ad:79:74:
a5:c5:15:84:4f:86:0b:05:64:c3:7e:40:f6:fd:32:15:59:f9:
a5:9a:9e:5f:3c:bd:38:e1:79:b2:b9:b2:c3:ed:d1:2f:13:26:
49:8c:00:87:dc:ea:ec:56:08:37:48:33:01:ed:ab:d9:09:57:
64:71:2a:73:8c:8d:47:10:fa:a7:90:8a:42:8c:cb:32:17:45:
7c:b9:f2:21:a5:65:e5:35:f2:e7:d2:aa:02:2b:79:1f:8a:c7:
85:be:d0:59:90:c8:27:5e:8e:08:99:5b:28:cb:78:7a:e8:39:
1a:4d:c9:a3:1c:ce:46:aa:b9:c7:73:93:be:14:16:0d:03:6e:
dc:de:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:48 2025 by rpki-client