Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93AB04EB3EF11F0B727CED0DAE4EC9C.roa
File: F93AB04EB3EF11F0B727CED0DAE4EC9C.roa (raw, json)
Hash identifier: 4a/YfNJ79Kg6STOEtkqWSJ1F/2CAF0SV3fMjQ5pygg4=
Subject key identifier: C5:BF:6F:FF:37:8D:EA:F5:C4:60:7A:8F:C3:47:3F:1E:23:FF:29:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01836C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93AB04EB3EF11F0B727CED0DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:19:31 +0000
ROA not before: Tue 28 Oct 2025 11:19:26 +0000
ROA not after: Sat 06 Dec 2025 11:19:26 +0000
asID: 14315
IP address blocks: 45.202.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99180 (0x1836c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 11:19:26 2025 GMT
Not After : Dec 6 11:19:26 2025 GMT
Subject: CN=6900a6c3-cdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:9a:f9:37:53:4a:ec:f3:1e:f8:c7:30:aa:
b8:03:f3:ee:da:79:1b:24:78:49:c3:09:9f:32:27:
f5:6c:e4:b0:5a:52:c9:70:da:ec:39:8f:7d:35:40:
f5:c0:d8:a9:db:23:a1:04:95:e9:1f:eb:0e:bd:6e:
f7:f2:33:f5:b2:cf:88:1e:46:0e:a4:af:12:cc:17:
8c:62:45:35:65:0d:73:2b:c5:97:b9:a9:ef:90:04:
a0:28:d8:78:e9:36:00:b9:54:5f:fe:ea:97:32:84:
e5:7f:43:e5:e7:6e:71:e9:89:6d:b0:d7:a4:ac:b5:
28:fd:5d:66:64:1a:7b:3d:e0:3e:c5:b4:97:af:92:
bd:f4:7b:5d:5f:e2:a7:0e:a4:39:9a:6a:5c:7c:99:
98:19:b1:3b:ee:49:b8:bb:67:05:b2:fd:07:30:10:
09:80:44:ab:11:95:9f:f8:33:d0:d6:3d:0d:27:34:
4e:e2:b7:e6:0e:12:20:38:ef:66:ea:00:f4:75:b4:
fa:3d:ba:2b:f9:bc:e7:09:fa:ba:ea:04:50:a3:c8:
d0:bb:0c:22:34:66:04:17:19:53:61:85:68:a3:ba:
fe:19:e0:ac:9f:ef:51:55:da:c8:f6:1b:3a:d0:ba:
08:ee:b9:e3:0a:2c:55:4f:4c:a9:df:62:2e:44:24:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:6F:FF:37:8D:EA:F5:C4:60:7A:8F:C3:47:3F:1E:23:FF:29:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93AB04EB3EF11F0B727CED0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6a:e0:d6:b3:e8:3f:08:b0:20:fb:45:17:e2:e3:5b:62:e7:
c0:dc:46:3a:84:24:64:24:bf:33:18:63:4a:29:ef:be:bb:a9:
e0:af:50:82:6a:b1:15:45:28:de:6e:fc:48:cc:8a:ba:9c:c3:
bf:a4:42:14:05:31:f0:8d:d5:f8:03:90:24:05:25:90:c9:db:
dd:64:41:0e:a9:54:7b:85:69:6e:ab:4f:7a:8e:27:22:09:0b:
83:a9:26:8e:50:e1:4e:01:c0:9f:96:88:f2:18:3f:94:61:4d:
8e:d9:f9:bb:da:29:7d:a8:40:9a:cc:4d:79:bb:52:9b:93:99:
3d:07:1d:e5:94:6d:96:aa:41:d3:f1:5e:c1:cc:d2:ce:f6:94:
85:ba:db:90:3f:c2:64:19:df:12:85:0a:57:a8:aa:46:83:f2:
a6:9c:a2:64:81:d0:75:25:4e:0d:d8:52:ef:37:49:ee:a2:b1:
a4:43:88:22:eb:89:65:49:40:5a:cc:d5:6d:ad:dc:e6:ea:2f:
63:35:ea:f5:42:85:4f:83:86:22:72:aa:f8:43:26:d3:58:b8:
b9:9d:ab:b1:cd:fc:bd:ee:43:7d:a6:e8:02:52:dd:9a:16:3b:
80:2f:1d:f6:73:30:12:6a:d1:46:6a:01:e8:da:63:79:f1:db:
fc:48:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:02 2025 by rpki-client