Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B42604EA43311F0955272F0DAE4EC9C.roa
File: 3B42604EA43311F0955272F0DAE4EC9C.roa (raw, json)
Hash identifier: xh4kcxVh003V9S3Q6x9fE28iYWr5wF3pJzUy/POfrno=
Subject key identifier: D4:A2:88:F3:FF:88:18:17:FE:B7:29:64:3F:24:3E:A9:C3:D7:02:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B42604EA43311F0955272F0DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 10:40:40 +0000
ROA not before: Wed 08 Oct 2025 10:40:35 +0000
ROA not after: Mon 10 Nov 2025 10:40:35 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98158 (0x17f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 10:40:35 2025 GMT
Not After : Nov 10 10:40:35 2025 GMT
Subject: CN=68e63fa7-9d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:36:e0:2e:5a:5d:16:bd:13:8f:ab:aa:6c:
d1:03:d0:f2:c3:60:3d:1b:a3:9e:3f:e3:d3:78:62:
2b:9e:7a:86:2c:e5:2e:98:de:b8:b9:db:47:d2:75:
87:55:ca:35:56:05:db:e2:9d:d0:25:42:e1:8b:9c:
73:fd:0d:d7:4f:e6:9e:7c:37:ae:6f:b9:f1:ce:d4:
2f:88:5b:0c:07:2a:e5:5b:f0:d9:a5:15:f0:dc:68:
b2:51:bc:d3:7e:7f:69:d9:69:29:10:75:04:f9:a8:
f6:9d:08:c7:16:7a:1d:fb:21:8c:62:b7:29:37:64:
65:f9:40:66:4d:46:ef:b9:a3:a1:3e:02:60:c1:fe:
fc:94:3b:3e:4b:a2:2a:ae:04:ba:fa:dc:72:e9:77:
39:be:99:63:43:81:5f:65:60:15:e3:59:e4:17:5b:
e2:74:ee:1a:e1:22:5e:af:5d:cc:2d:67:53:02:52:
71:7a:cb:1c:e3:ab:e9:94:94:c7:03:ba:8a:70:84:
eb:09:d0:da:d5:49:a2:51:86:25:ec:ed:1e:05:8e:
a8:4b:6f:e1:63:16:a4:ee:b2:36:39:15:c9:82:f3:
65:f5:db:e7:05:16:ee:50:34:1c:74:37:eb:6a:46:
b6:8e:2a:38:da:86:87:55:2c:85:c3:7c:78:a5:cb:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:88:F3:FF:88:18:17:FE:B7:29:64:3F:24:3E:A9:C3:D7:02:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B42604EA43311F0955272F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f5:78:72:0f:71:1d:db:cf:e8:4d:2d:87:6d:a6:e1:b5:b4:
91:d0:6b:cc:44:2d:ec:f1:7e:19:be:59:22:53:d3:cb:77:1b:
3d:a5:93:4c:d0:40:a7:ec:68:a0:dd:99:aa:96:39:e9:50:dd:
da:e8:17:d0:50:35:d6:f2:60:64:f5:35:4b:2a:4a:33:48:ee:
4b:dc:8e:4d:7b:c4:0f:b9:51:cf:3e:46:3e:e9:c6:97:5f:e3:
06:85:38:82:54:74:b5:87:8f:7d:a6:ee:22:e2:cc:1e:fa:67:
ea:92:64:24:46:e8:47:27:63:90:12:ed:0b:e2:b9:4d:8b:d6:
f2:a0:23:9c:c6:08:b1:63:69:22:b3:48:c2:15:d6:95:f3:c1:
41:83:5b:66:7d:db:44:aa:3f:b8:10:05:0e:83:10:a9:9a:d5:
a1:28:ef:4b:e1:46:81:7a:cb:90:4d:ef:24:32:c0:0e:84:86:
44:13:77:06:1c:45:2a:d4:1a:5d:b8:07:ef:29:83:48:6e:b5:
e0:87:df:48:ee:50:85:c5:6a:b3:23:41:90:b5:0d:67:06:d7:
f8:f3:f3:a1:77:3f:ba:0e:35:1d:0b:d8:34:3d:8c:03:34:09:
c0:44:2d:11:76:b2:b1:63:e9:92:5b:7a:47:a8:d3:47:41:13:
20:fa:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:12 2025 by rpki-client