Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41FA61DE953311F0AB519FBDDAE4EC9C.roa
File: 41FA61DE953311F0AB519FBDDAE4EC9C.roa (raw, json)
Hash identifier: CDG+gxd36vCDTSBLLjgxH8uvUE1OF+jUV6z3HtiORfY=
Subject key identifier: 41:79:A0:2A:45:37:92:FB:7B:D5:43:90:79:E1:40:EF:D2:A3:03:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41FA61DE953311F0AB519FBDDAE4EC9C.roa
Signing time: Fri 19 Sep 2025 08:33:04 +0000
ROA not before: Fri 19 Sep 2025 08:32:59 +0000
ROA not after: Tue 18 Aug 2026 08:32:59 +0000
asID: 36680
IP address blocks: 45.204.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97390 (0x17c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 08:32:59 2025 GMT
Not After : Aug 18 08:32:59 2026 GMT
Subject: CN=68cd153f-fe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:3e:f3:be:e8:31:b3:1b:01:a8:01:5c:36:
e9:f2:cf:4a:fc:f9:71:a6:8e:0b:22:18:f9:52:4a:
1c:49:b4:ab:83:9f:ad:94:cc:c1:c3:d1:97:e8:4d:
c6:c7:de:c2:f0:45:a4:b1:8c:c8:a8:7b:00:81:0a:
cf:68:b8:78:f5:60:27:6a:33:6c:76:ef:6c:09:d6:
ab:a2:55:d7:1b:c8:b6:cf:80:00:45:7e:f8:ae:c5:
1e:0a:67:be:68:d1:12:95:13:93:98:dc:7f:94:c7:
13:5a:46:82:41:b0:ab:75:47:4a:1a:5e:a5:0d:cf:
b0:dd:80:70:9b:76:a7:35:4c:83:12:62:92:5c:c6:
ce:6f:5a:9a:53:45:f1:4a:a7:ff:05:3d:a8:ce:63:
1a:cb:10:d4:ef:9e:41:48:03:8d:ae:1f:f5:ec:eb:
57:9b:ef:27:2b:2c:bb:8b:43:63:8f:73:21:d1:c2:
8c:5c:30:68:20:d6:9c:8c:b0:e1:35:39:b9:9c:0e:
e2:29:73:21:cf:c3:9a:01:52:14:b5:78:4b:9f:f7:
c1:fc:8a:dc:64:5f:d8:d6:47:44:e8:fd:c3:16:61:
0a:6b:7e:5f:78:3a:ed:64:ca:82:13:ab:0b:25:a5:
9e:bc:b0:7d:75:88:64:69:50:7f:ab:1d:9b:93:ae:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:A0:2A:45:37:92:FB:7B:D5:43:90:79:E1:40:EF:D2:A3:03:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41FA61DE953311F0AB519FBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.60.0/22
Signature Algorithm: sha256WithRSAEncryption
33:48:0f:62:29:99:81:5c:de:ad:3e:d0:71:18:30:d4:b8:f1:
75:58:17:54:bb:af:74:08:7b:16:94:b1:b4:b5:dc:79:41:b5:
2d:28:c5:04:e3:fb:83:9f:df:cb:8c:8f:3e:93:d8:ef:ad:41:
f1:fe:d3:9e:a2:58:26:5a:ca:b6:32:07:b8:58:30:8c:b0:c5:
53:32:11:81:bb:f3:13:04:4f:84:85:76:c4:82:d2:16:29:e2:
a3:02:9e:5d:c9:a5:cb:21:e2:a4:32:71:b6:a4:3c:bf:e4:e3:
2e:66:09:39:3b:44:2b:48:b4:ce:8b:dc:a6:ed:34:eb:1c:e1:
ac:68:93:fd:34:dc:72:ab:d6:69:ae:7a:70:36:c4:bd:0d:12:
a0:31:fb:2e:12:f5:79:4b:dd:20:d0:bf:06:14:88:c6:ba:20:
ca:e6:30:d9:c3:5a:2d:94:c9:b7:f4:e1:22:8a:aa:57:cf:de:
31:ce:6a:74:61:08:9a:b8:98:23:76:04:ef:af:f9:54:30:bf:
4e:3f:1e:fc:de:cb:0e:5a:2e:07:f9:99:e4:fb:ab:5e:9a:a1:
c1:a4:8b:d3:95:fc:67:0f:65:76:0a:05:f9:38:69:53:cb:f7:
5b:2c:b8:9c:27:14:59:f9:3e:61:80:66:d6:34:cb:25:1d:71:
1e:04:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:05 2025 by rpki-client