Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/625E5C6285F911F0A834A3B3DAE4EC9C.roa
File: 625E5C6285F911F0A834A3B3DAE4EC9C.roa (raw, json)
Hash identifier: g7w+wcnU9j6DjCrV6GuJuFBQyQYxyamCWo8W8DdK7Zk=
Subject key identifier: E2:98:26:77:BD:AA:40:D9:0C:9C:E1:50:0D:5A:F9:F8:0B:DB:62:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017452
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/625E5C6285F911F0A834A3B3DAE4EC9C.roa
Signing time: Sat 30 Aug 2025 23:31:00 +0000
ROA not before: Sun 31 Aug 2025 23:30:55 +0000
ROA not after: Sun 07 Sep 2025 23:30:55 +0000
asID: 54801
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95314 (0x17452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 23:30:55 2025 GMT
Not After : Sep 7 23:30:55 2025 GMT
Subject: CN=68b389b3-1082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:3b:bd:74:92:f2:7e:30:64:19:fd:49:27:
8e:73:2d:ea:ef:93:ee:18:fa:59:4c:7c:78:28:69:
5b:a1:f9:6c:53:8e:0b:e5:de:9a:07:83:80:a6:10:
98:ba:73:56:9f:c7:83:f4:59:23:dd:2b:76:50:8b:
6a:f8:7a:8d:01:fc:15:02:9b:c5:94:17:94:2a:fd:
2b:df:fb:52:a6:10:64:65:05:90:01:a6:22:f9:7e:
74:25:eb:44:2f:28:a5:29:c1:87:42:08:c3:25:ba:
dd:7d:3f:8a:e0:ba:16:ae:c7:78:04:01:ba:b4:6e:
84:1e:97:7e:b1:c3:41:0e:da:ec:05:31:be:b1:88:
19:c6:12:7b:0a:68:2d:79:92:16:b1:a2:47:48:20:
3f:ea:5b:0a:fd:be:3f:3d:be:82:e6:41:c5:74:6e:
a2:19:f5:cd:4a:7d:8b:b0:78:8a:13:e9:05:dd:f3:
74:a2:56:79:46:52:1e:73:9d:69:cb:15:b8:56:d2:
74:74:bc:b7:c9:fd:c6:24:d3:df:21:86:cc:a8:8d:
68:52:c8:c9:3a:88:9e:23:ae:6e:6a:0a:c8:ae:fc:
42:2e:34:78:96:39:40:08:f1:d9:0e:1b:a4:f7:8d:
92:27:cc:8b:f7:15:ff:a6:0b:0d:60:b6:2d:78:e9:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:26:77:BD:AA:40:D9:0C:9C:E1:50:0D:5A:F9:F8:0B:DB:62:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/625E5C6285F911F0A834A3B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
98:58:53:c2:69:70:06:44:e8:6c:62:be:a0:90:04:14:39:8f:
09:d0:76:cf:2a:c5:a4:5c:30:6e:0a:33:15:16:44:65:28:f8:
59:62:88:13:51:be:d3:2b:7f:9a:b6:6a:75:a6:97:e9:88:8c:
14:62:84:4a:86:b0:92:ad:df:db:33:8c:d4:98:62:24:20:4b:
c5:44:c0:53:17:47:c3:e6:8b:9c:d0:ca:72:13:26:86:65:f7:
4e:9e:f8:6c:91:3f:45:ea:96:e0:0a:55:32:f0:c0:15:47:b7:
39:9f:cb:f5:aa:b5:ea:72:75:be:cd:fe:be:8d:42:b3:61:19:
65:af:12:5c:27:04:be:f6:49:5d:d2:12:f2:62:fc:99:f1:38:
bc:93:10:28:d9:80:9b:94:00:69:20:0c:8f:16:ef:7d:27:07:
93:12:af:11:80:da:38:73:25:3b:af:d0:b8:29:cf:75:8f:4a:
b4:d5:60:1f:4a:74:03:32:29:b5:8a:e1:4f:ca:56:69:7d:5f:
b9:89:d1:86:09:4f:86:16:da:1d:73:a4:de:7f:27:58:d6:26:
c0:b3:55:b5:7b:98:f3:24:43:b5:57:ce:bb:16:6c:ff:b2:73:
f0:bf:98:68:62:d8:82:ef:a3:3a:94:33:b1:83:75:49:bb:63:
8c:ec:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:20:44 2025 by rpki-client