Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F87F56AA6C11F0A397C483DAE4EC9C.roa
File: 69F87F56AA6C11F0A397C483DAE4EC9C.roa (raw, json)
Hash identifier: Tgn0LfbK7ayc1H7ZRn4OcNwMeGU9yF3xOC6wxSTp4s8=
Subject key identifier: FA:3F:D0:D2:E3:89:B9:08:26:E9:17:16:44:54:25:64:C3:C5:70:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018100
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F87F56AA6C11F0A397C483DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:45:06 +0000
ROA not before: Thu 16 Oct 2025 08:45:01 +0000
ROA not after: Sat 25 Oct 2025 08:45:01 +0000
asID: 23764
IP address blocks: 45.196.25.0/24 maxlen: 24
45.196.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98560 (0x18100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 08:45:01 2025 GMT
Not After : Oct 25 08:45:01 2025 GMT
Subject: CN=68f0b092-1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:86:32:64:0a:90:37:30:e3:33:a2:7a:14:
7a:ea:e3:19:f3:e8:90:20:ca:9e:ff:77:65:c8:e3:
dc:1c:f4:07:e1:17:8b:bd:56:a3:8d:99:e6:52:73:
bf:89:cb:09:5d:2a:3a:8a:67:e8:18:3b:e7:1d:b5:
0e:1c:a9:83:ef:ec:08:1e:bb:ae:5c:7a:fd:1d:99:
11:4c:23:69:04:72:28:6e:fe:89:60:ef:04:e2:5d:
8c:51:06:fa:5c:01:02:17:10:73:cf:40:55:75:1f:
51:a6:32:7b:8a:1c:62:84:9d:ee:87:59:6c:92:3a:
f0:50:4a:50:f3:f6:ca:da:87:4b:77:e9:e4:da:39:
54:b3:b7:a3:8f:9e:8c:64:a5:dd:87:ba:76:2d:02:
f2:ad:27:89:30:30:7e:24:54:4b:76:a7:6b:a4:c6:
e6:f7:f6:d9:ee:1d:b1:bf:fb:75:b5:4b:b6:98:38:
2b:15:dc:c3:04:fc:40:1e:bd:d2:8a:19:72:9b:36:
7d:2f:23:d6:41:b2:2d:44:12:02:ba:3c:a2:e2:22:
5b:7a:2a:7e:7d:97:75:49:6e:df:31:9a:09:20:68:
43:5c:6a:17:20:3b:d4:ef:5c:f3:db:aa:7a:29:f3:
4e:56:ee:4c:16:87:0d:40:bc:d5:10:ba:2b:17:b5:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3F:D0:D2:E3:89:B9:08:26:E9:17:16:44:54:25:64:C3:C5:70:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69F87F56AA6C11F0A397C483DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.25.0/24
45.196.27.0/24
Signature Algorithm: sha256WithRSAEncryption
21:32:83:b1:90:88:64:1c:96:e2:32:0a:01:f8:28:2b:30:d9:
57:ed:d5:f7:4e:13:00:33:29:09:8c:a5:7e:a2:33:aa:44:f5:
bb:ce:4a:0e:ed:58:36:7d:a2:ac:dd:a1:40:e8:19:2c:59:b2:
1c:c2:4d:70:e6:f8:c8:b3:0c:7f:3c:70:89:cd:2d:d0:a3:26:
93:b6:75:99:bd:27:c3:07:bb:fc:49:ea:da:34:6f:62:72:fa:
fe:27:5f:60:97:62:21:9f:59:fd:a3:a0:bd:1a:12:bb:60:8a:
be:e6:4a:ac:90:03:58:ff:07:2f:4b:b1:80:c7:2e:f9:40:9b:
73:5d:0e:d2:78:fc:4d:b8:bf:81:7d:c0:58:e1:ea:e3:2e:20:
15:b5:06:9f:d7:49:76:3b:19:e5:2d:d8:68:ae:60:d2:6e:3a:
f1:1f:15:45:0e:ae:03:55:27:51:cc:30:c2:79:6d:9e:ff:23:
0f:6b:cf:73:32:80:d5:64:be:8b:82:3a:f8:27:99:b9:da:2b:
52:ff:d7:33:6e:28:83:21:70:df:00:22:ce:83:4e:91:33:41:
67:c5:c5:46:35:25:d9:d9:4c:82:b4:d3:b7:26:a9:bf:8b:c4:
51:a6:b0:29:80:4b:a6:c8:b4:13:a1:14:b8:89:25:4a:58:a5:
bb:77:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:52 2025 by rpki-client