Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1C47E6AA7211F09A14A2AADAE4EC9C.roa
File: 6A1C47E6AA7211F09A14A2AADAE4EC9C.roa (raw, json)
Hash identifier: QOz+26xY/+vI078I7ryLm4Zv66JfzuwSN3Tuq0MBtvE=
Subject key identifier: 92:A1:61:99:BA:90:87:C2:B7:36:C0:2F:98:08:D6:7C:32:7B:11:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01810E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1C47E6AA7211F09A14A2AADAE4EC9C.roa
Signing time: Thu 16 Oct 2025 09:28:04 +0000
ROA not before: Thu 16 Oct 2025 09:27:58 +0000
ROA not after: Sun 16 Nov 2025 09:27:58 +0000
asID: 51142
IP address blocks: 45.195.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98574 (0x1810e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:27:58 2025 GMT
Not After : Nov 16 09:27:58 2025 GMT
Subject: CN=68f0baa3-8afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:a9:3c:ad:78:b6:45:3d:41:5e:1a:f2:b6:
af:cf:53:e7:c3:1e:76:23:b0:e2:26:1f:32:af:63:
ce:36:20:ff:00:96:fb:e2:1e:b5:44:e4:d7:89:56:
69:f5:96:46:00:b8:ae:12:ff:8d:fd:90:46:59:de:
65:10:af:a7:83:7e:47:03:c0:85:46:8e:85:6b:60:
41:e5:69:4e:5e:2f:7f:78:ba:ae:c5:3f:37:e5:f5:
61:80:74:2d:ca:5a:03:13:8d:23:f0:8d:16:d7:b5:
82:2f:08:d7:35:13:32:3e:fd:82:d5:24:76:7b:85:
33:34:b9:f4:13:76:48:61:32:77:4d:33:94:5d:93:
98:1f:cc:66:0f:c4:54:b6:92:e1:6a:f1:5f:f1:d9:
63:5b:38:e1:84:f8:4f:77:75:12:e7:f4:b6:ba:e6:
2c:3c:1b:e7:ca:51:49:49:f6:88:ba:cb:7e:e1:1c:
1f:e3:a4:d0:51:38:74:06:3f:62:11:0d:1f:51:53:
9d:c2:77:58:18:7e:79:9d:7c:f0:34:54:d9:b6:d4:
c6:fe:2a:22:ad:74:13:99:fa:e9:bc:3e:98:82:6a:
6b:6f:30:af:36:b2:70:07:ab:e5:73:fc:cc:39:9a:
ba:b7:bb:af:41:ff:df:b9:7e:1a:38:65:62:9c:37:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:61:99:BA:90:87:C2:B7:36:C0:2F:98:08:D6:7C:32:7B:11:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1C47E6AA7211F09A14A2AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:63:22:4a:a8:a7:54:3a:58:fa:c0:b9:7d:78:ed:1a:e5:e0:
0b:6d:11:f6:be:5b:28:74:cb:52:33:27:ef:8e:61:6f:f5:f7:
c7:58:56:a2:01:c1:f1:fb:d4:c9:1d:16:79:32:e1:67:83:97:
4a:99:1d:a3:fe:58:18:6c:32:51:9d:f7:81:bb:2a:5e:2d:74:
22:7a:12:7b:f6:3b:67:4f:30:b3:1e:09:c5:13:ba:5f:7f:df:
e3:3d:fa:ce:38:e0:cc:0f:03:de:78:1a:78:61:d7:2e:8f:b7:
9a:02:0e:ab:d2:8f:25:54:d4:9e:84:82:98:e8:4f:52:bb:b0:
c4:6a:5e:0a:f4:3e:b9:59:ce:e4:9d:bc:f6:eb:19:15:4a:04:
6b:a1:ba:35:ba:d1:bc:9a:17:06:cf:bd:54:c1:26:69:bb:6a:
7c:3b:4e:75:07:d9:15:26:74:81:22:b8:7e:6f:e0:ab:99:7a:
a4:46:ae:46:16:57:53:29:5c:47:62:3a:f3:c1:7f:93:4e:1b:
ef:a7:7b:9e:31:2e:df:39:96:99:e4:ad:d5:3d:c7:a6:d7:90:
0d:a5:72:25:d9:6b:1e:28:de:63:20:67:70:d1:9e:94:8b:7b:
5e:2d:9f:01:20:d9:ac:21:78:e1:4d:9b:e5:f5:a3:c6:5c:a8:
50:cd:4e:a9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYEOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDE2MDkyNzU4WhcNMjUxMTE2MDkyNzU4WjAYMRYw
FAYDVQQDEw02OGYwYmFhMy04YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsZCpPK14tkU9QV4a8ravz1Pnwx52I7DiJh8yr2PONiD/AJb74h61ROTX
iVZp9ZZGALiuEv+N/ZBGWd5lEK+ng35HA8CFRo6Fa2BB5WlOXi9/eLquxT835fVh
gHQtyloDE40j8I0W17WCLwjXNRMyPv2C1SR2e4UzNLn0E3ZIYTJ3TTOUXZOYH8xm
D8RUtpLhavFf8dljWzjhhPhPd3US5/S2uuYsPBvnylFJSfaIust+4Rwf46TQUTh0
Bj9iEQ0fUVOdwndYGH55nXzwNFTZttTG/ioirXQTmfrpvD6YgmprbzCvNrJwB6vl
c/zMOZq6t7uvQf/fuX4aOGVinDeGJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJKh
YZm6kIfCtzbAL5gI1nwyexGrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QTFDNDdFNkFBNzIxMUYwOUExNEEyQUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOLMA0GCSqGSIb3DQEBCwUA
A4IBAQCpYyJKqKdUOlj6wLl9eO0a5eALbRH2vlsodMtSMyfvjmFv9ffHWFaiAcHx
+9TJHRZ5MuFng5dKmR2j/lgYbDJRnfeBuypeLXQiehJ79jtnTzCzHgnFE7pff9/j
PfrOOODMDwPeeBp4Ydcuj7eaAg6r0o8lVNSehIKY6E9Su7DEal4K9D65Wc7knbz2
6xkVSgRrobo1utG8mhcGz71UwSZpu2p8O051B9kVJnSBIrh+b+CrmXqkRq5GFldT
KVxHYjrzwX+TThvvp3ueMS7fOZaZ5K3VPcem15ANpXIl2WseKN5jIGdw0Z6Ui3te
LZ8BINmsIXjhTZvl9aPGXKhQzU6p
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:50 2025 by rpki-client