Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9C12E692CE11F0A13972C4DAE4EC9C.roa
File: 6C9C12E692CE11F0A13972C4DAE4EC9C.roa (raw, json)
Hash identifier: hTYjnfgAuSaucOEzpqwDgQpg4tKcFXIBY/Gca+0XN5k=
Subject key identifier: 93:38:C5:91:91:70:81:EF:1D:D0:43:AB:32:4D:26:14:87:84:C0:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9C12E692CE11F0A13972C4DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 07:26:13 +0000
ROA not before: Tue 16 Sep 2025 07:26:09 +0000
ROA not after: Wed 22 Oct 2025 07:26:09 +0000
asID: 20326
IP address blocks: 45.207.36.0/22 maxlen: 24
45.207.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97134 (0x17b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 07:26:09 2025 GMT
Not After : Oct 22 07:26:09 2025 GMT
Subject: CN=68c91115-f6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:b9:3c:d7:69:80:3b:54:00:df:01:c7:8e:
85:7a:54:0c:a4:4d:5f:f5:17:92:48:1f:af:c3:45:
b0:f9:87:ce:f7:61:1d:e6:5a:14:0e:43:e6:04:f2:
ca:36:0f:b8:46:0a:fb:e7:f7:14:57:85:0d:cf:9b:
52:c0:50:09:8c:58:6c:cf:b2:be:69:77:42:7b:c0:
d3:a2:09:c4:57:05:59:c2:0b:09:2f:95:05:e5:15:
b8:3a:2b:4d:60:c9:4b:66:3d:58:93:83:ec:65:00:
b0:4d:b0:56:ff:87:15:20:77:fd:b3:a0:e1:62:08:
d2:72:d4:9f:40:bb:3a:5f:09:26:58:d7:8b:50:e0:
13:db:9b:f8:95:55:43:f0:25:3e:40:1f:ea:57:fe:
94:2e:24:af:28:16:85:6e:67:89:b0:3e:31:9e:47:
a0:3f:3e:54:ec:4b:46:69:88:8c:57:a4:19:c4:34:
59:46:00:4c:07:48:ef:65:86:a4:c3:4e:51:f4:f4:
e6:58:d4:d1:ff:b7:1c:af:0f:b6:5a:96:0a:5f:25:
cc:8b:ba:f5:78:f6:93:fe:ed:72:c2:27:c3:23:14:
6d:02:67:e3:f8:6e:d5:29:5e:e1:55:f4:72:0d:86:
96:ce:57:11:02:2e:31:27:0b:f0:38:5a:3b:fb:47:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:38:C5:91:91:70:81:EF:1D:D0:43:AB:32:4D:26:14:87:84:C0:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9C12E692CE11F0A13972C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.36.0/22
45.207.48.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:ba:f9:71:9c:82:18:38:75:ea:d6:66:9b:f4:40:2b:18:cb:
64:39:42:73:3e:2c:ca:df:7f:2d:f5:81:c2:44:8b:e1:9d:91:
23:23:3e:ae:06:ea:f2:c5:fc:60:54:50:d8:15:94:1d:33:ac:
0a:7f:14:ba:c9:04:00:90:f1:29:6f:fc:3f:7f:63:d4:c0:04:
82:17:f6:d6:1c:e9:67:24:44:82:e2:6d:99:9e:c1:e6:fc:22:
c8:31:60:a7:52:26:12:95:76:f3:a4:78:d6:57:27:38:c9:a0:
0a:8f:40:05:3b:21:ad:b5:04:3f:e3:15:a5:90:d2:a3:0d:c6:
c5:4f:90:eb:72:98:ff:77:08:55:1d:6c:09:7b:85:10:72:c7:
07:b7:a2:45:12:cd:54:ed:ad:46:7b:b7:b3:87:52:b9:3d:41:
45:a2:bc:45:b9:29:54:63:21:51:20:c7:a9:7a:b2:35:ac:43:
e9:b5:4c:b4:89:2c:f2:68:6f:61:b5:ea:5f:de:08:8b:5d:75:
46:dc:51:d2:ec:ed:bc:98:ce:f2:b0:c8:b7:c0:c4:43:ee:ce:
45:de:26:1c:08:e3:d1:d0:9c:01:db:02:d1:ba:ce:e9:8f:6b:
04:9a:32:d4:78:3d:20:42:f0:66:72:87:2c:84:ce:3d:64:6a:
de:0d:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:59 2025 by rpki-client