Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADDB205EA5C911F0917849BBDAE4EC9C.roa
File: ADDB205EA5C911F0917849BBDAE4EC9C.roa (raw, json)
Hash identifier: pbXwx9h+Ul5qhR7rj1F9og3B7uhWdEiNJ1RR/nhO/rI=
Subject key identifier: A3:70:EE:C3:30:28:B0:83:70:BB:43:C2:1D:18:E8:4E:0B:41:DE:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018006
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADDB205EA5C911F0917849BBDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 11:10:08 +0000
ROA not before: Fri 10 Oct 2025 11:10:02 +0000
ROA not after: Sat 29 Nov 2025 11:10:02 +0000
asID: 133073
IP address blocks: 45.196.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98310 (0x18006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 11:10:02 2025 GMT
Not After : Nov 29 11:10:02 2025 GMT
Subject: CN=68e8e98f-7add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:fd:1f:2e:84:35:c9:c7:24:2f:84:f4:d7:
19:a4:b7:4e:b3:bc:20:3b:27:ac:78:ca:b7:67:a9:
3c:40:f3:d0:ad:d0:2a:50:57:bd:cc:4c:c9:18:a3:
21:a9:97:4f:3c:b3:02:c5:d2:9d:58:0c:7e:cf:68:
10:39:2b:b7:3c:6d:82:09:27:1f:62:1d:2a:6d:f7:
2b:82:bb:84:b5:06:99:d9:0c:8b:fb:20:04:1d:5d:
78:1d:2e:6e:15:83:b9:93:a3:6f:f4:cc:10:c3:7f:
50:97:4f:7f:fa:1f:50:16:6a:d3:14:21:49:6b:d4:
ed:d4:80:31:29:73:42:5c:f5:be:a7:86:28:68:b1:
2a:66:d8:ff:5c:b2:f3:c3:8a:df:c4:77:27:3f:72:
67:80:ab:22:51:56:8e:6c:5e:92:80:c6:e4:3a:b8:
f7:af:f1:e2:83:4d:92:30:a5:23:d7:5e:d9:74:6e:
b4:a6:c6:08:3a:76:58:9c:97:6b:71:66:32:c6:e6:
08:4f:f6:c9:ed:1f:0b:9b:98:8b:9c:3a:fe:1c:2b:
0c:41:18:5b:80:87:b4:6a:5a:20:ed:d5:a0:57:c5:
50:52:a6:08:d8:23:2f:15:9f:6a:c4:ee:7e:4e:8f:
8f:ec:ab:e3:7d:b5:ef:d5:48:cd:ac:5c:ba:e9:c5:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:70:EE:C3:30:28:B0:83:70:BB:43:C2:1D:18:E8:4E:0B:41:DE:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADDB205EA5C911F0917849BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.100.0/24
Signature Algorithm: sha256WithRSAEncryption
96:59:2c:33:ab:48:2f:48:fc:98:1c:0a:59:2f:c1:65:4c:d5:
9b:aa:c0:ae:5a:86:f5:57:64:60:f4:a4:1c:da:c0:b0:fc:e3:
92:a4:7d:f2:c2:44:bb:d2:4b:b3:63:42:e7:b0:47:57:fb:81:
aa:37:21:d1:e1:7d:86:b8:92:86:3e:b2:dc:c6:bf:34:3f:94:
ba:4e:d3:ea:3d:07:87:76:4a:6c:5a:15:64:f2:32:06:24:99:
0f:e7:e9:5a:de:47:5c:e9:a2:9d:3d:37:5e:4a:49:18:a4:f1:
bc:05:60:fd:e2:93:dd:41:29:da:46:d4:82:ba:00:2a:63:3a:
b1:0e:5d:bf:4b:d5:57:55:a4:2d:30:85:7c:fd:88:c8:7e:38:
c7:c6:a6:98:c4:a2:51:52:42:78:e3:ca:03:75:a2:ae:79:68:
f4:e9:53:73:0e:71:5f:fc:b2:6e:05:ad:c8:ca:37:92:2f:46:
5c:e0:8a:bd:94:84:2d:d4:27:25:56:ea:65:79:a9:9d:25:ad:
fe:d6:45:e5:de:bb:f1:5e:a5:eb:c7:4a:1c:f0:20:c6:87:89:
23:20:60:f4:b4:7d:d2:38:0b:d5:12:2b:8a:77:ab:8c:a2:02:
8a:47:14:ee:77:b7:1e:8e:0e:2c:ea:19:a2:18:26:96:dd:ad:
d7:6f:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:27 2025 by rpki-client