Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0BE5A828A4B11F0B32EBBE6DAE4EC9C.roa
File: B0BE5A828A4B11F0B32EBBE6DAE4EC9C.roa (raw, json)
Hash identifier: G81rdZScY4Gcxfmo+0STeAeVMebFI9kVNzyRLYfe9RE=
Subject key identifier: C6:A6:86:A7:60:A6:3B:94:87:CF:A2:4F:F3:AF:7A:59:43:19:D3:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017918
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0BE5A828A4B11F0B32EBBE6DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 11:30:14 +0000
ROA not before: Fri 05 Sep 2025 11:30:10 +0000
ROA not after: Thu 04 Dec 2025 11:30:10 +0000
asID: 135377
IP address blocks: 45.194.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96536 (0x17918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 11:30:10 2025 GMT
Not After : Dec 4 11:30:10 2025 GMT
Subject: CN=68bac9c6-f503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:f5:2a:a3:4b:33:41:eb:03:f4:42:a5:df:
5f:11:a2:a7:5c:1e:4a:a8:3f:49:73:ea:fc:96:7a:
f8:4d:67:4c:3b:87:b1:7a:65:f1:d2:43:fc:c5:05:
39:14:2e:a5:28:6f:90:f5:25:66:61:8e:cf:33:75:
1b:b9:e1:da:60:fa:f4:33:a4:9d:0b:74:b0:84:b7:
d2:4f:5e:55:35:3c:f6:84:8a:2a:aa:cc:9e:63:6e:
14:d2:3b:4b:05:6e:5e:89:27:5c:82:51:1a:dc:97:
4c:99:58:fd:55:7b:91:ec:62:7c:28:b8:01:db:06:
42:93:b1:9b:5d:b6:33:55:5a:e6:43:e1:b0:ee:18:
d8:27:79:52:ef:53:f8:72:fc:f7:1e:fa:25:c6:f0:
a7:69:21:94:5c:3f:87:7c:84:c6:49:7d:37:f8:4d:
16:2b:46:e4:ec:1b:d5:68:d8:91:d5:d4:d0:94:3f:
c0:4c:43:8b:e3:f8:6f:38:09:5c:ee:9c:5d:d0:f2:
82:e1:c6:9e:a9:89:94:df:b4:37:d4:ef:73:61:d4:
b0:0d:42:af:2e:2c:ea:7e:e6:3d:cf:43:68:e6:fd:
84:c2:ed:ab:d3:cc:e7:6e:d9:53:88:44:80:f3:ec:
28:2d:cb:21:69:84:70:20:86:4b:29:62:52:f8:eb:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A6:86:A7:60:A6:3B:94:87:CF:A2:4F:F3:AF:7A:59:43:19:D3:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0BE5A828A4B11F0B32EBBE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:29:d6:41:66:f6:d1:55:f9:93:bf:03:a6:30:89:33:eb:de:
49:fb:75:f5:6d:f2:26:d0:1f:37:a3:1f:b8:f4:7e:eb:3c:18:
de:92:12:77:f6:25:f2:94:d7:c6:e0:4b:bb:e2:b0:b3:a9:a6:
75:30:72:2b:f8:69:4a:62:5e:10:60:cf:29:75:ff:20:11:a8:
6c:9b:b7:6f:7d:ae:d3:43:67:86:a2:43:cc:5c:0b:83:eb:35:
c1:40:c1:88:39:0e:8f:29:8e:4b:50:f5:9b:95:37:34:08:e0:
e5:9e:2c:33:3b:9b:bf:15:28:84:c3:c2:71:f4:3f:a4:98:52:
6a:ce:dc:75:94:3b:65:b7:a1:1d:00:d7:ec:1f:04:de:7a:28:
cd:40:bf:9a:59:74:20:29:42:f7:80:0e:63:8e:a2:94:92:b8:
35:c8:73:09:26:56:5c:e6:2f:71:10:38:74:63:94:d9:5d:6a:
a3:84:cf:05:a1:59:27:5b:4c:a8:45:f2:f6:b5:b5:be:8a:51:
0c:35:c9:83:35:a3:ef:dd:23:a0:9d:10:1d:f6:56:b9:65:43:
e5:b8:00:97:e6:9d:7b:49:33:a7:ba:5d:d3:c9:ce:5e:94:28:
40:9f:fa:98:9b:ef:5f:18:1c:73:a3:e6:93:7c:18:26:8b:4f:
b4:87:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:13 2025 by rpki-client