Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1F37A1CA9AF11F0A84958E7DAE4EC9C.roa
File: B1F37A1CA9AF11F0A84958E7DAE4EC9C.roa (raw, json)
Hash identifier: um6OGhHsjYoH6iMqFRr5jAtkrELP1IWUUVq1IJ1of8g=
Subject key identifier: AF:09:54:80:1C:0E:87:25:91:88:AD:B4:FD:CE:61:38:AD:5C:9F:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1F37A1CA9AF11F0A84958E7DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:14:12 +0000
ROA not before: Wed 15 Oct 2025 10:14:04 +0000
ROA not after: Sun 16 Nov 2025 10:14:04 +0000
asID: 174
IP address blocks: 45.197.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98477 (0x180ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 10:14:04 2025 GMT
Not After : Nov 16 10:14:04 2025 GMT
Subject: CN=68ef73f4-13f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:fd:d1:e1:e9:e8:5b:dc:a5:10:79:6a:c8:
ba:e7:4f:c4:ca:af:46:b4:52:2f:95:4e:91:af:44:
6a:4a:f6:f4:d1:ca:e0:2c:b0:02:61:a1:26:56:7c:
df:18:c6:3a:01:a3:b5:67:d5:dc:39:28:13:ea:5b:
b0:17:99:42:87:cc:33:bf:52:c9:49:f7:7b:d2:0d:
65:be:99:95:03:2b:ba:c0:8a:b9:d6:b8:61:43:d0:
85:cc:10:5a:5c:09:9f:26:bb:bc:79:c1:80:29:06:
1e:f1:f7:de:91:62:6b:4f:cd:dc:56:c5:49:71:16:
68:ba:2c:72:fb:18:d3:df:be:40:37:3d:a5:01:f2:
66:63:15:9d:85:c3:c6:b1:f8:d9:2e:b2:9f:84:f7:
ce:91:84:47:73:1e:17:65:8e:75:ed:9d:d2:62:90:
ca:9b:ad:55:ae:d5:17:7a:15:82:6e:56:ac:1c:0f:
50:5a:c7:a8:0f:a6:bf:4b:09:7e:75:11:dc:ab:32:
dc:de:3c:b8:08:88:e0:58:bc:d2:52:6a:a7:5f:09:
7d:4a:8c:8b:15:6f:f6:e6:90:7a:54:54:20:f5:67:
fb:b3:d3:06:4c:86:24:7f:51:e6:79:49:58:2a:99:
42:43:f1:5d:cf:b5:6c:5d:c1:97:04:c5:23:56:97:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:54:80:1C:0E:87:25:91:88:AD:B4:FD:CE:61:38:AD:5C:9F:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1F37A1CA9AF11F0A84958E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.6.0/23
Signature Algorithm: sha256WithRSAEncryption
54:5c:20:c2:49:d1:7f:60:04:f0:b9:28:d6:16:88:ee:3a:cd:
ac:c5:73:59:73:19:52:8e:b3:5c:52:96:2b:4b:1e:5f:d5:86:
10:86:aa:51:49:33:39:74:86:05:1e:33:f8:c9:d5:72:c3:12:
ce:6c:ad:57:3b:20:6d:36:76:e9:5b:b6:dc:02:cc:d5:d2:6b:
c0:a8:c0:4a:e2:4d:22:1e:18:1d:84:6e:17:42:33:a4:85:54:
0d:0b:fc:06:da:da:5f:0a:31:57:26:26:55:c9:ce:cd:07:a1:
86:40:65:fd:27:eb:41:10:a1:a4:80:b3:f1:d2:59:8f:ec:d1:
9a:7d:d5:d3:fd:b9:5e:6e:35:c0:8b:c7:6b:bf:74:c0:8d:ee:
f2:d8:95:ac:ee:0b:2d:bf:8e:56:1c:dd:91:c9:00:1b:4a:0b:
5f:1f:66:f9:51:db:db:d0:bc:6b:b2:c0:72:4f:10:43:70:9d:
3e:f8:df:87:e7:e5:8b:40:dc:c8:44:65:ca:6b:ef:bd:fc:dc:
c0:b6:41:61:f3:f3:f5:90:1e:32:32:3d:30:af:18:b8:2b:60:
64:28:55:ef:52:b8:11:ba:48:b0:50:ec:a6:17:77:74:22:ed:
b9:0f:38:c9:6b:0d:cb:5d:9b:9c:93:ec:4b:17:a6:be:98:99:
b4:71:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:55 2025 by rpki-client