Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C331E79CA41311F092FB42A9DAE4EC9C.roa
File: C331E79CA41311F092FB42A9DAE4EC9C.roa (raw, json)
Hash identifier: 88Zzm2Gf8LtIwd6/OVMzXHX9X5nNfTPyTBKv0LF1+XQ=
Subject key identifier: 90:EB:40:8D:E4:02:62:EB:22:E5:F4:95:E8:5F:8F:18:8A:4D:5B:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C331E79CA41311F092FB42A9DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 06:55:24 +0000
ROA not before: Wed 08 Oct 2025 06:55:19 +0000
ROA not after: Sat 08 Nov 2025 06:55:19 +0000
asID: 8796
IP address blocks: 45.205.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98122 (0x17f4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 06:55:19 2025 GMT
Not After : Nov 8 06:55:19 2025 GMT
Subject: CN=68e60adc-9fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:5a:a6:5f:e2:66:45:dc:6a:fe:f6:15:70:
20:8c:e4:96:3e:56:e0:43:d5:73:74:3f:fb:ed:eb:
28:c3:bd:0a:81:37:ea:9d:da:ef:5b:63:b0:4c:7e:
43:0c:50:50:2f:c0:ac:1a:15:64:ee:60:a4:e1:a9:
2b:49:77:6f:38:22:f4:82:4b:b1:a4:d0:37:57:21:
dc:ce:31:78:4f:2a:6b:7c:5e:e5:34:92:e7:72:f1:
b2:1a:9e:d3:c7:9e:06:6d:e7:59:d8:ab:34:b2:97:
70:ee:e9:39:06:86:4d:e3:c4:29:e2:cb:a5:4e:4c:
ac:e2:25:d8:a2:43:db:f5:e0:2f:79:9c:68:36:be:
3b:9f:67:6c:ce:81:a3:2d:ac:7c:48:cc:c8:98:92:
12:bb:63:88:34:b4:c4:4f:1b:b5:65:de:52:af:af:
ac:7e:b3:c3:d6:d0:08:a5:51:f2:6b:e3:32:62:44:
97:e0:f1:66:2d:34:d8:68:8d:79:ec:3e:59:93:1d:
42:fb:4e:ae:9c:e0:37:3f:29:28:e8:cf:ca:aa:1c:
56:fe:4d:5c:45:85:a8:9b:e9:98:97:06:af:5c:8e:
8e:91:fa:4a:d9:d6:a9:f4:6f:c8:38:dc:ab:17:08:
3e:37:c9:bc:30:86:76:02:14:3d:84:f1:9d:e3:2c:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:40:8D:E4:02:62:EB:22:E5:F4:95:E8:5F:8F:18:8A:4D:5B:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C331E79CA41311F092FB42A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d2:44:51:2c:f3:41:a8:d2:20:a8:2b:72:a5:fe:40:af:bf:
95:55:d5:da:70:a4:37:2a:31:c3:db:34:71:d1:31:ab:d5:9d:
3b:d7:bd:93:62:e8:b6:25:69:91:ea:6a:10:4b:2a:a5:00:b1:
44:27:57:e8:8e:3c:34:e7:dd:0b:05:f9:2d:22:fc:16:90:2d:
2a:26:74:86:58:01:9f:f8:24:62:92:9b:7e:dc:49:53:aa:2d:
fb:11:d6:42:3c:c9:03:b7:31:aa:a9:03:c5:92:87:d2:97:53:
11:73:47:9f:13:ac:c9:22:59:bd:99:a4:dc:76:08:37:00:71:
b8:67:19:29:a8:5d:44:dc:ed:2a:18:d8:06:86:49:69:95:88:
fa:eb:cd:6d:3e:67:c3:72:99:ce:46:6c:16:d1:99:d1:03:31:
2d:6e:b7:1e:e2:22:08:0a:e0:2b:5c:05:ff:aa:f1:3f:db:c2:
52:b0:b5:78:60:e9:b6:63:bc:1c:e5:a1:7a:57:8d:e6:0b:38:
6e:cc:9c:3e:0d:21:9b:73:f8:3c:e1:68:c9:d5:12:6d:94:bf:
8d:ba:0d:fe:a0:26:72:05:38:fb:91:ab:3d:4f:dd:fa:83:9e:
2b:a0:a7:ab:cb:7e:27:cc:8f:91:bc:88:10:84:ad:43:c3:46:
5d:c3:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:06 2025 by rpki-client