Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB62091E8E2011F0B8F69EF6DAE4EC9C.roa
File: CB62091E8E2011F0B8F69EF6DAE4EC9C.roa (raw, json)
Hash identifier: 2XI+P0fystURTYHOx+gAXhn7moghS1bmii9s/b0Tc28=
Subject key identifier: 85:BC:24:03:C0:1B:17:B6:E7:AD:D0:C4:D0:EB:38:09:46:BF:8A:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB62091E8E2011F0B8F69EF6DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 08:33:15 +0000
ROA not before: Wed 10 Sep 2025 08:33:11 +0000
ROA not after: Tue 17 Mar 2026 08:33:11 +0000
asID: 42831
IP address blocks: 45.207.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96850 (0x17a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 10 08:33:11 2025 GMT
Not After : Mar 17 08:33:11 2026 GMT
Subject: CN=68c137cb-d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:92:fe:9c:53:40:f6:5b:f5:8a:88:8f:51:
5c:12:5a:11:71:b2:9f:36:f0:bb:9b:ef:6c:7b:6a:
52:1e:73:21:95:28:80:34:96:33:d8:2b:b6:47:f1:
f7:7e:3e:d3:c1:f5:f6:5c:0f:86:3b:de:98:78:af:
a9:96:95:58:3d:aa:64:0a:74:5b:5b:45:a6:1b:7a:
77:d6:34:5a:dd:4b:c7:3d:9f:6b:44:c2:43:0f:2d:
04:21:4d:d1:77:c9:ce:8a:db:e1:09:2f:87:38:8f:
38:1b:9e:15:3b:d7:e2:22:1c:6d:ae:06:ec:d0:8c:
26:9e:43:79:e2:ae:c8:11:c3:de:3e:0c:08:3b:35:
e5:10:a2:86:49:27:b8:f8:7a:09:4b:0d:ac:f6:1f:
40:c2:2b:13:2a:d2:08:38:81:e9:dc:cd:cb:76:2a:
98:e4:da:89:24:a2:8a:09:09:ae:0b:9d:7d:2f:9a:
83:28:14:17:53:c5:86:63:b0:22:a9:31:d0:54:45:
1b:b0:b6:a5:22:79:b3:0f:b3:8d:62:70:30:d6:e4:
28:2a:11:7a:e5:de:86:6b:b0:06:c1:f4:13:36:47:
bd:f6:31:f6:3e:1a:49:d5:ae:7d:2f:42:ec:49:4c:
5c:9e:01:00:92:f4:d4:fc:dd:a5:2d:a6:51:23:88:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:24:03:C0:1B:17:B6:E7:AD:D0:C4:D0:EB:38:09:46:BF:8A:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB62091E8E2011F0B8F69EF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7e:77:1f:2f:e3:29:5b:22:df:da:bf:89:da:c2:19:0d:8e:
80:0e:8a:a1:9c:66:c1:3e:8d:a7:80:59:3c:1f:4e:2f:dc:1f:
b1:bc:5e:d6:42:d3:05:9a:c2:ac:c7:45:8f:bb:07:ec:2b:66:
d8:1f:bb:c7:6b:44:60:9a:2c:e2:ee:73:8f:17:25:30:f8:89:
80:81:59:e0:30:9e:8e:bf:ac:19:45:49:a5:bb:37:c3:f7:1d:
ff:5d:48:16:b4:f4:da:58:aa:96:87:03:20:8d:b8:ce:ca:dc:
8b:0b:8c:44:67:71:84:a4:40:dd:40:cc:bb:97:08:ee:ef:bd:
78:b8:4d:d8:96:60:dd:3b:1b:02:c9:a8:7a:17:cb:9b:37:47:
66:2e:dd:67:74:cd:09:12:0c:ff:aa:74:0a:02:ed:26:91:c7:
06:7e:3c:cd:48:cb:99:83:86:00:cd:f4:19:88:d2:24:bb:5c:
38:1f:a3:a1:40:0a:e0:de:4e:58:66:7e:1b:47:74:b8:0c:e0:
38:aa:42:f5:43:86:c6:7c:3c:a7:9d:29:08:74:9b:c2:f4:97:
1b:32:f1:ab:22:f6:ee:49:bb:5c:c7:84:80:46:77:96:86:3e:
24:7c:95:78:16:64:29:e8:10:11:07:75:63:8a:6a:62:14:86:
54:9d:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:07 2025 by rpki-client