Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D476162C9D0611F08B340DEBDAE4EC9C.roa
File: D476162C9D0611F08B340DEBDAE4EC9C.roa (raw, json)
Hash identifier: Yt2VdQGk1VpB3P244T2Yj+qZEVIQ7uq4oV42qNolDSA=
Subject key identifier: 6A:99:94:C6:8D:DD:C6:4F:28:09:16:A1:54:2C:E9:0D:D9:0C:BC:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D476162C9D0611F08B340DEBDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 07:35:11 +0000
ROA not before: Mon 29 Sep 2025 07:35:05 +0000
ROA not after: Sat 01 Nov 2025 07:35:05 +0000
asID: 147176
IP address blocks: 45.201.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97676 (0x17d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 07:35:05 2025 GMT
Not After : Nov 1 07:35:05 2025 GMT
Subject: CN=68da36af-a5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:2a:54:1c:24:cf:30:d0:f0:54:98:7a:f2:
72:d6:2d:e9:16:ee:22:09:c2:f6:8c:42:64:4e:6f:
83:cf:99:cf:f7:6b:1b:20:b3:ac:2b:77:5b:98:c5:
91:29:a1:2f:52:f7:1c:f8:37:06:be:eb:2e:84:c0:
66:a5:23:be:73:0e:a4:7c:31:b0:b0:04:38:af:af:
d3:70:2f:07:49:d0:3e:aa:21:c9:37:81:56:7e:04:
b5:4a:bb:c5:f4:4a:de:5e:47:fc:9e:03:db:25:e5:
ce:ae:18:76:9d:71:91:43:1f:60:c1:12:ee:64:fa:
59:58:02:34:4b:81:a0:fa:7c:e9:6e:cf:b8:6f:73:
6e:72:f0:11:6b:f9:b9:93:f8:93:1f:d9:6a:7a:cb:
b3:71:a1:80:6a:11:99:9e:ec:bd:87:ef:86:e6:9f:
bb:a8:6b:8d:a4:7d:99:d3:4f:5f:99:3c:ed:c1:d0:
2d:4a:cd:25:39:25:72:8c:db:90:98:d0:b4:29:71:
44:ce:47:02:46:66:ed:d9:91:d7:88:c5:0a:65:f2:
62:eb:8b:33:18:52:12:fe:2f:b2:54:d5:d7:74:a5:
b4:31:8d:14:94:d1:63:ce:ee:1b:67:be:f7:26:79:
19:2b:07:9e:ba:d8:11:72:9c:b7:da:4e:d4:b7:1a:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:94:C6:8D:DD:C6:4F:28:09:16:A1:54:2C:E9:0D:D9:0C:BC:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D476162C9D0611F08B340DEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.1.0/24
Signature Algorithm: sha256WithRSAEncryption
00:94:fd:94:2c:3b:6c:46:cb:8d:15:1b:88:70:38:39:83:9e:
57:c3:31:33:b3:bb:54:ed:0a:2c:90:4c:0d:62:b5:1c:c7:1b:
1d:57:2a:29:79:9c:13:76:ea:de:71:13:94:51:38:8a:77:a9:
ca:89:d4:1c:d6:a6:4b:f0:74:1c:88:7e:c4:d0:72:f2:f9:d6:
97:8e:c6:c5:8b:f0:68:9c:66:15:49:d6:78:f3:28:84:a8:7b:
1e:f1:73:12:cb:c9:c2:19:3b:8e:ab:56:ec:6a:04:d5:c5:a4:
08:66:68:74:c5:a3:4b:bc:8d:38:41:80:ad:21:8f:d1:c1:5d:
f3:28:04:12:ab:6d:7e:52:c3:3d:cf:f0:45:e7:28:09:c9:0d:
08:12:ea:f2:8a:58:24:3a:40:a3:2a:42:09:ea:9f:01:ae:6b:
39:71:d2:ca:17:9b:bb:ff:6b:36:4a:8a:39:3c:65:bc:29:33:
18:c9:89:73:dc:9f:25:33:0f:cd:10:d2:b9:aa:ca:53:dd:5f:
23:9f:b9:50:a9:f6:0e:aa:02:b6:62:34:e1:04:61:20:5b:90:
3e:a7:82:8f:b0:ee:9a:3e:64:bd:3a:02:7b:a5:c6:5c:85:d8:
b9:18:77:37:f3:f4:bd:0f:5f:61:c7:19:84:29:b6:c0:09:ca:
5e:23:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:04 2025 by rpki-client