Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6366264A43011F09B6D32E1DAE4EC9C.roa
File: E6366264A43011F09B6D32E1DAE4EC9C.roa (raw, json)
Hash identifier: pMOFS/fSZ//VcIfIAQjlnoADae6ruCvVlaP0bI8kmJk=
Subject key identifier: AE:11:23:AB:B9:01:4D:BE:58:DB:F6:89:5C:48:EC:F1:90:9F:63:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6366264A43011F09B6D32E1DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 10:23:58 +0000
ROA not before: Wed 08 Oct 2025 10:23:53 +0000
ROA not after: Wed 12 Nov 2025 10:23:53 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98150 (0x17f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 10:23:53 2025 GMT
Not After : Nov 12 10:23:53 2025 GMT
Subject: CN=68e63bbe-75de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:d6:b3:2c:07:d8:6d:ed:21:f9:43:34:05:
b5:f9:c7:f9:86:22:83:24:df:86:d8:8c:d6:ca:23:
81:ec:d0:c6:c2:aa:f8:58:db:17:c4:84:ff:69:e6:
45:f3:7b:62:ef:41:cd:fe:84:29:fc:80:95:58:81:
96:e4:dd:96:78:e0:77:4f:8c:bb:11:0f:84:1f:4d:
34:5a:78:a7:8a:d9:6b:27:f4:16:40:b0:30:4c:55:
9a:68:20:3f:fd:05:ac:50:ed:fd:2e:dd:d7:82:fe:
78:90:37:09:7f:d7:1e:88:f0:c7:d1:c6:e7:73:ab:
8c:33:68:c2:06:87:5a:7d:f3:0c:45:cb:36:66:09:
c9:95:87:6c:83:dc:77:f5:6c:77:3d:c1:df:82:ae:
6a:2c:6f:ab:20:db:ae:fc:c9:c3:43:d1:b7:f9:3c:
ff:df:c4:8a:e1:a9:9d:7e:95:ed:e9:fd:1e:d4:7f:
ee:f6:8e:9a:33:d2:e8:3c:c8:70:0b:ce:b0:40:56:
de:44:10:af:e9:8f:b7:c1:b7:48:ee:c6:5a:a1:fb:
3c:01:e9:89:1b:5d:fe:f7:2f:8f:63:b5:42:46:0b:
f9:db:d7:3b:2d:40:57:ee:4d:80:73:a5:ab:79:4e:
35:66:44:26:b2:45:92:88:23:fa:1e:19:59:8f:e1:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:23:AB:B9:01:4D:BE:58:DB:F6:89:5C:48:EC:F1:90:9F:63:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6366264A43011F09B6D32E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:62:44:22:15:6d:9b:fa:fd:8c:22:90:9e:09:0a:59:89:26:
c9:97:9b:13:6d:af:d6:35:43:6d:17:a0:38:1e:09:fb:2a:38:
ca:98:24:3d:fc:58:f4:43:60:f3:d2:f4:5e:fd:09:ec:f3:1c:
ab:67:b4:35:82:e0:21:fb:d5:68:0b:a1:0f:6e:f5:c9:56:cb:
04:ce:ba:2d:36:ab:03:d9:a2:cd:d5:db:26:1e:44:82:ad:5e:
75:38:42:5a:ec:07:e5:48:22:ab:a3:f8:c1:41:db:31:a1:8a:
66:af:fc:5c:ca:a1:9b:a1:82:c1:88:09:40:2b:da:47:f4:54:
4b:b3:39:58:89:fb:d1:92:e7:8d:4b:08:9f:4f:35:f4:46:70:
68:51:a4:ba:03:ee:84:23:a1:26:f6:c2:85:d7:db:0f:c3:4a:
6f:e4:da:37:28:82:a4:d8:4c:7a:9b:81:6d:2c:31:6c:b7:37:
cd:2e:84:78:f2:b3:4d:70:7d:b5:22:0e:c0:03:36:37:34:bc:
54:8a:35:b9:0c:3f:62:83:18:f0:4b:ec:32:74:79:6e:3f:e1:
e4:a2:b0:0d:8b:1c:40:91:c8:25:a8:94:7a:88:8d:68:6e:46:
31:2a:b4:36:0d:5d:5e:eb:6f:19:7b:13:4f:c4:aa:ea:25:6a:
f4:6f:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:59 2025 by rpki-client