Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F16A524094FD11F08AAE18DCDAE4EC9C.roa
File: F16A524094FD11F08AAE18DCDAE4EC9C.roa (raw, json)
Hash identifier: QA8fnlE9+YglwxTC7d3XhqOgMtSXyFcEctHwcZbKDCU=
Subject key identifier: 4E:C6:8C:0C:52:C5:3D:58:CC:27:FD:8F:5A:37:65:77:FC:92:05:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F16A524094FD11F08AAE18DCDAE4EC9C.roa
Signing time: Fri 19 Sep 2025 02:11:25 +0000
ROA not before: Fri 19 Sep 2025 02:11:19 +0000
ROA not after: Tue 06 Oct 2026 02:11:19 +0000
asID: 32848
IP address blocks: 45.199.160.0/24 maxlen: 24
45.199.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97317 (0x17c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 02:11:19 2025 GMT
Not After : Oct 6 02:11:19 2026 GMT
Subject: CN=68ccbbcd-1c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:7a:8c:89:6d:bc:c2:77:35:e7:60:cd:b9:
b5:2f:5d:ae:71:8c:5b:8e:5f:fd:5c:18:ef:9a:70:
4c:08:f3:11:18:7b:7c:5b:e6:de:39:1b:3d:f4:69:
ae:d8:19:36:0a:47:4c:e1:4a:f4:51:ae:3f:27:7d:
e9:f6:94:02:47:5a:c6:19:07:e7:8a:b8:36:e2:1b:
3a:b9:d4:75:00:07:c2:51:33:80:4b:c4:33:14:b9:
c6:4a:78:50:f5:cb:bc:d4:71:48:a6:b7:59:78:f3:
24:db:e7:0b:62:b4:48:00:39:88:d0:f0:e0:a6:9c:
c5:a7:a8:94:f1:9c:d1:c0:b5:78:fa:12:8b:6b:8f:
4a:5e:1c:d5:40:d2:f3:96:c3:a6:d5:98:45:44:12:
3e:d5:4e:a7:7f:5e:93:e5:17:13:3c:e5:6b:04:a6:
c2:a7:c6:97:f2:0f:af:36:fd:a2:8e:d7:fe:f4:82:
7b:8e:7e:55:97:68:89:f4:7c:12:f9:62:1f:6e:09:
d4:46:1d:47:2a:94:8e:9f:09:bb:91:3a:d8:b7:f4:
65:f8:03:fe:4e:1b:92:60:f4:e0:58:b4:5e:37:55:
72:0a:24:a3:09:16:50:17:e0:8c:a9:e4:86:0a:55:
27:4b:7a:c2:65:61:c1:10:c9:1b:84:3f:09:ae:f7:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:8C:0C:52:C5:3D:58:CC:27:FD:8F:5A:37:65:77:FC:92:05:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F16A524094FD11F08AAE18DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.160.0/24
45.199.175.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1d:f0:63:96:02:66:e4:78:bc:c9:4d:52:ba:9d:47:93:42:
ab:a0:be:7e:20:0b:95:61:f8:03:6b:3c:da:34:66:45:d5:37:
e1:bb:82:20:39:58:ce:36:c1:3e:db:70:8e:05:c9:2d:0a:6f:
d9:47:ce:75:3d:86:76:ac:27:01:46:4a:08:84:13:0f:ab:ba:
2c:a0:99:4f:8e:8c:1b:8d:a7:c7:ac:86:94:af:45:c4:f3:83:
c2:ba:02:5f:be:4b:46:19:d5:6f:b3:a5:ee:d8:01:42:2e:e7:
0e:f5:b9:f3:49:46:80:73:fd:d2:cb:ff:17:86:09:63:39:30:
e7:03:55:c3:6c:a5:e8:fc:bc:71:e1:2f:2e:44:f3:8a:28:6b:
14:4d:d3:31:a6:2a:d9:55:5c:b2:25:58:b7:ce:44:37:56:9e:
47:bd:1c:04:8f:c4:af:19:5e:1f:49:51:ca:3f:e7:ef:62:c9:
c5:48:f0:60:1c:1f:f0:c6:bb:c5:ee:9e:df:a3:97:13:89:a8:
e8:d7:18:95:ae:c8:f7:e5:6a:5e:42:c5:dd:fd:db:42:dc:6d:
a4:0d:1a:ef:fb:ee:9d:80:53:a9:34:50:50:38:dd:19:38:4b:
24:5e:ca:df:42:e7:f9:31:52:8e:ad:c5:54:32:0e:06:eb:14:
1f:a5:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:14 2025 by rpki-client