Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/427CF3EAA52511F0899BAF8DDAE4EC9C.roa
File: 427CF3EAA52511F0899BAF8DDAE4EC9C.roa (raw, json)
Hash identifier: qu8zmM0M77yyh+eQbmO5iJnYYF0uNocpGJQLtdsabrk=
Subject key identifier: 73:B0:5D:D6:AC:A2:33:C8:5C:48:2E:35:66:4E:A6:C3:94:C8:CD:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/427CF3EAA52511F0899BAF8DDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 15:33:10 +0000
ROA not before: Thu 09 Oct 2025 15:33:01 +0000
ROA not after: Sat 08 Nov 2025 15:33:01 +0000
asID: 984
IP address blocks: 45.202.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98261 (0x17fd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 15:33:01 2025 GMT
Not After : Nov 8 15:33:01 2025 GMT
Subject: CN=68e7d5b6-9d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:69:c3:b4:51:e7:5e:8e:91:2a:58:ca:0c:
2c:b9:a8:65:2d:7f:ce:47:a6:ad:04:51:b1:c9:a2:
19:a6:4e:ff:0b:66:3f:0e:7d:d7:6d:a8:b2:51:f6:
ba:77:15:9e:c6:b5:2a:b9:76:85:8a:45:5a:52:28:
62:8e:a6:fa:18:d9:59:db:8a:e8:0b:38:36:f0:ad:
2b:ee:0d:a4:e4:e8:2e:9c:c6:d1:6c:83:8f:d9:0a:
b3:eb:c3:c0:d0:04:74:4d:b3:03:02:63:7f:cb:67:
a7:a4:fb:cb:66:f1:43:31:6c:8b:17:3e:47:41:f4:
e9:65:a9:ad:23:2e:09:82:16:80:61:96:61:cf:bd:
24:b2:18:4d:70:a7:e6:d8:ef:5f:81:47:b0:28:76:
98:98:02:e4:99:fd:b4:42:cc:95:96:91:3a:de:7f:
66:96:61:9c:35:d3:2a:c1:0b:24:f6:76:e7:69:50:
e8:05:c8:8f:45:7b:ba:ab:4b:14:f0:17:2a:de:71:
4b:6f:87:09:47:5a:22:54:b4:27:0e:d2:c2:38:e3:
1d:9b:fc:b8:1f:d1:8e:9b:c4:02:c3:c0:da:78:6a:
47:87:bf:02:c7:ef:05:b7:83:ca:ab:fc:2a:9a:06:
52:e7:86:23:2f:43:6f:10:bf:c6:02:8e:2b:cc:53:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:5D:D6:AC:A2:33:C8:5C:48:2E:35:66:4E:A6:C3:94:C8:CD:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/427CF3EAA52511F0899BAF8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:90:54:50:f7:63:56:d5:4e:d9:ad:96:8b:1a:3d:ef:5b:dd:
88:9d:b1:48:8c:20:92:ff:7c:ec:b0:b6:77:f8:11:b6:ee:fe:
d9:fd:e5:99:f5:f8:f9:fa:1a:57:72:e5:b7:d4:0b:0d:e8:69:
9f:04:52:1e:31:97:a5:a4:75:f5:75:fa:18:10:d1:fa:90:c7:
9f:7b:25:80:fb:cd:10:fc:9e:50:86:8d:c6:91:17:c9:b6:ed:
51:d6:18:97:25:59:60:be:8e:72:3f:cf:99:d2:d0:69:67:6b:
3a:d8:4b:11:0e:4f:7e:91:24:d4:74:aa:cd:35:06:cb:d5:f7:
fd:58:43:53:d0:97:34:bc:d5:70:7f:87:78:85:2f:8f:90:ac:
6e:72:f0:64:1d:fe:72:f9:7f:95:4c:0b:de:ea:d7:b2:16:56:
b7:fd:7b:ed:8e:2b:d8:62:1b:22:3d:6e:7a:2e:27:ba:9c:1b:
99:da:0b:5a:d7:16:3f:85:44:09:34:20:0f:e3:67:88:3d:9b:
f1:cd:61:fe:cf:78:50:fd:24:31:f9:54:f1:ab:ae:c9:a4:da:
a0:fc:23:d3:16:32:46:3c:05:a9:a1:d9:51:ce:49:22:a6:54:
6a:5c:60:86:12:33:0d:a7:73:25:b3:8e:f7:75:52:bb:b9:c9:
4a:d2:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:37 2025 by rpki-client