Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A664454AA8611F08584C9ABDAE4EC9C.roa
File: 6A664454AA8611F08584C9ABDAE4EC9C.roa (raw, json)
Hash identifier: 6yS07oMp6Sx1IF2VZZWsEPJ9C5Vr4lNutzQLB/12XlA=
Subject key identifier: 7F:45:31:95:28:F0:61:AA:DD:50:3E:C4:4E:6F:D3:68:1D:E8:C1:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018130
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A664454AA8611F08584C9ABDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:51:14 +0000
ROA not before: Thu 16 Oct 2025 11:51:09 +0000
ROA not after: Wed 19 Nov 2025 11:51:09 +0000
asID: 214143
IP address blocks: 45.207.128.0/21 maxlen: 24
45.207.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98608 (0x18130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 11:51:09 2025 GMT
Not After : Nov 19 11:51:09 2025 GMT
Subject: CN=68f0dc32-240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:5b:7e:8d:85:0f:d8:4e:c8:f5:db:36:69:
0e:19:6b:b8:a0:d2:f8:b4:1a:63:cc:7d:e0:77:09:
ee:d3:ae:58:03:29:68:80:22:d0:ec:83:00:ad:7b:
a5:f0:fc:b6:a4:b9:de:af:e3:1c:2a:7c:f7:ad:9f:
2a:b9:ba:1a:8e:19:f7:9c:01:3d:2c:e7:cc:8d:2d:
dd:02:c1:66:44:79:1f:7f:3c:15:ed:b3:77:40:bb:
62:1f:e9:be:9c:f6:61:8c:04:ef:e9:b6:90:7b:9c:
4a:5c:84:03:f0:02:4a:7b:9e:9b:40:ba:de:b3:13:
05:62:9f:8a:39:87:c3:78:a5:94:73:a6:49:4e:6a:
72:37:42:3f:45:0a:53:d5:42:13:dd:2f:54:20:df:
cf:55:49:25:72:c5:f3:dd:12:c7:ee:61:ec:60:17:
2a:b2:cd:cd:01:19:eb:57:58:22:71:6a:80:0f:65:
20:5f:c0:ff:6d:aa:47:7c:42:5e:4f:c3:f5:70:2f:
42:ac:a7:43:51:0b:f4:dd:9d:88:97:e2:0f:a3:2c:
38:78:a0:71:50:72:da:5f:5d:2e:5f:2f:e3:e2:f9:
61:95:d4:ca:89:ca:ff:87:80:55:ff:8c:89:b4:65:
60:e8:56:8b:bc:1d:08:40:6d:9a:aa:d3:fd:fa:bc:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:31:95:28:F0:61:AA:DD:50:3E:C4:4E:6F:D3:68:1D:E8:C1:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A664454AA8611F08584C9ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0-45.207.137.255
Signature Algorithm: sha256WithRSAEncryption
68:cc:2a:24:70:bc:c1:7c:76:7d:ea:74:a3:04:d8:fd:9a:26:
72:63:85:3d:3d:b4:f6:b5:8a:d1:ed:af:40:f0:a1:ae:47:a0:
2e:65:1c:04:54:0c:39:02:b3:f6:58:6e:5c:9a:7d:bf:0b:d2:
c7:d5:3b:6b:70:f8:0c:f2:bc:a1:96:08:55:e5:70:e4:98:11:
02:cf:1a:a3:cb:f1:ab:b1:4a:83:c7:4d:05:9d:fb:02:32:ac:
bf:97:00:21:f5:0a:19:10:b6:dd:1f:17:75:bb:2e:90:f4:9f:
d2:0c:71:fa:50:63:f1:65:75:9f:e6:65:24:bb:76:d6:1e:06:
b6:27:51:b5:05:ef:c1:88:43:02:0b:fc:a3:b0:7f:75:73:04:
e8:28:9e:60:df:84:51:81:37:62:1a:27:84:75:8a:0d:a6:bb:
ce:de:d6:25:ab:21:08:43:29:0e:d1:56:2b:e6:b0:72:fc:95:
26:02:46:dd:09:64:46:d1:fc:92:62:8c:d9:49:13:9f:10:56:
ae:09:aa:8d:b4:d8:48:43:81:84:97:52:dd:fd:9e:b2:90:f9:
a4:3a:4c:da:e3:f4:6a:eb:9f:11:a4:31:47:c4:fe:e8:69:c5:
0e:03:5e:29:51:8a:41:9d:24:90:47:9e:ab:ee:fa:66:46:06:
77:ac:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:21 2025 by rpki-client