Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF4B6C6AA3811F0A4D049A6DAE4EC9C.roa
File: 7CF4B6C6AA3811F0A4D049A6DAE4EC9C.roa (raw, json)
Hash identifier: V3R1WgXxWSzyWkyrYqf8HmsBsWC4Dkg+3lEfWQ9swck=
Subject key identifier: CD:18:53:A0:C9:F5:70:31:51:91:3E:43:CE:F5:BC:C6:04:2E:BB:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF4B6C6AA3811F0A4D049A6DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 02:33:24 +0000
ROA not before: Thu 16 Oct 2025 02:33:18 +0000
ROA not after: Sat 15 Nov 2025 02:33:18 +0000
asID: 395793
IP address blocks: 45.195.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98515 (0x180d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 02:33:18 2025 GMT
Not After : Nov 15 02:33:18 2025 GMT
Subject: CN=68f05974-ae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:df:93:55:c5:fd:8d:86:2d:b3:00:9b:78:
72:2c:83:dd:21:23:71:da:d5:71:f2:f7:69:15:60:
a7:a7:45:38:9b:c0:2f:91:85:97:38:6d:9b:bb:01:
25:8d:a1:5a:66:fd:54:80:54:fb:75:79:2f:28:07:
a8:c0:e1:b5:bc:f8:7d:ae:13:73:c3:8b:de:8b:f2:
1c:39:f5:1d:61:5e:73:1c:64:14:8d:ab:7a:d2:75:
3e:0a:1c:fe:78:8f:9e:df:b6:cc:20:75:fd:aa:92:
e1:98:d7:b3:8e:f7:79:fa:27:65:85:f0:0f:af:87:
7a:86:f8:43:56:74:d5:70:ad:83:d2:89:07:57:e1:
38:4b:dd:c9:c0:c6:61:a8:6f:c9:d7:92:5c:0a:a3:
21:66:1e:d0:fc:0a:6f:db:45:11:2d:b2:22:f4:20:
e2:5e:dd:2e:67:5b:17:ef:b6:8f:af:91:32:45:68:
09:46:39:30:9d:3d:ce:05:23:2f:0f:b9:2b:cd:d4:
f5:28:c3:b2:05:03:68:5d:8c:fc:3c:2e:82:fa:fc:
1b:54:30:10:e3:fc:4f:13:b9:41:fa:10:33:9c:00:
d9:c0:48:9d:93:8e:a5:7a:e5:47:fa:88:0f:06:61:
c5:b0:a1:f0:7f:40:f3:00:9d:7a:c5:1b:43:ee:52:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:53:A0:C9:F5:70:31:51:91:3E:43:CE:F5:BC:C6:04:2E:BB:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF4B6C6AA3811F0A4D049A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.63.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0f:0a:ac:38:da:50:7a:de:94:05:35:d6:5c:ea:b3:ac:8c:
f3:9d:74:82:d2:ce:8e:7d:86:f6:91:56:ec:40:a5:45:90:de:
68:9c:9a:7e:a9:93:e2:26:f8:33:22:ac:fb:d3:d2:d6:9e:db:
ff:72:95:aa:0b:74:3f:c5:50:cc:32:57:82:3a:21:fa:c5:85:
74:5d:38:e0:24:52:a0:72:75:c6:32:0a:96:56:64:75:79:e2:
fd:1c:83:1e:39:77:b9:b3:19:c1:1c:23:6a:ea:22:aa:10:de:
71:72:40:7c:96:7a:24:28:07:5f:c4:aa:8d:d0:55:8b:90:21:
4c:d4:29:40:e7:04:34:7c:b4:1e:91:44:58:72:7b:64:5d:74:
e2:bf:30:b9:ae:05:fc:4a:c2:a1:cf:bf:39:31:cf:f3:48:c9:
52:e8:0d:88:85:b6:b8:a5:f2:9d:62:1d:c6:fe:12:d6:ac:be:
23:25:bd:c9:71:da:09:1e:c9:6d:aa:19:df:fa:e6:9b:3d:2f:
73:fc:41:5e:97:ec:a7:3e:72:3c:9a:6d:46:f1:b7:56:e0:dd:
37:00:7d:b3:01:67:90:1c:f1:d4:73:48:9e:af:64:14:31:86:
f8:32:cf:50:3b:57:b6:50:e5:26:1e:3a:a7:99:6d:37:ac:e3:
ec:28:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:40 2025 by rpki-client