Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D260945AAD8E11F0B04A55D2DAE4EC9C.roa
File: D260945AAD8E11F0B04A55D2DAE4EC9C.roa (raw, json)
Hash identifier: iwmAwvf/7RX+Zt99DkVXuTd/aP7piNoH/Dio1+rDJXg=
Subject key identifier: A8:C4:C3:CD:81:EC:3D:99:9A:80:90:F3:EE:F8:7F:58:77:35:F3:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018193
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D260945AAD8E11F0B04A55D2DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:28:58 +0000
ROA not before: Mon 20 Oct 2025 08:28:50 +0000
ROA not after: Wed 26 Nov 2025 08:28:50 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98707 (0x18193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 08:28:50 2025 GMT
Not After : Nov 26 08:28:50 2025 GMT
Subject: CN=68f5f2ca-fd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:5d:61:d3:53:96:bf:6a:34:27:95:15:29:
fd:13:b6:66:8e:e9:d5:65:4d:2b:19:dd:e0:70:e1:
c2:ff:c1:ca:de:0e:16:1e:ad:17:1b:dd:17:6e:93:
4e:ac:b4:4e:d1:6c:fb:90:a1:fd:aa:4e:02:c2:8a:
53:46:ca:73:b1:d0:65:8e:9c:da:04:74:5c:00:59:
60:27:26:85:91:61:ed:36:be:7d:54:df:d7:68:9e:
36:32:fd:25:55:34:d6:2a:16:b0:93:e1:64:d3:3a:
a7:3d:55:e8:d0:87:a0:18:52:8e:e0:b9:aa:54:9d:
54:7a:c4:82:66:81:cf:5f:aa:e7:31:c7:84:b3:1c:
e3:39:42:1d:d0:98:7b:e3:7d:d3:aa:6a:5f:92:bc:
cd:b0:32:b6:3f:91:e0:af:64:a0:48:4a:e0:81:f2:
05:4a:4c:eb:64:aa:16:6d:d6:1d:4a:f3:12:97:6a:
e1:eb:31:8b:2b:ab:71:2c:e6:95:47:ce:aa:2d:a2:
47:88:9a:60:0c:52:b2:99:05:0d:a7:a6:93:9c:4f:
0e:e3:9b:13:7c:c2:20:8c:90:87:0f:a6:41:35:56:
7d:bf:33:4a:0a:5d:40:a2:2f:43:75:fe:dd:63:5b:
ce:43:3b:28:9d:3a:e4:68:87:7d:2b:44:d4:a2:08:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C4:C3:CD:81:EC:3D:99:9A:80:90:F3:EE:F8:7F:58:77:35:F3:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D260945AAD8E11F0B04A55D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:92:a0:1c:89:28:53:63:0c:d9:fb:54:d9:76:10:fc:70:97:
11:60:84:7e:3a:8a:44:4d:8d:58:a6:ad:f5:38:64:3e:d6:cf:
13:9d:95:0f:ee:b3:69:85:30:b9:a8:3c:4e:fa:db:f2:04:43:
e1:4f:0b:b9:b3:7f:97:f4:26:2b:ed:d0:af:1e:5d:17:63:49:
eb:9f:13:94:1c:b0:7c:09:16:46:45:67:50:60:b9:78:cc:10:
05:8d:d1:02:c9:5f:8d:36:36:97:86:25:7c:3b:81:c3:9e:13:
5b:0f:f8:3e:18:df:67:56:08:0d:2e:d5:78:80:95:68:57:ce:
06:c2:8c:be:1d:ef:b3:ee:c3:51:90:0f:2b:a7:19:c4:df:25:
f9:ff:d0:11:6f:dc:d8:06:0d:cb:f9:bf:a4:63:15:f3:b1:ec:
3d:ae:8e:d4:c2:51:49:83:18:01:e7:2c:cb:7c:63:ca:0d:f6:
ed:1f:39:f7:4e:74:c3:59:f8:ca:0f:67:b7:e3:a7:eb:91:ef:
75:94:dc:6b:8d:f4:4a:5f:20:26:2b:59:dd:db:3a:51:d5:b4:
c1:51:3a:ef:8e:bf:82:1b:54:ef:f6:55:c9:fe:95:2e:45:29:
17:a0:6f:8a:9d:9c:f8:4f:4d:d6:3e:86:b6:e8:9c:b2:2c:68:
45:6c:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:56:22 2025 by rpki-client