Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C73842B01211F0885D4D8DDAE4EC9C.roa
File: 31C73842B01211F0885D4D8DDAE4EC9C.roa (raw, json)
Hash identifier: 8L1QPsavirI1PiP0isH9khlaEaMAbV75VU55oWAUbEE=
Subject key identifier: 65:86:3E:F5:8C:61:99:F7:24:32:1A:52:E4:AA:8B:BD:52:87:AB:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01826A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C73842B01211F0885D4D8DDAE4EC9C.roa
Signing time: Thu 23 Oct 2025 13:14:24 +0000
ROA not before: Thu 23 Oct 2025 13:14:18 +0000
ROA not after: Fri 28 Nov 2025 13:14:18 +0000
asID: 44559
IP address blocks: 45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98922 (0x1826a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 13:14:18 2025 GMT
Not After : Nov 28 13:14:18 2025 GMT
Subject: CN=68fa2a30-53bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:c7:38:d2:a2:ae:d5:3a:83:7b:bc:94:fd:
3d:4e:21:c2:c2:ba:69:01:e1:06:84:33:2b:e7:a1:
5e:22:89:9d:7a:3c:14:90:77:b5:c4:85:50:fd:b5:
70:19:4e:37:38:58:d6:37:93:50:8a:20:9a:21:dd:
14:69:36:3b:13:80:85:4b:67:e0:93:42:11:02:03:
48:70:69:fb:d3:26:11:b2:15:13:2e:c8:21:45:5c:
4a:5e:8e:b0:b1:32:73:ee:94:ce:17:9b:4f:40:88:
c6:27:e6:b0:fe:70:24:4b:8b:e9:d9:89:70:2a:d4:
0a:87:ea:04:4b:53:4a:41:d7:e8:00:ec:33:3e:2a:
c4:0e:3c:a7:53:a0:34:ae:06:4c:28:18:8c:4f:9e:
c2:02:15:5c:2c:85:cd:0c:0b:15:4d:b2:b4:bd:ed:
49:25:e1:cb:e1:2b:7d:85:ab:42:20:4e:31:ef:93:
8b:79:57:dd:a7:6b:54:16:96:76:ee:38:9f:46:92:
3d:3c:49:93:2e:99:0f:3f:9c:b5:a2:5e:0d:57:32:
dc:11:7a:4d:e5:17:93:de:bf:0a:32:d6:87:9d:c0:
b4:a3:07:fe:01:10:ee:ae:0f:ea:40:2e:4e:b8:4e:
75:6d:82:4e:cc:37:fe:7f:d4:43:e0:13:c8:f1:e8:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:3E:F5:8C:61:99:F7:24:32:1A:52:E4:AA:8B:BD:52:87:AB:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C73842B01211F0885D4D8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.211.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
7d:08:a0:a4:a2:0e:13:14:56:94:61:6d:6c:4b:f5:22:19:3f:
c8:66:f1:38:a1:99:e8:4c:15:61:2f:40:b1:c8:c3:59:bd:00:
76:55:4f:73:13:59:3b:44:5f:c1:69:a1:41:26:a0:ef:d8:ad:
5b:21:fa:3d:00:ac:ee:04:6b:33:af:91:25:7e:6a:25:6f:95:
5a:d8:63:6a:de:05:b7:d2:52:fe:32:bf:c9:ae:5c:31:2d:13:
80:c7:c7:43:6c:35:77:fc:56:8b:25:2e:d3:2a:38:16:48:ad:
34:f4:51:57:5d:83:3f:7e:2c:44:07:2c:ec:e5:cf:42:9a:b5:
f6:ed:73:0d:09:bb:4c:66:33:5f:16:b5:1e:f3:e0:28:b3:98:
51:b6:7e:83:b0:93:1f:c7:cc:9b:3f:fa:fb:05:4d:3a:c4:67:
d7:84:83:6f:ec:44:d8:38:3e:4a:12:38:69:22:0f:88:cc:36:
04:0b:95:33:de:dc:4f:07:a6:9a:91:0a:c8:89:35:e6:ad:26:
cf:56:a6:8b:64:a5:bc:c1:e7:a7:be:8f:a8:a6:33:44:f2:35:
fd:23:47:07:1e:b4:72:51:92:a9:4c:ce:4d:b4:4b:49:81:eb:
6b:ed:6b:93:50:1a:ad:f9:55:af:2c:a1:f9:e4:23:52:52:fe:
aa:4e:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:58 2025 by rpki-client