
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CC896E6DFB11F0904C49BADAE4EC9C.roa
File: 35CC896E6DFB11F0904C49BADAE4EC9C.roa (raw, json)
Hash identifier: 6l98GLFfaMWnBVt+Ty6bI6x8XRLS0McjmkGbebuaIkM=
Subject key identifier: 31:00:E6:CF:17:B6:BC:63:AA:B2:2B:30:8A:F2:A2:37:79:B8:07:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01685F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CC896E6DFB11F0904C49BADAE4EC9C.roa
Signing time: Thu 31 Jul 2025 10:43:36 +0000
ROA not before: Thu 31 Jul 2025 10:43:31 +0000
ROA not after: Thu 07 Aug 2025 10:43:31 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92255 (0x1685f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 31 10:43:31 2025 GMT
Not After : Aug 7 10:43:31 2025 GMT
Subject: CN=688b48d8-8c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:c2:ba:41:e5:31:ce:19:bc:7f:5a:50:82:
cd:49:bc:19:7b:1c:f2:4a:57:44:0a:71:7c:42:25:
d1:37:d2:2e:40:0b:18:f6:42:81:56:95:7b:c6:e4:
2c:d7:a9:86:ae:62:4f:02:88:fb:a4:98:5d:0c:3b:
6d:65:71:cb:ad:a9:28:ec:8c:b9:d5:61:9f:f8:90:
40:35:bd:87:43:d2:c2:d9:af:35:a7:c7:c6:98:e5:
d5:d9:f3:e9:f9:42:01:4e:53:6f:c6:40:12:58:d8:
a5:6a:42:5f:db:4d:ca:de:e7:4c:69:2a:25:71:10:
b9:ba:66:85:f4:de:1e:6f:21:64:05:db:e3:30:bc:
30:9c:42:f1:f3:e2:ee:25:4f:1b:14:3f:da:95:3d:
07:dd:d6:cf:75:8f:70:eb:81:da:fe:f3:e4:f7:8e:
b2:6d:85:37:df:d8:91:03:9b:ca:4f:75:3e:ec:d1:
59:9d:8e:dc:0c:8e:9a:81:89:8c:77:2c:8f:a4:b1:
42:f9:0a:5e:5a:3e:ea:9d:e4:e8:88:69:54:8e:4e:
04:25:e3:a9:a2:7a:f3:ef:58:06:26:07:1f:b1:a6:
42:e7:9b:fd:35:30:ff:e9:78:26:dc:6f:69:73:7f:
9e:b0:85:a1:d2:c9:e4:87:d5:71:1e:5a:0b:5e:3f:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:E6:CF:17:B6:BC:63:AA:B2:2B:30:8A:F2:A2:37:79:B8:07:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CC896E6DFB11F0904C49BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:ad:9d:15:c7:7c:18:17:63:74:1d:49:bf:77:19:c5:6c:a8:
04:80:6f:f8:94:be:50:6c:81:d7:5e:57:09:39:e7:6e:8a:4c:
aa:ce:39:b3:e6:15:c4:c9:76:60:ca:ba:c4:a8:54:d4:bd:65:
09:a5:f8:07:d9:8b:00:50:3b:a5:43:21:80:79:74:c8:60:1e:
98:00:41:4d:00:0f:e6:ac:5c:ae:8c:50:d6:ec:6d:c9:b8:9c:
ce:8c:0e:f2:c8:86:68:f8:75:bc:ab:b2:45:cf:e7:0f:05:20:
77:0b:2e:df:4e:40:3a:5c:b0:05:d8:71:11:93:7a:ad:ef:6f:
78:dc:42:cb:a0:fd:aa:fe:f9:60:ce:be:ad:4c:10:b9:bf:e6:
b3:36:56:3d:e6:30:62:ab:0e:5d:60:61:3c:0f:30:0a:bb:6b:
b4:0c:12:d8:71:88:c4:28:74:4b:19:8f:4a:58:34:40:3b:14:
19:46:00:c1:f6:11:69:8e:90:0e:00:4e:78:b3:02:d3:88:47:
5a:93:ef:0b:de:0e:fb:f2:47:78:57:e4:b2:e0:45:3e:3f:29:
3e:e5:04:3c:08:3f:98:18:40:51:7c:1f:34:d2:8e:31:ce:dd:
bf:bc:ab:34:63:24:71:a2:66:68:47:55:7e:f1:ca:16:93:35:
51:83:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:19:04 2025 by rpki-client