Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39392666B63011F0B2C91C7ADAE4EC9C.roa
File: 39392666B63011F0B2C91C7ADAE4EC9C.roa (raw, json)
Hash identifier: OI0A9q5aack9MiUDWaqh25/qeeVW49xfJ4UuQgbQamk=
Subject key identifier: B8:89:2E:AB:52:7E:D0:A0:2E:A6:51:FF:0C:0C:64:80:7D:12:CC:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01841E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39392666B63011F0B2C91C7ADAE4EC9C.roa
Signing time: Fri 31 Oct 2025 08:04:29 +0000
ROA not before: Fri 31 Oct 2025 08:04:24 +0000
ROA not after: Sun 07 Dec 2025 08:04:24 +0000
asID: 395793
IP address blocks: 45.192.236.0/22 maxlen: 24
45.192.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99358 (0x1841e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 08:04:24 2025 GMT
Not After : Dec 7 08:04:24 2025 GMT
Subject: CN=69046d8c-7d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:83:a0:18:21:d7:b8:c2:32:f5:8c:f6:f0:
d0:b5:0f:68:69:b6:eb:27:b2:42:e4:8e:de:46:38:
32:3a:73:e1:70:ab:16:a4:e6:74:77:70:f0:87:c0:
01:28:ba:3a:ef:54:8d:50:28:fa:18:16:f5:5d:cf:
79:36:f0:87:0a:61:fc:d2:68:5c:09:bc:21:e0:99:
bf:e8:0b:1f:f2:89:44:67:1c:a8:3e:1d:35:ba:61:
d8:a7:f2:da:a2:33:e1:cb:7e:09:ea:ee:f9:20:56:
4f:e3:18:ea:f4:c5:cc:ee:f9:5e:b2:dc:ec:24:09:
1d:88:c5:50:22:39:5e:a3:2b:6c:5b:b9:22:62:2d:
b0:07:9f:bb:51:90:ec:01:42:bb:1b:c9:c3:f7:7a:
ea:5d:1e:c2:77:b6:5c:45:c6:20:36:07:54:4e:1d:
48:07:86:76:d1:da:e6:ac:cf:67:7d:88:1d:a0:16:
71:fe:6c:c2:9d:3e:b1:bc:c4:ec:22:c2:b3:3e:df:
01:30:ed:d2:87:69:52:21:2e:b2:9d:ed:ff:06:a0:
22:05:0c:2f:81:48:e5:41:a3:d5:8a:b6:c1:0d:d7:
dc:5f:45:72:f6:46:fb:5a:2e:99:7a:f9:1c:70:cf:
f4:68:77:b9:5b:5c:48:6b:f2:a6:9f:36:65:aa:08:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:89:2E:AB:52:7E:D0:A0:2E:A6:51:FF:0C:0C:64:80:7D:12:CC:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39392666B63011F0B2C91C7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/22
Signature Algorithm: sha256WithRSAEncryption
98:9e:72:43:6a:3d:80:3a:fd:6e:3a:57:6d:6c:d6:39:61:68:
d4:17:b8:fc:9a:43:58:7f:77:a4:aa:0a:fc:d4:27:a8:00:9c:
16:f9:50:7c:37:1c:63:9e:8a:f6:33:23:6c:60:ea:92:21:d7:
f0:b6:24:5f:ce:23:c0:96:4c:36:f9:a3:9b:8b:ba:1b:06:c5:
3a:db:23:11:ab:6e:0f:5a:3e:ec:f1:5c:98:19:e0:09:59:c8:
53:6f:9a:79:d1:ef:6e:0f:67:a2:85:1f:51:45:5c:ab:15:e4:
e6:79:42:68:ba:c3:1e:e7:24:21:06:79:bb:8c:4c:51:2a:01:
28:43:c3:1c:66:ca:90:0c:dd:9a:1d:ab:10:09:ba:f4:b7:e6:
1d:ab:af:e6:a9:93:99:b4:63:3e:fb:97:a6:cc:78:57:72:22:
7a:83:d1:25:0b:7b:bb:93:01:f3:8f:65:57:5a:ee:73:8d:36:
31:5c:32:d4:79:81:43:0f:b6:fd:f4:ca:4a:36:ca:b6:d9:f2:
29:7a:8e:c9:40:06:ec:db:1c:9d:15:73:73:48:b8:83:e0:51:
3b:af:b8:12:60:98:3c:6b:2e:17:81:e0:1a:98:44:5a:c2:22:
cb:b2:f5:47:79:56:3c:51:29:51:20:28:c4:8a:8e:c5:24:db:
0d:2a:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:43 2025 by rpki-client