Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E277660B88211F08CDD2D93DAE4EC9C.roa
File: 3E277660B88211F08CDD2D93DAE4EC9C.roa (raw, json)
Hash identifier: ugHy6UC8CJdPC7hVljIsNHjdlrRcI3n+h6bwTvajuhs=
Subject key identifier: 06:55:E6:A7:CD:7E:3A:B9:AF:E4:2B:2B:1B:4E:21:DD:7B:7E:43:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018451
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E277660B88211F08CDD2D93DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 06:56:38 +0000
ROA not before: Mon 03 Nov 2025 06:56:31 +0000
ROA not after: Mon 25 May 2026 06:56:31 +0000
asID: 23764
IP address blocks: 45.196.25.0/24 maxlen: 24
45.196.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99409 (0x18451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 06:56:31 2025 GMT
Not After : May 25 06:56:31 2026 GMT
Subject: CN=69085226-39aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:37:5f:cd:0b:a6:c8:4a:7e:21:b6:99:54:
a9:2a:16:16:52:8c:be:20:b9:5e:82:fd:1a:bc:fb:
ab:65:8e:31:77:ce:ec:93:25:4b:99:91:6b:e3:38:
14:49:36:fe:1c:46:6c:83:f6:e6:77:53:3e:39:ff:
08:8f:3e:74:b9:37:56:fe:0a:19:7d:54:1b:53:8c:
81:44:e9:51:03:b5:2d:7f:12:ef:36:37:d1:b7:8c:
ab:ac:df:fe:bd:2b:4f:f7:07:c5:38:71:92:3e:a2:
cb:d7:90:c1:7d:37:d2:87:9e:87:79:04:4a:f9:d2:
ff:a7:12:53:48:ed:30:8b:1b:05:c8:50:46:16:6a:
69:24:6c:a1:c8:c5:7d:0a:5a:63:e7:2e:60:f1:cd:
f2:90:ea:f8:3c:85:9c:8d:e4:39:ef:2f:b1:88:5c:
0b:8a:17:fa:a0:9a:24:73:b8:db:0b:6c:85:97:44:
6b:b1:02:23:af:4e:c6:e6:71:5e:1e:85:25:62:c9:
af:da:69:40:36:06:85:58:33:db:66:60:e0:49:65:
54:7e:7a:d5:da:d2:5f:e1:95:0a:9e:2b:f4:81:92:
27:f4:a1:49:79:be:20:9c:8c:2d:6d:5a:81:fb:ef:
af:ba:36:67:a4:f0:36:1a:d1:b0:34:20:39:41:fc:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:55:E6:A7:CD:7E:3A:B9:AF:E4:2B:2B:1B:4E:21:DD:7B:7E:43:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E277660B88211F08CDD2D93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.25.0/24
45.196.27.0/24
Signature Algorithm: sha256WithRSAEncryption
61:95:78:f0:dc:fa:b7:23:b6:c7:3b:67:55:8a:4b:6d:c9:b7:
23:a9:c4:51:ae:7e:6b:a1:67:4d:8c:54:47:f2:f5:68:04:31:
37:d2:14:10:38:6c:34:b4:5f:e4:6a:03:74:4c:57:8d:50:35:
4d:e8:77:70:8e:1d:1a:14:76:7b:76:eb:9f:c5:66:20:09:9b:
e6:2b:fe:b8:11:c3:66:8a:09:21:e8:9f:3e:ef:78:1b:fd:5a:
9e:26:83:d8:1e:17:62:69:92:f3:6d:93:25:e9:96:88:4d:5c:
bc:64:6b:48:5d:ba:96:91:bc:f2:b6:36:e3:a8:e7:3c:33:c7:
8f:d1:cb:93:8f:9b:4f:d3:3c:b3:cf:fb:d9:2f:0c:15:e7:5f:
6f:c3:66:f1:37:c3:0d:18:00:1f:b5:7c:e4:a9:8c:af:39:40:
03:6d:2b:36:fb:81:6d:f2:4d:16:e5:07:32:b3:1e:28:32:02:
75:09:fb:7a:eb:3d:72:8b:87:71:a8:a2:2f:0b:03:72:84:cd:
b7:44:8e:ba:2c:d3:7f:64:d7:a2:6d:99:3a:ed:06:55:5e:ca:
ff:5f:b6:2b:6a:f6:7b:5e:f6:fc:2a:d3:2a:16:74:a0:92:c3:
a3:e7:14:1f:05:da:70:94:15:28:95:ff:e8:c5:91:60:d8:cf:
e9:14:53:ef
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYRRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMDY1NjMxWhcNMjYwNTI1MDY1NjMxWjAYMRYw
FAYDVQQDEw02OTA4NTIyNi0zOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtEw3X80LpshKfiG2mVSpKhYWUoy+ILlegv0avPurZY4xd87skyVLmZFr
4zgUSTb+HEZsg/bmd1M+Of8Ijz50uTdW/goZfVQbU4yBROlRA7UtfxLvNjfRt4yr
rN/+vStP9wfFOHGSPqLL15DBfTfSh56HeQRK+dL/pxJTSO0wixsFyFBGFmppJGyh
yMV9Clpj5y5g8c3ykOr4PIWcjeQ57y+xiFwLihf6oJokc7jbC2yFl0RrsQIjr07G
5nFeHoUlYsmv2mlANgaFWDPbZmDgSWVUfnrV2tJf4ZUKniv0gZIn9KFJeb4gnIwt
bVqB+++vujZnpPA2GtGwNCA5Qfyu+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZV
5qfNfjq5r+QrKxtOId17fkNEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRTI3NzY2MEI4ODIxMUYwOENERDJEOTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcQZAwQALcQbMA0GCSqGSIb3
DQEBCwUAA4IBAQBhlXjw3Pq3I7bHO2dVikttybcjqcRRrn5roWdNjFRH8vVoBDE3
0hQQOGw0tF/kagN0TFeNUDVN6Hdwjh0aFHZ7duufxWYgCZvmK/64EcNmigkh6J8+
73gb/VqeJoPYHhdiaZLzbZMl6ZaITVy8ZGtIXbqWkbzytjbjqOc8M8eP0cuTj5tP
0zyzz/vZLwwV519vw2bxN8MNGAAftXzkqYyvOUADbSs2+4Ft8k0W5Qcysx4oMgJ1
Cft66z1yi4dxqKIvCwNyhM23RI66LNN/ZNeibZk67QZVXsr/X7YravZ7Xvb8KtMq
FnSgksOj5xQfBdpwlBUolf/oxZFg2M/pFFPv
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:13 2025 by rpki-client