Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41CEBDC4B4F311F08DF387A6DAE4EC9C.roa
File: 41CEBDC4B4F311F08DF387A6DAE4EC9C.roa (raw, json)
Hash identifier: /0MhXvF4Bp4Yv1s2wjFp0q+kDQ9KylvrlEJ4AnSISBk=
Subject key identifier: AC:01:AF:0E:B7:B0:86:10:73:D6:E6:AD:BE:BC:82:2D:98:AD:6F:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41CEBDC4B4F311F08DF387A6DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 18:15:32 +0000
ROA not before: Wed 29 Oct 2025 18:15:28 +0000
ROA not after: Tue 06 Jan 2026 18:15:28 +0000
asID: 153347
IP address blocks: 45.192.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99300 (0x183e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 18:15:28 2025 GMT
Not After : Jan 6 18:15:28 2026 GMT
Subject: CN=690259c4-b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:1e:91:83:5c:c5:80:92:38:7c:63:6b:95:
8d:02:f5:58:3f:32:d9:09:c7:0d:be:9d:a1:9f:a9:
67:2d:f5:59:e4:5a:2c:3f:a1:3f:6c:70:da:b4:f7:
28:f6:bd:67:45:b5:c6:9c:13:2d:f8:67:53:96:9a:
98:93:6a:8b:15:f6:9d:81:5b:75:b9:9e:5f:fe:17:
79:b2:00:77:b7:26:c7:f7:80:49:20:44:7a:a4:87:
91:df:b9:f8:e1:a4:c1:06:0f:01:f5:2b:e7:eb:6f:
67:1b:d9:2e:a2:eb:44:1d:b6:eb:d4:f8:c8:6e:cd:
97:8b:57:90:7d:2a:ae:86:88:6b:6b:e3:f5:b8:42:
04:ba:00:2f:e7:ab:6f:00:c1:44:78:c9:17:51:4a:
d0:c9:9c:9e:08:13:60:e6:c6:6f:8a:d6:96:9e:11:
d2:8b:e2:9c:45:bd:5b:ce:8d:29:79:61:0a:74:3a:
23:cd:91:73:6e:e1:28:a9:65:81:73:b2:9f:fe:46:
69:39:03:3e:7f:32:bb:35:97:90:6d:00:b2:b9:2e:
60:9d:91:5c:2d:29:49:ec:43:8c:2e:d9:40:37:79:
f8:1a:c3:d0:f7:ca:24:df:2f:55:ee:54:c3:25:ac:
84:ed:86:c2:3b:10:34:ff:da:84:a4:4b:26:42:a7:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:01:AF:0E:B7:B0:86:10:73:D6:E6:AD:BE:BC:82:2D:98:AD:6F:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41CEBDC4B4F311F08DF387A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8f:33:4a:3d:4a:20:49:04:79:2c:1f:76:6c:c2:67:08:48:
28:dc:5b:0d:5e:77:4e:d1:1e:14:f3:32:ce:10:95:8b:8b:0f:
bf:37:c0:53:20:f3:6e:b0:de:4e:be:b5:29:54:28:09:c2:7c:
d4:1f:a5:28:64:8b:9e:08:3c:26:3a:13:a3:ea:91:e6:a1:0d:
f3:cb:65:72:3d:d6:32:0d:c0:78:82:ca:33:5d:c5:db:b0:36:
0c:9e:64:51:84:ab:0b:3d:fa:fa:09:84:34:f9:18:06:40:5d:
dc:e5:a2:14:b3:82:0a:69:8a:69:82:f1:6c:22:87:7a:0a:cb:
c6:b4:28:d2:3e:70:5b:30:11:27:78:e0:d8:e2:5d:21:8b:f6:
20:fb:9f:a0:8c:2e:80:35:ab:33:5c:79:8d:d1:53:1f:1a:be:
3e:4e:7c:75:1b:43:84:e3:8a:df:0f:ce:b9:59:5e:b2:3a:59:
69:21:59:64:a9:68:ca:d1:9a:22:8e:72:c6:2f:c4:77:9a:03:
6a:e5:19:78:fc:e4:b9:4d:5a:5f:fd:71:0e:4c:f3:ec:44:29:
69:5c:37:92:2e:f0:c1:01:c2:ea:0f:8c:36:35:8c:07:89:18:
ec:9a:9b:f5:37:1c:13:dd:28:e7:3c:82:77:c2:1c:35:c3:11:
f9:fe:94:81
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYPkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI5MTgxNTI4WhcNMjYwMTA2MTgxNTI4WjAYMRYw
FAYDVQQDEw02OTAyNTljNC1iNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2x0ekYNcxYCSOHxja5WNAvVYPzLZCccNvp2hn6lnLfVZ5FosP6E/bHDa
tPco9r1nRbXGnBMt+GdTlpqYk2qLFfadgVt1uZ5f/hd5sgB3tybH94BJIER6pIeR
37n44aTBBg8B9Svn629nG9kuoutEHbbr1PjIbs2Xi1eQfSquhohra+P1uEIEugAv
56tvAMFEeMkXUUrQyZyeCBNg5sZvitaWnhHSi+KcRb1bzo0peWEKdDojzZFzbuEo
qWWBc7Kf/kZpOQM+fzK7NZeQbQCyuS5gnZFcLSlJ7EOMLtlAN3n4GsPQ98ok3y9V
7lTDJayE7YbCOxA0/9qEpEsmQqdP0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKwB
rw63sIYQc9bmrb68gi2YrW/HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MUNFQkRDNEI0RjMxMUYwOERGMzg3QTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAVMA0GCSqGSIb3DQEBCwUA
A4IBAQBjjzNKPUogSQR5LB92bMJnCEgo3FsNXndO0R4U8zLOEJWLiw+/N8BTIPNu
sN5OvrUpVCgJwnzUH6UoZIueCDwmOhOj6pHmoQ3zy2VyPdYyDcB4gsozXcXbsDYM
nmRRhKsLPfr6CYQ0+RgGQF3c5aIUs4IKaYppgvFsIod6CsvGtCjSPnBbMBEneODY
4l0hi/Yg+5+gjC6ANaszXHmN0VMfGr4+Tnx1G0OE44rfD865WV6yOllpIVlkqWjK
0ZoijnLGL8R3mgNq5Rl4/OS5TVpf/XEOTPPsRClpXDeSLvDBAcLqD4w2NYwHiRjs
mpv1NxwT3SjnPIJ3whw1wxH5/pSB
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:04 2025 by rpki-client