Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90BBD61EAFFE11F086084F90DAE4EC9C.roa
File: 90BBD61EAFFE11F086084F90DAE4EC9C.roa (raw, json)
Hash identifier: GYCSnksH9IfUPpP6kSD1j5KOTNucThkRigFsebeOClw=
Subject key identifier: 6F:1A:EA:C7:B6:1C:21:F8:0A:57:64:02:D3:E6:17:05:37:DB:5C:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01823D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90BBD61EAFFE11F086084F90DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 10:53:54 +0000
ROA not before: Thu 23 Oct 2025 10:53:46 +0000
ROA not after: Fri 28 Nov 2025 10:53:46 +0000
asID: 202656
IP address blocks: 45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98877 (0x1823d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 10:53:46 2025 GMT
Not After : Nov 28 10:53:46 2025 GMT
Subject: CN=68fa0941-08df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:5c:06:b2:26:54:a2:4b:df:fc:b3:dc:c4:
7e:4d:7b:ec:3e:78:2c:6a:82:4f:b0:2e:a0:52:98:
d5:32:2c:27:96:88:0f:2e:32:4c:9b:0a:15:fc:d0:
ee:1d:2a:02:84:0c:71:e5:31:b3:43:f5:5e:3d:12:
cf:f7:58:a2:eb:d7:15:4b:44:df:df:4f:f6:ac:cc:
8d:ef:76:25:52:74:30:d7:82:77:c5:55:fa:4b:a7:
ee:83:34:ef:96:27:43:52:bf:4b:96:87:cb:41:71:
85:2e:b9:f8:1e:a6:93:2d:21:b5:9e:4c:f7:29:07:
3d:00:de:ef:bd:ca:0a:e9:51:20:b2:f6:5f:a7:84:
ee:04:e7:0e:9b:a9:a9:a1:88:0f:96:f7:c6:89:a4:
92:76:bf:b6:9a:3f:e7:e8:3e:16:73:45:5e:fc:70:
5d:30:5b:d2:4f:69:d4:31:70:98:59:fa:a1:a3:72:
c5:c3:90:32:fc:b3:fc:09:15:d4:25:b4:b1:ca:3a:
37:a0:0e:a0:b9:26:78:d4:b4:00:99:7c:ce:41:8d:
06:3a:be:49:97:c4:cf:76:c7:0a:24:b1:64:62:43:
f2:f7:bf:1f:5b:ef:84:93:6c:68:82:28:8c:71:4d:
13:1d:30:0d:82:96:c8:05:e3:7d:3c:f3:03:5a:57:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1A:EA:C7:B6:1C:21:F8:0A:57:64:02:D3:E6:17:05:37:DB:5C:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90BBD61EAFFE11F086084F90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.229.0-45.199.230.255
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cd:77:19:37:84:79:02:87:98:c9:3d:d0:d0:83:1c:a4:e8:
f9:eb:9d:3c:0a:2d:5c:8e:ea:c3:99:27:22:20:83:f0:21:b3:
28:90:d8:5f:05:e1:fc:13:6e:a1:a4:66:7c:c1:07:f8:f5:ca:
b8:0e:13:01:9e:1c:f9:d5:64:9d:e6:67:09:45:9d:eb:7b:39:
79:6d:3f:89:aa:a1:43:c0:80:f3:2e:43:9a:78:51:72:0e:64:
71:ee:50:6a:1d:b2:1c:9f:64:53:2b:ec:5f:3c:a7:0f:0c:76:
bf:31:5d:d4:44:df:24:a8:6c:fb:f4:4f:ee:93:dc:96:65:49:
d9:55:fb:e9:8a:a3:c6:db:97:2f:1f:7d:c6:30:06:eb:d3:70:
17:b7:00:3f:5e:ad:1d:2a:da:bc:4c:29:8a:3d:8d:50:bd:ed:
de:20:cc:72:4c:be:ee:38:e8:d4:df:31:90:de:6a:fa:c1:01:
75:f0:cb:9b:4e:05:e3:74:95:a8:e9:6a:47:0e:96:ac:b0:a7:
e8:bf:e0:76:a2:db:dd:37:79:5d:79:00:a7:9d:9d:a4:5e:8f:
97:39:d7:6e:9d:e9:e4:a7:ce:1f:a5:7a:87:b7:51:cb:bc:6c:
69:b5:75:2a:6e:00:d6:88:4c:a2:06:37:21:76:05:b4:c4:f7:
2e:89:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:01 2025 by rpki-client