Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC86D02B4F611F0AA2352BADAE4EC9C.roa
File: 9DC86D02B4F611F0AA2352BADAE4EC9C.roa (raw, json)
Hash identifier: PZLEae7bl+EMjVHQ6HniaJLU8vkAwY7QT9JHdhSusHA=
Subject key identifier: A5:0F:AD:93:89:B2:5C:04:34:8F:99:5D:44:C3:54:BC:5C:67:7B:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC86D02B4F611F0AA2352BADAE4EC9C.roa
Signing time: Wed 29 Oct 2025 18:39:37 +0000
ROA not before: Wed 29 Oct 2025 18:39:29 +0000
ROA not after: Wed 05 Nov 2025 18:39:29 +0000
asID: 135377
IP address blocks: 45.192.10.0/24 maxlen: 24
45.192.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Nov 2025 18:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99304 (0x183e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 18:39:29 2025 GMT
Not After : Nov 5 18:39:29 2025 GMT
Subject: CN=69025f69-5e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:0e:3d:68:5a:1d:9a:ca:f2:06:41:b9:99:
5d:00:41:41:5a:08:5a:d3:cd:cf:b3:3d:f2:22:83:
d8:ec:ba:ce:18:74:cf:5d:ed:94:a6:69:72:cf:23:
db:cc:48:b4:25:c9:d3:85:74:34:ad:59:97:d5:e8:
c2:7e:53:15:b7:2e:f8:ff:a8:0c:94:d9:28:35:d8:
d5:a3:00:29:d4:bd:db:d2:fe:00:ca:13:be:ca:3c:
4c:32:1f:48:22:c2:24:6a:d6:d7:34:d9:57:de:87:
cb:84:c1:df:84:b9:30:3a:04:8f:46:70:0c:64:8f:
8a:9c:25:29:b5:9d:37:92:6d:87:6f:4a:1c:62:2d:
d7:ca:7b:32:94:41:67:6b:26:68:f8:cd:d7:71:1e:
8f:98:fb:c3:72:ef:81:53:30:27:17:f4:e4:f8:0d:
7d:c1:c8:66:f4:9f:7f:b4:39:a3:f7:da:bc:16:be:
08:c3:5a:cf:86:0e:2a:cd:b5:93:50:5c:fd:4e:f9:
8f:f0:4f:2b:45:a7:b1:59:a3:d3:ef:18:d2:dc:86:
88:19:68:38:d7:cf:4c:8d:7a:ad:9c:87:3d:d2:d2:
78:a0:92:fe:cf:b3:98:ce:a9:fe:27:66:d2:d6:c3:
34:0f:0a:b9:25:a1:37:4b:23:4d:3c:3c:ff:35:20:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:AD:93:89:B2:5C:04:34:8F:99:5D:44:C3:54:BC:5C:67:7B:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC86D02B4F611F0AA2352BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.10.0/23
Signature Algorithm: sha256WithRSAEncryption
57:73:e3:16:a0:2e:e0:06:c5:40:a2:41:b9:3f:15:0d:2c:72:
c4:ed:86:24:eb:f8:da:be:95:1a:f4:a9:dc:ee:68:4d:11:c8:
cf:88:54:b1:bd:64:4f:6c:a0:47:34:22:e7:51:c0:3e:19:ec:
6a:da:b3:b0:0a:76:4e:7c:a7:79:18:37:8a:73:19:c7:90:be:
f5:45:36:45:52:28:34:f4:33:76:1b:bc:d5:11:7d:cf:c2:96:
25:04:af:08:6c:7b:7a:70:67:a4:f4:09:ea:11:83:5e:03:3c:
bb:fe:87:b8:01:6f:ee:66:fd:c4:1e:cd:59:fa:22:a6:60:ba:
73:71:c4:dd:27:e3:31:6e:38:fa:cd:fd:e6:a0:66:b4:82:4c:
a0:fa:11:ba:e0:4d:55:d2:a5:01:9e:c3:90:b1:57:d1:c5:01:
ff:95:e2:3e:02:28:14:cc:92:12:09:92:20:54:6a:5d:e8:b6:
9a:0d:be:be:38:dc:bc:ad:01:09:67:44:36:25:00:56:84:a4:
75:8f:4d:e9:48:b9:36:79:3c:4a:34:80:19:cd:2c:cf:72:a1:
52:24:ce:48:c8:a0:77:99:bd:93:cf:8c:85:16:cf:46:d6:0c:
3c:15:f4:9f:e5:12:cd:6a:ac:0f:5f:3a:5b:43:b9:92:19:90:
c4:d2:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:50 2025 by rpki-client