Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B92D3BACAE6311F0AE3F33B2DAE4EC9C.roa
File: B92D3BACAE6311F0AE3F33B2DAE4EC9C.roa (raw, json)
Hash identifier: LYpAGl/9P1JWKvVB0b2/qnFNUYi3QR9NlSHXANPuGMo=
Subject key identifier: 2D:B3:4C:44:6E:9C:EB:AC:10:6D:19:0D:2F:2F:89:65:7F:E2:76:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B92D3BACAE6311F0AE3F33B2DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:52:58 +0000
ROA not before: Tue 21 Oct 2025 09:52:51 +0000
ROA not after: Thu 27 Nov 2025 09:52:51 +0000
asID: 9304
IP address blocks: 45.196.250.0/23 maxlen: 24
45.196.252.0/23 maxlen: 24
45.196.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98786 (0x181e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 09:52:51 2025 GMT
Not After : Nov 27 09:52:51 2025 GMT
Subject: CN=68f757fa-21d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:69:be:97:f4:1c:81:71:cc:13:fa:77:7d:
65:3d:be:25:df:e7:9c:9c:b0:27:63:68:5a:84:6f:
d8:33:39:6c:e4:aa:27:45:74:98:bd:f0:53:2b:ef:
93:4d:f6:1a:73:c0:3d:6c:4e:7c:19:b8:54:dd:c8:
fb:db:ce:d2:b4:03:45:ee:cc:19:5a:5e:2a:96:73:
f8:e6:ad:08:49:48:65:a9:9a:1e:f7:d2:0d:ee:3f:
df:b6:6b:32:08:f8:e4:32:cc:87:5d:b6:00:71:0e:
d7:ac:f7:ac:60:51:9e:9b:01:93:58:33:11:95:e2:
2a:0e:56:ec:0b:45:4c:48:5d:8b:46:98:cc:8e:49:
13:c5:0e:8a:ef:36:5e:6b:ec:f9:11:73:d5:2b:86:
1c:69:57:78:a8:10:49:33:86:27:7b:b9:a2:f3:ac:
90:f5:26:98:e0:65:13:12:1b:f4:3c:e1:5b:2e:a7:
0d:52:7a:d2:e7:5c:55:29:69:1e:fa:7e:62:21:93:
23:56:a9:3d:7a:e3:5e:cb:30:54:70:05:d1:50:ea:
9a:2b:cc:9f:f6:fa:4f:e8:40:1a:ff:1d:5e:85:3e:
ca:e3:9e:b2:8f:39:40:ca:ca:70:0d:4e:0a:31:40:
6b:f0:72:c9:af:6d:d6:f2:1d:52:70:e1:f0:39:01:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:4C:44:6E:9C:EB:AC:10:6D:19:0D:2F:2F:89:65:7F:E2:76:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B92D3BACAE6311F0AE3F33B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.250.0-45.196.255.255
Signature Algorithm: sha256WithRSAEncryption
30:49:7b:19:bd:a8:a1:7d:9d:2e:08:22:ea:bf:9c:4b:b0:c2:
a0:cc:93:59:27:2f:f2:87:c2:60:b8:ea:98:1b:de:19:80:44:
d0:84:b9:d5:a2:c9:5f:cb:0b:ec:c9:8c:bd:f5:13:42:24:9d:
16:ec:8f:a9:bd:cd:08:2a:4f:48:7f:43:9f:31:a1:25:d4:f8:
ec:ba:21:10:2a:7a:6e:d9:ba:61:a6:ad:93:5f:ee:65:ce:7c:
b6:23:61:71:5e:fe:00:7b:53:84:24:f0:ad:bb:93:a3:fc:14:
de:75:8e:90:31:ec:e6:ea:df:d6:51:f4:3e:05:e9:e8:81:32:
a4:6d:c6:8e:fd:14:d3:50:e3:c3:88:82:d7:dd:2b:df:e5:e3:
6c:03:1f:31:c9:69:de:e1:16:fc:be:8c:c7:7c:98:d2:5e:fd:
7d:10:02:70:e1:87:1a:ef:ff:85:40:78:f0:e1:8c:0b:bb:ce:
41:ed:12:1d:66:eb:ac:b9:17:38:f3:bf:65:63:c7:a8:81:0d:
2a:a2:5c:c6:1a:f2:5b:3e:d3:8b:5c:a3:b2:46:a5:ed:8f:68:
09:f5:3a:b5:bc:39:d8:c8:62:9f:63:ee:61:17:d3:25:32:9c:
bd:51:b5:92:b6:16:0c:bb:77:0b:d9:bd:3e:c3:f1:e0:0b:cb:
95:17:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:09 2025 by rpki-client