Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE32AA0AB89111F08A7B90F1DAE4EC9C.roa
File: BE32AA0AB89111F08A7B90F1DAE4EC9C.roa (raw, json)
Hash identifier: d35E/O4wtS0DBIlfq041Bfz0u+CaEGh95sVOOMKwcPE=
Subject key identifier: 36:17:EA:A2:CF:76:2E:E7:4D:3A:FC:B7:A0:71:92:20:A1:74:C5:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018471
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE32AA0AB89111F08A7B90F1DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:47:35 +0000
ROA not before: Mon 03 Nov 2025 08:47:31 +0000
ROA not after: Mon 08 Dec 2025 08:47:31 +0000
asID: 214808
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99441 (0x18471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 08:47:31 2025 GMT
Not After : Dec 8 08:47:31 2025 GMT
Subject: CN=69086c27-dfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:74:8e:bb:e6:37:3b:fc:a1:ce:23:95:0e:
43:a9:74:c9:97:58:1f:7e:57:4c:6a:c0:35:92:10:
94:5d:8d:91:5e:c2:d1:1d:a7:aa:f0:14:6e:db:0b:
dc:8f:90:c2:2f:49:a6:47:09:d7:20:e8:12:3c:70:
d7:6a:ad:b4:b4:3d:83:d6:3f:68:16:25:61:ff:08:
5d:48:ce:bd:6b:33:3a:42:fa:2f:7b:a3:57:b0:31:
d5:4c:0b:23:0a:0c:f3:68:75:2e:18:f6:4d:53:7f:
7b:95:23:ff:42:59:b2:8d:12:ef:e0:65:bc:7a:a7:
c5:02:73:07:c6:66:16:9c:f2:42:cc:3e:b3:84:b7:
c9:57:0d:75:9a:37:8d:f8:2f:eb:f7:43:0d:5f:f8:
0a:eb:b7:61:f7:5b:7b:b0:e2:26:6a:fa:41:30:39:
83:3b:8d:11:36:5b:1f:51:94:79:02:56:d0:75:76:
06:3a:e1:0c:e4:01:30:cc:05:ca:de:af:86:25:64:
28:5f:1f:97:7e:5a:67:d7:18:a3:c5:76:70:9c:ad:
72:33:e5:aa:6b:00:2e:7b:2d:fa:23:02:ac:78:ff:
84:5c:fa:d2:ac:d1:20:34:08:1f:20:96:4a:b7:98:
66:c3:52:ec:27:4d:5b:df:fc:f3:d1:7d:ac:87:c0:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:17:EA:A2:CF:76:2E:E7:4D:3A:FC:B7:A0:71:92:20:A1:74:C5:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE32AA0AB89111F08A7B90F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
77:e2:93:90:ef:cc:1b:6d:ed:3d:2a:21:85:98:28:4e:4e:31:
ca:98:a9:3e:ad:b1:0f:8c:bf:51:74:da:b3:5c:8f:02:e6:29:
36:2a:95:70:a8:5f:74:55:8b:c3:aa:61:26:a6:04:40:50:c1:
94:52:f7:6f:f3:6d:e7:7d:ef:68:96:8e:da:c7:a0:9e:52:41:
ed:98:b5:e9:f8:30:b2:ec:8d:59:e2:ce:9d:3b:03:3d:e5:e6:
3f:f3:a9:95:19:e7:aa:e1:d1:1a:2b:cd:77:a4:b7:af:5c:3e:
98:2e:a3:4f:00:71:c8:ad:24:14:81:f6:bd:fc:ab:b3:a0:c3:
08:f3:44:bb:01:74:60:47:6c:fd:9e:62:65:03:f7:05:d1:2f:
96:4c:d7:f7:4c:1b:e1:19:ff:5b:61:e3:8d:bd:6b:13:25:ea:
52:d2:51:b6:2d:72:da:d8:32:af:41:72:e9:a6:b4:47:e5:86:
a6:34:04:34:78:70:12:f6:3f:14:a9:09:fa:51:b3:c3:a6:88:
e9:86:55:09:0b:27:b6:e1:bc:9f:1c:b9:a0:13:e7:d1:a2:84:
03:e3:d3:28:1a:a0:77:86:28:07:f5:8a:95:4c:42:53:f5:70:
c2:05:c1:1e:53:b6:76:b6:1b:31:82:cd:db:8b:fd:5a:83:a7:
35:aa:a7:8a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYRxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTAzMDg0NzMxWhcNMjUxMjA4MDg0NzMxWjAYMRYw
FAYDVQQDEw02OTA4NmMyNy1kZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtKZ0jrvmNzv8oc4jlQ5DqXTJl1gffldMasA1khCUXY2RXsLRHaeq8BRu
2wvcj5DCL0mmRwnXIOgSPHDXaq20tD2D1j9oFiVh/whdSM69azM6Qvove6NXsDHV
TAsjCgzzaHUuGPZNU397lSP/QlmyjRLv4GW8eqfFAnMHxmYWnPJCzD6zhLfJVw11
mjeN+C/r90MNX/gK67dh91t7sOImavpBMDmDO40RNlsfUZR5AlbQdXYGOuEM5AEw
zAXK3q+GJWQoXx+Xflpn1xijxXZwnK1yM+WqawAuey36IwKseP+EXPrSrNEgNAgf
IJZKt5hmw1LsJ01b3/zz0X2sh8BwoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDYX
6qLPdi7nTTr8t6BxkiChdMUgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRTMyQUEwQUI4OTExMUYwOEE3QjkwRjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcDyMA0GCSqGSIb3DQEBCwUA
A4IBAQB34pOQ78wbbe09KiGFmChOTjHKmKk+rbEPjL9RdNqzXI8C5ik2KpVwqF90
VYvDqmEmpgRAUMGUUvdv823nfe9olo7ax6CeUkHtmLXp+DCy7I1Z4s6dOwM95eY/
86mVGeeq4dEaK813pLevXD6YLqNPAHHIrSQUgfa9/KuzoMMI80S7AXRgR2z9nmJl
A/cF0S+WTNf3TBvhGf9bYeONvWsTJepS0lG2LXLa2DKvQXLpprRH5YamNAQ0eHAS
9j8UqQn6UbPDpojphlUJCye24byfHLmgE+fRooQD49MoGqB3higH9YqVTEJT9XDC
BcEeU7Z2thsxgs3bi/1ag6c1qqeK
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:49 2025 by rpki-client