Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C809407CAFFC11F0A1136F87DAE4EC9C.roa
File: C809407CAFFC11F0A1136F87DAE4EC9C.roa (raw, json)
Hash identifier: o2wrUZd49HGNBZf0Pz9I0vUINSIKMGwWnPVhTGAKK/8=
Subject key identifier: 91:5C:26:1C:3C:82:91:D0:32:A2:F5:7E:C1:A8:06:D8:13:3A:7D:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018239
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C809407CAFFC11F0A1136F87DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 10:41:07 +0000
ROA not before: Thu 23 Oct 2025 10:41:03 +0000
ROA not after: Fri 28 Nov 2025 10:41:03 +0000
asID: 202656
IP address blocks: 45.192.61.0/24 maxlen: 24
45.192.62.0/24 maxlen: 24
45.195.160.0/24 maxlen: 24
45.195.166.0/24 maxlen: 24
45.195.169.0/24 maxlen: 24
45.195.171.0/24 maxlen: 24
45.195.172.0/24 maxlen: 24
45.195.173.0/24 maxlen: 24
45.195.178.0/24 maxlen: 24
45.195.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98873 (0x18239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 10:41:03 2025 GMT
Not After : Nov 28 10:41:03 2025 GMT
Subject: CN=68fa0643-479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:a5:e8:c2:ee:18:4f:d2:5c:38:be:b9:e3:
f0:b3:9b:e9:46:f9:cc:36:0f:7c:21:9a:dd:a9:21:
6b:3d:14:87:dc:87:71:10:d6:f2:38:17:97:42:08:
42:a8:21:fe:98:39:85:5d:db:32:ef:a4:89:5a:09:
1e:92:ad:aa:ca:e6:3f:12:ab:5c:48:85:0a:e3:81:
ff:8b:ce:df:f7:ef:26:14:b6:7e:79:e1:f8:59:de:
93:26:b3:89:f6:46:bb:5f:33:10:e6:e6:5d:2c:73:
c0:d5:d0:42:0a:30:c6:d3:68:78:d8:fe:77:9d:fc:
39:94:a1:af:6e:6b:98:56:17:e9:ac:28:ad:cb:58:
44:fc:aa:9b:e5:31:2a:92:09:57:26:45:d2:2b:2e:
43:dd:fb:7f:0f:78:4c:93:8a:0e:df:4b:81:9f:6e:
fb:57:b3:50:d1:b6:61:cb:a9:15:b3:ed:f0:a0:b1:
b2:66:6a:c3:c6:3b:b3:5b:c8:79:9b:21:ac:40:68:
54:9a:d4:61:a0:00:6e:27:28:78:22:19:61:5e:c9:
d4:94:14:2c:19:8b:e7:2d:d8:78:96:e5:e4:6e:df:
10:91:a3:f7:73:ce:bb:25:4c:d8:df:2a:2e:b3:2f:
ad:89:f3:97:a2:cb:f2:0b:c1:1e:16:dc:11:e4:bc:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5C:26:1C:3C:82:91:D0:32:A2:F5:7E:C1:A8:06:D8:13:3A:7D:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C809407CAFFC11F0A1136F87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.61.0-45.192.62.255
45.195.160.0/24
45.195.166.0/24
45.195.169.0/24
45.195.171.0-45.195.173.255
45.195.178.0/24
45.195.180.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1b:84:de:59:28:cf:96:4f:4e:20:cd:62:c2:66:86:ba:10:
12:9f:1f:ab:a4:d7:03:9b:6a:44:aa:e5:67:57:34:d1:e1:5d:
33:0b:40:20:50:00:82:e5:cc:e0:d7:33:94:40:06:1d:66:84:
14:c8:6e:af:fc:d3:42:b1:ff:a6:61:6f:e8:e6:0d:24:99:4a:
e4:26:55:63:b0:6f:a4:f3:73:69:36:79:b2:8b:02:ad:0e:5b:
ad:5b:cd:b2:33:f8:94:93:a8:83:f4:85:f8:00:58:d4:90:6a:
59:e7:8a:3c:fc:81:f6:eb:df:8b:60:04:74:c2:5b:9a:5b:3e:
2b:e4:8c:b7:6d:47:d7:4b:b0:48:a5:cc:c8:1d:d8:ce:c2:ed:
51:c6:06:52:7c:f3:68:a5:65:b6:91:66:71:9d:55:17:ef:21:
eb:65:58:cb:77:8e:38:b8:43:9b:5f:26:56:cc:6c:9e:7f:35:
53:ef:95:5b:70:2a:9b:dd:20:39:30:de:8d:fd:b5:f3:bd:88:
47:1b:4b:2c:cd:86:d9:66:e0:8c:86:ed:c2:87:6b:70:19:38:
3a:86:4b:57:fc:3c:17:ee:09:c9:84:a9:c9:27:59:95:fc:98:
bf:29:38:4d:59:30:f1:7b:5d:00:b3:f5:11:83:14:b9:31:5e:
c1:7a:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:38 2025 by rpki-client