Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A80DE90997A11F0A0E599DFDAE4EC9C.roa
File: 0A80DE90997A11F0A0E599DFDAE4EC9C.roa (raw, json)
Hash identifier: 3VBMY4yJ/IlCjPsgy6cWX8YRIUkwByNrQqyTEx5G4/w=
Subject key identifier: 5C:98:A3:1B:7E:21:8C:59:E8:4E:EC:0E:60:87:C3:A6:2D:61:FA:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A80DE90997A11F0A0E599DFDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 19:09:49 +0000
ROA not before: Wed 24 Sep 2025 19:09:43 +0000
ROA not after: Thu 30 Oct 2025 19:09:43 +0000
asID: 398443
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97545 (0x17d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 19:09:43 2025 GMT
Not After : Oct 30 19:09:43 2025 GMT
Subject: CN=68d441fd-bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:60:c9:ec:e4:d6:9a:6c:4c:c0:fd:c3:cb:
d5:96:46:7e:c1:c5:27:c2:6b:9a:04:e1:75:b2:d9:
af:1b:71:a3:64:8c:a3:e6:25:9c:72:a4:9e:5f:98:
3d:b3:38:3e:96:75:ee:dc:59:8f:98:f5:0c:31:68:
78:1c:85:c4:e8:1f:e0:d1:78:58:a0:b0:b0:53:10:
75:8e:11:86:66:bb:ed:2d:87:16:5c:60:29:56:09:
54:b9:bf:1e:34:aa:ce:4f:8c:f5:75:6f:53:46:5d:
4c:8f:ee:40:b7:62:66:07:dd:2a:e8:33:73:43:09:
7c:cc:1b:88:07:0a:72:03:13:a9:40:63:4e:08:6c:
84:b0:d5:4a:af:ba:75:4f:2b:2c:a5:3e:f0:73:7e:
ed:b9:22:f6:05:1a:53:ac:0f:f6:69:e5:e5:90:58:
21:b1:3a:d3:31:8c:ec:eb:a2:ea:29:9c:5f:0a:73:
44:fb:02:07:39:22:c2:76:3e:29:e6:20:6b:62:02:
5e:af:af:a9:69:24:37:f7:8d:4b:be:c3:13:97:4c:
da:9a:b0:b7:b6:27:63:75:e9:e3:32:8a:99:37:f2:
e6:3f:71:99:a0:3b:8e:8d:36:ea:19:ac:c4:6c:60:
5e:5a:c1:34:65:61:d2:63:12:e3:c6:58:d1:a2:e0:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:A3:1B:7E:21:8C:59:E8:4E:EC:0E:60:87:C3:A6:2D:61:FA:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A80DE90997A11F0A0E599DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
67:3c:32:4a:53:73:37:f5:db:c5:2b:d8:79:da:41:b9:8d:06:
ef:3a:0f:88:0d:a2:47:7a:ac:92:fe:7e:8d:11:12:3f:23:1d:
48:e4:5e:f7:cb:47:0f:da:a8:81:49:26:4d:ac:e7:ea:1e:bd:
f1:26:13:a2:b2:68:b9:7d:f5:f5:fa:21:cf:ed:e4:b8:1f:ab:
ed:8e:3e:c6:80:bf:6a:98:4f:06:bb:bf:c8:c1:e4:79:4e:e4:
a4:2d:b5:b1:67:e3:66:8a:df:14:25:2a:57:21:b0:7a:20:f1:
7c:7f:db:8e:e2:73:3a:e0:ea:14:f9:d0:77:24:b4:59:a6:b5:
56:2b:58:cb:da:b0:d4:7e:11:2e:7d:b8:d6:a5:d4:43:de:92:
2b:79:d4:e1:3a:a9:20:d6:60:ac:4c:a6:22:57:82:60:9c:86:
e1:0f:85:3e:5c:b5:8d:20:07:2d:49:ca:78:c2:07:16:f2:53:
9a:6e:f1:e3:af:ca:65:7c:63:0e:db:4b:9d:c3:ef:88:64:6f:
7e:7b:a6:24:7a:6f:36:4d:c3:20:c3:f7:a7:63:de:0d:ae:fa:
1c:8a:e6:9b:43:e4:8b:1e:fc:4e:53:dc:43:f5:c8:d6:63:3f:
b6:95:63:09:50:c7:19:e2:7b:6c:eb:2d:21:cc:d8:cd:ca:4d:
0f:6c:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:03 2025 by rpki-client