Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242E3200996D11F09DCAF48FDAE4EC9C.roa
File: 242E3200996D11F09DCAF48FDAE4EC9C.roa (raw, json)
Hash identifier: goootJltrouAMzHQN2LNJUScm1vnPvT5K9leily08CI=
Subject key identifier: 9E:83:2B:DD:65:23:B2:5B:E7:F7:13:DB:A4:AB:D1:7F:BA:5B:F2:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242E3200996D11F09DCAF48FDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 17:37:29 +0000
ROA not before: Wed 24 Sep 2025 17:37:24 +0000
ROA not after: Thu 30 Oct 2025 17:37:24 +0000
asID: 399195
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97533 (0x17cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 17:37:24 2025 GMT
Not After : Oct 30 17:37:24 2025 GMT
Subject: CN=68d42c59-7c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:77:60:eb:f3:08:28:95:a8:1f:a2:3d:b9:
7d:c7:3c:9e:11:43:56:ab:2f:5a:51:20:46:06:c9:
d4:90:04:fb:69:5c:a1:17:c1:67:d4:d8:58:b4:85:
ac:67:65:39:33:dd:10:60:71:84:bd:76:85:7e:5a:
97:33:bb:2a:82:c8:1d:c9:60:0e:d8:8b:89:19:9b:
f0:cc:72:4b:e4:5b:a7:4d:43:9e:fd:c5:3a:5b:d3:
ed:97:92:2a:ed:fc:94:88:e1:c7:30:b0:42:ca:4c:
54:07:eb:92:f3:09:ba:ba:56:01:78:eb:76:9e:63:
3d:08:45:1d:1c:3e:d8:ad:a6:28:e0:c5:13:7d:0c:
23:a4:e3:bd:1b:98:3a:46:e9:89:8e:06:5f:2b:91:
aa:3a:a8:a8:1b:7a:ea:6f:c0:b0:27:a5:ea:fc:7e:
01:9f:1f:01:3c:63:86:b1:f9:eb:15:a9:22:bd:80:
c2:57:3e:6b:41:5f:91:88:7a:c3:55:1a:3a:ac:d4:
df:01:d8:26:71:89:40:9c:c6:88:cb:e5:61:86:01:
1d:09:7b:24:71:b3:d7:9a:ea:db:d4:9a:b2:c4:7e:
f0:9d:38:af:0e:aa:76:19:99:b4:31:d6:1f:a6:4d:
1c:2a:31:41:8e:3b:72:29:20:2a:ce:8a:f1:38:5a:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:2B:DD:65:23:B2:5B:E7:F7:13:DB:A4:AB:D1:7F:BA:5B:F2:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242E3200996D11F09DCAF48FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:0b:25:06:ca:c5:3b:9d:40:4b:4d:37:b9:18:e8:30:34:6c:
57:f7:84:e8:ee:f0:e0:c6:94:82:87:af:5b:10:28:e6:b0:ba:
45:65:a2:f7:44:fc:fb:09:d5:05:87:ab:eb:a8:8d:0e:da:c0:
e1:75:21:d7:8b:3b:6a:74:60:10:67:ed:f6:5a:86:ca:52:e5:
dd:1c:30:7d:2c:f1:66:6d:50:80:7c:d8:6e:18:14:84:58:26:
0a:96:86:1f:ec:b4:74:c2:de:48:04:96:dc:cf:92:02:fb:77:
c0:ba:41:79:bb:e1:92:95:b7:a7:0d:53:78:04:80:06:0b:72:
5f:89:a1:af:7f:36:b5:b8:e8:70:90:a8:f6:28:ec:ba:4e:69:
1a:3e:dc:cb:fc:b5:4a:43:a1:52:73:78:4f:7b:34:af:a0:7a:
78:be:50:42:32:70:66:6a:35:de:0b:de:d7:55:05:cf:05:43:
6f:ae:ab:00:b8:5c:b9:cd:37:0f:b2:4a:b7:85:fc:59:73:bc:
7c:cc:6e:fa:bf:ef:79:c1:90:df:1f:5a:26:cd:bb:99:22:f0:
6b:2c:db:17:9e:4e:90:47:5a:93:3a:be:6b:31:f3:6a:6f:50:
a5:c7:89:54:a6:40:53:92:0c:1c:76:2f:cb:26:71:0f:53:10:
32:e4:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:01 2025 by rpki-client