Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA7DB98952811F09018D4F5DAE4EC9C.roa
File: 0CA7DB98952811F09018D4F5DAE4EC9C.roa (raw, json)
Hash identifier: 9qi6KiB7kNZUAbY815o/f6JERH0QctOsyTfYsDzVnw4=
Subject key identifier: C5:03:E9:7E:02:8D:ED:90:8D:2E:F6:23:8A:F1:01:E0:7C:EE:17:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA7DB98952811F09018D4F5DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 07:12:49 +0000
ROA not before: Fri 19 Sep 2025 07:12:45 +0000
ROA not after: Sat 25 Oct 2025 07:12:45 +0000
asID: 395793
IP address blocks: 45.194.24.0/24 maxlen: 24
45.201.16.0/21 maxlen: 24
45.201.16.0/24 maxlen: 24
45.201.17.0/24 maxlen: 24
45.201.18.0/24 maxlen: 24
45.201.19.0/24 maxlen: 24
45.201.24.0/23 maxlen: 24
45.201.24.0/24 maxlen: 24
45.201.25.0/24 maxlen: 24
45.201.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97337 (0x17c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 07:12:45 2025 GMT
Not After : Oct 25 07:12:45 2025 GMT
Subject: CN=68cd0271-b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:08:64:b7:e2:d6:e2:2a:67:df:41:3d:a9:
dc:b4:49:77:f5:77:c8:98:47:a1:31:da:6b:a9:47:
9c:28:5c:23:8d:c1:bc:e0:cf:5e:b0:3a:1e:b1:9f:
c7:ad:b8:10:e4:9a:f0:a0:ca:36:fa:b0:a1:0c:4e:
2b:b5:5a:53:6d:b1:f3:b1:03:f1:e6:13:6a:8d:7d:
9d:32:eb:0b:9c:7e:26:02:ca:b1:16:32:47:71:b2:
cf:e7:e6:17:bd:57:e0:7f:b8:ea:6d:f6:98:29:59:
d3:91:c0:8d:e2:7f:93:52:38:03:fb:f7:9f:ef:15:
4a:de:73:56:b6:a1:b5:ad:1c:96:0e:77:16:2d:16:
9a:ef:73:4a:50:6d:94:00:36:0d:7c:51:28:cf:4c:
a9:d8:04:14:22:cd:19:bf:75:20:20:20:81:6b:95:
87:16:e4:fc:8e:25:58:98:0a:10:14:1f:eb:59:85:
e8:40:5f:06:b4:5b:d5:05:9d:ec:be:ee:db:64:50:
c2:3f:30:08:8a:df:f5:bf:7b:3e:08:7a:02:89:cd:
21:33:cb:bf:5b:37:fd:20:16:21:8a:54:d9:24:f1:
86:30:6d:c0:59:89:23:af:ae:d7:3a:33:bf:3c:be:
20:18:3b:55:0c:5a:56:d9:f5:82:aa:d6:bb:fe:63:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:E9:7E:02:8D:ED:90:8D:2E:F6:23:8A:F1:01:E0:7C:EE:17:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA7DB98952811F09018D4F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.24.0/24
45.201.16.0-45.201.26.255
Signature Algorithm: sha256WithRSAEncryption
72:b1:a8:0c:f1:9e:a2:e5:da:39:c9:a7:cd:2f:fa:8e:38:6a:
a4:88:30:3d:08:70:4f:2e:ec:24:f4:2a:f6:4b:7c:96:b1:1e:
b4:00:3e:ca:2d:89:e6:f7:94:6a:13:a5:24:26:39:a1:56:28:
bd:f9:9e:93:ad:e9:cf:88:84:c6:d4:91:34:01:b2:8a:94:d4:
74:a7:a3:df:a9:e6:07:42:bb:df:30:59:c4:5a:5b:4b:de:3d:
23:8c:b8:95:9d:1d:2e:06:e9:d7:f0:43:8d:4f:53:b6:d7:81:
d7:04:30:2e:c3:3d:1e:13:07:cd:04:29:3d:26:5c:e0:7b:4d:
e9:3e:23:8d:90:ae:5e:ff:91:a6:d4:91:55:0b:8e:c6:2b:8d:
34:82:01:29:69:be:c6:57:e2:48:92:0d:2b:c1:7a:3c:c9:57:
f0:7f:c5:29:d9:c6:6b:3c:56:5c:ae:0c:c4:d0:d3:28:d0:7e:
b3:27:ef:63:df:a8:bb:5c:a8:97:fd:9b:0b:09:33:5c:0b:e9:
bd:73:23:e1:df:43:a9:1c:a3:e9:28:d3:34:9c:86:ac:b8:f8:
da:48:8f:d3:48:dc:44:c4:dd:3f:94:6d:7a:f9:7e:5a:7e:a7:
b4:66:fd:10:c7:d1:28:e9:7b:49:e2:03:e9:ae:f7:7c:56:e2:
14:ef:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:57 2025 by rpki-client