Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E8DB649D5C11F09E1C578CDAE4EC9C.roa
File: 13E8DB649D5C11F09E1C578CDAE4EC9C.roa (raw, json)
Hash identifier: VPsnvNaQFN9sKOGpXMn0H8avjfWN3/9xL8iyJqxjcxA=
Subject key identifier: DC:A2:14:9C:2E:FF:CD:75:3D:BE:90:83:38:16:70:89:10:93:92:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E8DB649D5C11F09E1C578CDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 17:45:25 +0000
ROA not before: Mon 29 Sep 2025 17:45:20 +0000
ROA not after: Fri 31 Oct 2025 17:45:20 +0000
asID: 202656
IP address blocks: 45.195.208.0/24 maxlen: 24
45.195.209.0/24 maxlen: 24
45.199.135.0/24 maxlen: 24
45.199.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97749 (0x17dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 17:45:20 2025 GMT
Not After : Oct 31 17:45:20 2025 GMT
Subject: CN=68dac5b5-e5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:cd:4c:d9:8a:21:61:81:91:0e:27:17:64:
3c:07:05:85:09:fe:2d:24:f3:22:a6:03:b7:20:7c:
de:fa:10:18:e4:14:38:ee:2b:99:ad:31:06:72:f7:
43:90:32:c1:ba:78:cf:dc:49:f7:c4:13:5e:ad:58:
9b:56:2e:23:d1:f7:b6:f8:08:17:c5:0a:7e:06:7b:
1e:b2:d8:58:f0:25:7d:30:43:bc:1b:c2:01:9b:90:
96:98:86:c2:8a:ad:ca:f8:1c:83:5b:6b:d9:2c:a9:
db:3e:96:09:e5:52:97:b0:a4:aa:04:6a:ff:36:02:
42:2c:5e:64:f9:ac:1b:91:15:e5:ff:77:1b:a6:2d:
71:a1:e5:c2:b5:38:db:90:86:c6:26:f8:0c:de:ff:
25:04:63:4b:a2:b6:21:90:d6:14:80:27:8a:13:6d:
7e:b6:cd:45:ad:d5:5e:b0:23:54:d5:f4:91:1c:60:
e0:bc:9f:c7:51:b6:dd:06:65:52:75:e8:b8:e2:77:
f7:a3:57:3c:09:96:99:d0:95:25:c1:a0:60:33:43:
f5:83:3e:56:78:67:3e:3c:a4:08:bb:31:8f:d7:15:
0f:cb:9a:1b:43:c5:22:1c:43:5c:62:8b:53:a1:2b:
ad:9c:76:a7:ea:46:d0:56:97:2d:6f:aa:2f:d8:91:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:14:9C:2E:FF:CD:75:3D:BE:90:83:38:16:70:89:10:93:92:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E8DB649D5C11F09E1C578CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.208.0/23
45.199.135.0-45.199.136.255
Signature Algorithm: sha256WithRSAEncryption
37:7b:bf:25:d8:82:40:47:ca:26:66:31:cd:17:58:e6:7c:f6:
b2:2d:44:81:b1:1d:41:92:f2:7e:e1:37:b4:0f:eb:c8:ea:bd:
ab:58:37:1d:41:43:13:2c:58:9b:6e:06:07:60:ff:52:7c:ff:
35:c3:af:d6:f3:3f:2f:3e:a9:2a:4c:84:14:a5:17:3b:81:4c:
41:63:35:f9:ae:4d:ef:ab:46:2b:38:35:e8:d3:ce:d6:29:13:
95:d4:38:3c:6f:c4:a5:4e:49:33:b8:cf:1a:e8:56:66:46:1a:
5b:86:ff:fe:6d:9b:de:5f:2c:da:dc:dd:b3:ad:3e:5e:dc:a7:
b9:ce:db:cc:70:8a:9e:ed:1c:cf:b9:e1:ec:f4:f7:0f:2d:48:
b2:c2:40:dc:ff:76:8b:10:e5:8e:5b:22:37:df:0a:1e:2b:d9:
57:03:3b:42:24:95:ac:e9:07:4b:25:9d:d0:9a:67:9b:dd:1e:
4e:59:bb:31:63:3e:ee:81:b4:bc:fd:57:40:a5:75:48:13:3a:
0b:fa:38:33:93:8e:6c:cd:ff:81:f1:06:49:cd:db:47:48:88:
b8:33:8b:63:ad:68:c6:df:df:a3:0d:79:eb:0b:bb:e3:84:ef:
12:e0:85:f3:e2:e3:4d:cf:29:93:ca:77:05:c8:fc:6d:b0:b1:
a4:76:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:48 2025 by rpki-client