Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155487E8995E11F08FDFE1ADDAE4EC9C.roa
File: 155487E8995E11F08FDFE1ADDAE4EC9C.roa (raw, json)
Hash identifier: rdYbYCJY8BVP/oNSvJ70SyPXwOHcJXyz4cvvQAKNRNU=
Subject key identifier: BA:A2:BF:B5:B6:EB:2C:6F:8E:0B:9C:64:21:D6:D0:00:74:34:3B:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155487E8995E11F08FDFE1ADDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 15:49:42 +0000
ROA not before: Wed 24 Sep 2025 15:49:37 +0000
ROA not after: Wed 29 Oct 2025 15:49:37 +0000
asID: 214143
IP address blocks: 45.195.3.0/24 maxlen: 24
45.197.135.0/24 maxlen: 24
45.198.69.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.81.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.198.89.0/24 maxlen: 24
45.198.90.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.104.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.112.0/24 maxlen: 24
45.198.138.0/24 maxlen: 24
45.198.163.0/24 maxlen: 24
45.198.168.0/24 maxlen: 24
45.198.176.0/24 maxlen: 24
45.198.181.0/24 maxlen: 24
45.206.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97513 (0x17ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 15:49:37 2025 GMT
Not After : Oct 29 15:49:37 2025 GMT
Subject: CN=68d41315-8eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:1c:38:e9:f2:45:fb:4e:46:cb:fc:66:15:
53:29:02:e5:13:80:16:41:e4:3f:ed:a5:10:5d:7d:
7b:af:30:3d:a9:6a:f6:17:41:42:e6:f1:0a:1c:7e:
0e:7b:a4:61:98:04:13:60:77:49:ef:b4:c6:dd:3e:
59:93:f9:9b:ca:75:01:ae:0c:b7:be:a4:44:25:cc:
75:91:9d:4c:d2:88:32:49:25:18:84:f4:1d:d4:e2:
c9:92:50:89:bc:ca:a6:b9:6e:ef:19:85:0f:08:63:
b2:94:07:0d:f3:ec:fd:99:03:fc:d1:e1:9d:93:a0:
1f:0e:84:9e:37:a3:63:2a:0f:47:82:4f:c4:84:bd:
bb:19:1c:f3:34:74:3d:85:c6:70:33:aa:44:4d:4c:
4e:c3:b8:a6:47:35:89:9e:c7:82:15:4d:fb:0a:b4:
58:8e:16:cd:00:8b:51:15:2f:a1:c8:57:a1:18:1e:
48:d6:90:d3:51:8b:05:92:cd:89:96:91:09:b8:6a:
03:ca:eb:10:5f:39:f0:fb:fc:db:50:02:5c:e4:d1:
e4:ff:60:c2:28:62:d0:d5:1e:5c:f3:ca:41:86:46:
a7:78:92:cd:b9:11:10:ca:f0:27:4e:01:d8:71:f1:
e5:56:ba:1d:09:16:de:dc:a9:6e:eb:60:35:14:03:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:BF:B5:B6:EB:2C:6F:8E:0B:9C:64:21:D6:D0:00:74:34:3B:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/155487E8995E11F08FDFE1ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
45.197.135.0/24
45.198.69.0/24
45.198.75.0/24
45.198.81.0/24
45.198.84.0/24
45.198.86.0/24
45.198.89.0-45.198.90.255
45.198.97.0/24
45.198.104.0/24
45.198.109.0/24
45.198.112.0/24
45.198.138.0/24
45.198.163.0/24
45.198.168.0/24
45.198.176.0/24
45.198.181.0/24
45.206.44.0/23
Signature Algorithm: sha256WithRSAEncryption
45:3b:3d:d7:6d:16:20:52:21:0c:86:f6:78:46:57:b6:20:0b:
ed:db:37:38:1f:57:4a:dc:de:5c:e6:ce:b3:d5:1f:30:f1:a4:
4a:7e:dc:51:32:72:b1:f2:5d:d2:ea:3d:35:1e:53:0e:57:5f:
67:a7:c9:e2:57:fe:2c:41:b7:67:af:af:06:94:d0:d2:a7:4b:
f8:a5:ab:9a:75:7a:7c:f3:5e:0c:da:f4:c5:93:91:cf:dd:99:
d0:4c:95:b9:18:eb:3b:eb:87:85:4a:1e:84:d8:1d:f1:f3:eb:
5a:50:cc:51:8c:a4:06:3d:a5:02:5a:32:8c:63:aa:f8:a2:86:
31:64:c2:69:29:88:69:db:6d:4e:b8:a7:18:48:1b:d4:29:4b:
1b:5b:4b:4a:dd:e4:e2:42:91:ae:5b:64:54:04:3f:d5:79:cd:
da:ce:5c:e2:01:0c:65:c1:6c:93:07:a9:2a:ed:7d:8c:1f:ff:
ee:85:2b:14:f0:73:fc:66:11:f9:fa:9e:c0:ab:67:6e:7c:bc:
cb:b9:95:b0:d8:fa:9b:4f:39:2b:5f:c8:fd:15:a9:fd:8c:b3:
1b:ad:9c:4f:b5:3b:5f:5f:3d:72:22:b6:ce:cc:a0:7e:b1:56:
00:c3:19:08:ba:a3:b1:a7:64:f1:23:84:6c:0b:d6:2e:1d:bc:
86:85:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:00 2025 by rpki-client