Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91358FF0A32311F09ABB4E88DAE4EC9C.roa
File: 91358FF0A32311F09ABB4E88DAE4EC9C.roa (raw, json)
Hash identifier: RrQku3Bql/cndRBS81mc5poDk1dABIXNV2PRTo5TzD8=
Subject key identifier: AB:E0:C1:29:AD:5B:B6:D5:48:D0:9E:1E:34:0C:3E:10:D9:7E:3A:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91358FF0A32311F09ABB4E88DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 02:16:01 +0000
ROA not before: Tue 07 Oct 2025 02:15:56 +0000
ROA not after: Tue 28 Oct 2025 02:15:56 +0000
asID: 214238
IP address blocks: 45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98059 (0x17f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 02:15:56 2025 GMT
Not After : Oct 28 02:15:56 2025 GMT
Subject: CN=68e477e1-9fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:37:4a:05:21:28:db:4d:af:7e:36:ea:7f:
a3:80:1f:f9:2c:85:a5:a1:5c:aa:c2:1f:a6:f1:3a:
11:42:5f:74:f6:e0:55:a6:c4:ab:c4:e9:b9:28:89:
24:93:31:da:43:98:5b:a8:a9:e0:fa:aa:00:a6:cc:
a6:c1:d2:4e:72:7f:05:e8:12:c0:2d:01:11:88:74:
c8:0a:8e:5e:b3:2b:d2:00:39:fe:af:31:5f:0c:89:
ba:d1:61:41:ec:9a:63:10:4b:7c:59:c0:46:d0:cf:
72:83:e0:b4:bf:e9:4c:4b:24:6a:7f:05:38:c9:0a:
1b:c5:53:ba:cb:da:63:06:bf:a0:c8:df:aa:45:64:
75:cc:95:ab:fb:10:35:ac:f7:a3:1e:36:03:8a:b0:
48:51:62:56:12:db:9d:b8:28:0d:e4:ef:5c:1a:e3:
fa:5a:20:90:b2:08:22:cc:38:8a:07:4c:e3:1c:7d:
99:a7:d7:f3:79:d7:dc:71:d1:3c:3c:93:72:3e:63:
37:66:2d:ee:52:99:f7:84:03:6d:66:4c:58:86:b4:
df:81:20:a0:93:67:78:56:fd:4d:41:e2:e8:ca:bc:
5d:c3:b8:0c:56:bd:cc:bd:06:3f:ae:b3:be:3f:78:
ad:fe:23:7f:73:3e:08:42:ed:c4:fc:0c:ea:21:28:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:C1:29:AD:5B:B6:D5:48:D0:9E:1E:34:0C:3E:10:D9:7E:3A:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91358FF0A32311F09ABB4E88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.209.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
1f:47:c9:4a:6e:7d:8d:eb:6b:6a:7e:ba:64:72:a8:c7:ba:c2:
e5:48:fd:8f:a6:98:31:ad:31:97:7b:15:9e:85:85:32:b0:23:
58:5f:c6:db:8c:15:c8:35:62:76:54:06:18:66:a5:0d:6f:e6:
56:b1:24:79:78:b7:98:cc:1a:82:4b:a4:1d:a1:4a:b2:58:b4:
87:8f:1a:c2:3f:68:cb:61:42:4d:4e:10:cb:54:5d:3c:b4:3a:
9b:b6:24:e8:57:e7:73:3d:d7:0a:1f:2c:37:c7:96:24:9b:c6:
3b:54:b9:e1:36:c6:6f:01:e0:d4:bc:e6:43:99:42:fc:07:2a:
e0:38:c8:fd:c8:c7:56:23:aa:90:69:5d:61:dd:f9:52:d5:83:
01:4f:5b:87:d9:1b:a0:5c:d4:ef:4e:11:7f:71:8c:08:5b:93:
2d:e4:87:05:2e:b3:48:82:d8:e9:ec:a8:96:f7:f9:fd:c5:71:
84:66:b3:93:9a:22:33:43:fc:0d:85:c4:3f:c4:4c:59:7a:ee:
8f:47:df:c7:3b:ea:b5:51:da:c6:fc:70:05:38:f9:b3:ed:22:
7b:b1:e7:a7:cd:1a:61:c4:95:1b:33:70:ad:9b:32:b0:c1:6c:
21:b4:d6:b7:07:97:bf:29:db:9e:24:e2:02:08:d4:7f:7c:71:
47:08:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:44 2025 by rpki-client