Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92B9A02A9D4511F09892167BDAE4EC9C.roa
File: 92B9A02A9D4511F09892167BDAE4EC9C.roa (raw, json)
Hash identifier: BFG1cVv8iG1MEa+Gckk33BO9Zu3/KUWZT5aeDooN2Qg=
Subject key identifier: 76:F6:4A:05:24:40:4D:DE:15:93:E8:2A:33:7E:0C:AD:FA:BE:FE:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92B9A02A9D4511F09892167BDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 15:04:19 +0000
ROA not before: Mon 29 Sep 2025 15:04:14 +0000
ROA not after: Fri 31 Oct 2025 15:04:14 +0000
asID: 44559
IP address blocks: 45.192.252.0/24 maxlen: 24
45.195.103.0/24 maxlen: 24
45.195.252.0/24 maxlen: 24
45.195.253.0/24 maxlen: 24
45.196.121.0/24 maxlen: 24
45.196.124.0/24 maxlen: 24
45.196.125.0/24 maxlen: 24
45.196.126.0/24 maxlen: 24
45.196.127.0/24 maxlen: 24
45.196.139.0/24 maxlen: 24
45.196.140.0/24 maxlen: 24
45.196.141.0/24 maxlen: 24
45.196.142.0/24 maxlen: 24
45.196.143.0/24 maxlen: 24
45.196.152.0/24 maxlen: 24
45.196.198.0/24 maxlen: 24
45.196.199.0/24 maxlen: 24
45.202.119.0/24 maxlen: 24
45.202.125.0/24 maxlen: 24
45.202.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97733 (0x17dc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 15:04:14 2025 GMT
Not After : Oct 31 15:04:14 2025 GMT
Subject: CN=68da9ff3-1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:4a:b8:81:ba:60:3a:b0:35:e4:c9:f0:61:
75:71:69:97:94:22:d9:50:25:b0:b8:27:85:e1:a3:
a9:3e:20:75:a6:c4:9e:b2:75:cc:75:12:55:8c:4a:
70:51:9c:fe:9e:a1:21:ff:51:fe:20:19:cf:4f:80:
0a:98:44:68:5e:86:78:0c:4b:4f:2f:7b:6e:de:e1:
70:6c:b0:84:48:e6:6b:ff:eb:9d:98:ab:ca:88:9f:
b3:45:4f:f9:8d:96:89:d9:fc:fc:47:e0:6a:40:d8:
4b:55:83:17:15:90:4a:e2:bf:dd:ce:bd:2d:f2:45:
99:df:0d:1e:24:ed:2e:8a:e0:29:f5:3d:36:2d:7e:
78:00:79:b1:50:b2:1d:66:ad:81:ba:1f:6a:2f:54:
15:41:6f:38:ac:d6:a6:20:9c:3e:34:12:c5:aa:f1:
69:a1:41:00:98:c9:8f:2a:64:ff:8f:5a:ae:f5:06:
15:87:e0:76:60:cb:7a:bb:72:c0:27:bd:75:21:4d:
e5:c1:3b:66:59:db:1d:55:83:7b:e0:1d:82:93:5c:
92:23:f3:1a:83:58:7a:de:b7:f7:57:23:7a:1d:d9:
70:e3:32:e0:c3:64:c7:92:46:6f:f2:c1:d2:d1:3f:
ad:ef:8b:5d:a7:d0:15:83:7f:86:d2:dd:da:ee:f1:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:4A:05:24:40:4D:DE:15:93:E8:2A:33:7E:0C:AD:FA:BE:FE:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92B9A02A9D4511F09892167BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.252.0/24
45.195.103.0/24
45.195.252.0/23
45.196.121.0/24
45.196.124.0/22
45.196.139.0-45.196.143.255
45.196.152.0/24
45.196.198.0/23
45.202.119.0/24
45.202.125.0/24
45.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e9:e5:34:ef:dc:fc:bf:9b:af:bd:52:b5:65:23:02:31:ad:
ae:56:09:c6:c7:f7:5d:ac:9c:0c:fb:bf:0a:45:15:6f:33:d9:
92:8c:75:eb:ce:d9:39:7c:05:60:a1:0a:a8:c4:c9:94:68:2b:
5e:ca:87:24:93:71:5e:db:cd:82:05:7a:02:80:3e:94:d9:31:
91:4d:e7:2e:31:f8:2d:a5:ab:42:5e:f2:25:9b:f8:ba:3f:a7:
18:98:86:14:7d:b0:5c:d6:59:8d:b1:f2:cb:9a:f4:57:37:dc:
59:46:d2:8a:a6:50:c8:b0:26:27:b1:08:c0:83:eb:30:bc:81:
a9:02:b4:39:65:d4:e3:b7:2d:6e:56:cf:8d:ec:2a:a1:95:62:
fc:99:c3:46:96:e3:dd:3d:7f:f6:c7:de:82:62:1f:4f:2d:9a:
c6:08:a5:c5:53:ae:b7:c8:fc:81:84:b4:80:73:4b:85:6f:69:
35:78:3d:5b:db:84:46:27:10:09:b8:9c:c7:e5:44:d8:ea:69:
49:e5:fd:2d:92:09:07:43:15:5a:08:3a:91:d1:38:9c:9f:97:
50:ed:8a:88:9e:a2:a9:98:0f:fc:ed:f2:0b:9c:e0:30:55:4d:
2a:b2:b5:28:97:be:13:a4:b6:ab:89:b4:f3:3c:fd:7c:72:51:
a0:09:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:59 2025 by rpki-client