Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAC2B928B32911F09D7EE7D5DAE4EC9C.roa
File: AAC2B928B32911F09D7EE7D5DAE4EC9C.roa (raw, json)
Hash identifier: JIBfZFrXFGRTVERpayjTPaSlZ+iGI/C4WCsc6Wie+X8=
Subject key identifier: F9:71:F9:0D:48:1A:7F:BA:75:58:A3:99:CF:98:02:B7:49:E1:C3:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAC2B928B32911F09D7EE7D5DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 11:39:59 +0000
ROA not before: Mon 27 Oct 2025 11:39:54 +0000
ROA not after: Fri 28 Nov 2025 11:39:54 +0000
asID: 62240
IP address blocks: 45.192.42.0/24 maxlen: 24
45.192.43.0/24 maxlen: 24
45.192.44.0/24 maxlen: 24
45.192.45.0/24 maxlen: 24
45.192.46.0/24 maxlen: 24
45.192.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99048 (0x182e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 11:39:54 2025 GMT
Not After : Nov 28 11:39:54 2025 GMT
Subject: CN=68ff5a0f-74c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:85:4f:e3:b3:fc:cd:94:b3:b9:45:05:ac:
78:e2:35:e8:9f:36:76:77:44:51:33:f8:53:95:8b:
b5:b3:79:74:49:4f:56:70:98:56:1b:06:02:7b:27:
0e:44:f0:99:b3:29:70:cd:83:4c:c2:1a:dc:87:10:
d0:83:32:2a:20:29:2f:0c:fd:a0:27:fe:9b:30:48:
8c:33:bc:de:5e:9e:db:0e:0f:ec:61:ce:1b:e9:e0:
e9:bc:4f:c7:7a:32:17:56:bd:83:5c:87:85:e7:30:
be:96:35:b4:1f:f0:6d:6b:01:07:94:33:60:75:63:
28:c1:5b:4d:5d:f3:45:3d:9c:9b:89:7b:25:11:b3:
69:3c:e6:55:b8:48:79:d2:93:3f:d6:17:a9:9c:e6:
76:69:85:1d:ab:41:b0:75:e4:05:c6:6e:0f:81:73:
ac:bf:4f:f8:19:6a:64:81:03:20:2b:7e:7c:29:56:
b4:2f:7d:91:92:50:09:33:0f:bb:54:42:96:da:6a:
96:4a:46:cd:ac:7f:b9:b6:a6:c2:05:61:a5:9d:e5:
15:04:e3:43:7a:04:2a:9b:f5:79:eb:55:12:04:3b:
52:03:28:18:bd:b0:4a:28:9a:b7:eb:42:68:df:2c:
00:12:1b:8d:a0:f9:84:1f:2c:c3:a3:1a:54:d1:06:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:F9:0D:48:1A:7F:BA:75:58:A3:99:CF:98:02:B7:49:E1:C3:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAC2B928B32911F09D7EE7D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.42.0-45.192.47.255
Signature Algorithm: sha256WithRSAEncryption
54:7c:6f:ff:80:55:0c:ef:d0:56:8f:41:c7:ba:d5:06:9c:3a:
46:df:a3:cf:0e:e1:f5:df:59:74:37:f3:35:17:44:4b:12:5e:
0a:a9:26:19:84:86:ed:06:b7:39:c6:21:3d:73:1f:f2:4f:2c:
e4:62:28:a6:c0:37:ca:b3:35:33:15:ef:f7:e4:53:f0:6e:e9:
91:a9:5d:40:fa:5c:78:d0:50:cf:6e:cd:28:1a:74:e3:f6:b8:
18:33:eb:d2:5d:05:da:f8:ef:ca:7e:3d:e6:82:10:37:04:f8:
76:99:2b:00:12:c2:9a:b8:11:44:fc:23:f2:58:56:f3:9f:a3:
3f:99:87:2b:ed:86:5d:fd:5e:1a:2a:b3:e0:4e:c1:22:8c:e3:
a2:a1:1b:5a:47:0c:27:45:1b:57:05:3b:37:9b:7f:b8:f7:88:
7e:15:eb:78:1d:5f:ca:c4:06:78:27:16:80:e5:30:7b:b6:a4:
b6:3c:89:0f:41:77:c9:2f:28:29:9e:90:34:36:39:bd:35:18:
86:a8:ba:f0:6f:e8:9d:26:ed:4a:8f:bb:1b:84:74:79:95:ff:
9c:91:a4:5a:46:22:18:d2:17:55:3e:2f:8e:e7:54:96:37:e8:
95:3e:5b:93:d7:76:e6:b0:d6:fc:9c:1f:8f:8f:97:e2:77:f7:
06:c5:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:49 2025 by rpki-client