Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04155968EE611F0ABB9ED7DDAE4EC9C.roa
File: C04155968EE611F0ABB9ED7DDAE4EC9C.roa (raw, json)
Hash identifier: PzazCDQOzGnkXHdnt5N3IlllpEO91A62gvkzPFAqNVE=
Subject key identifier: 1B:AF:0E:EC:94:DD:84:17:30:A7:6E:4C:49:65:50:A1:E2:D2:D4:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04155968EE611F0ABB9ED7DDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 08:10:17 +0000
ROA not before: Thu 11 Sep 2025 08:10:12 +0000
ROA not after: Fri 19 Sep 2025 08:10:12 +0000
asID: 22773
IP address blocks: 45.196.32.0/22 maxlen: 24
45.196.40.0/22 maxlen: 24
45.196.48.0/22 maxlen: 24
45.196.52.0/22 maxlen: 24
45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 08:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96920 (0x17a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 08:10:12 2025 GMT
Not After : Sep 19 08:10:12 2025 GMT
Subject: CN=68c283e9-f751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:63:56:92:87:4a:3f:57:c6:53:56:8f:2c:
81:26:51:94:73:e2:1f:01:fd:18:05:27:0d:75:18:
ee:b3:84:c5:ab:f9:33:93:d6:a9:e7:a1:d5:d7:0f:
f9:09:3a:74:16:b0:c1:e0:71:0e:ee:3b:3e:03:f3:
86:f9:fb:a3:e1:89:57:14:e2:c3:f9:63:03:fe:20:
19:c3:11:20:a9:3e:48:39:46:b4:f4:1e:eb:c7:99:
98:5e:e4:b5:db:ba:76:db:e1:05:fe:77:a9:55:01:
72:9a:90:cc:48:83:67:be:27:78:f1:c8:b3:4b:9f:
3c:51:e9:48:24:a4:c6:cf:47:c9:95:84:06:db:7f:
ba:ed:ac:fc:fb:e8:19:c5:62:36:65:77:8e:6e:53:
10:74:97:ab:89:56:a7:d9:57:20:3e:8c:c3:ce:48:
d7:98:86:de:31:61:b7:3c:10:67:d6:86:81:43:e8:
2c:6b:36:fd:f1:6f:fc:c6:0a:2a:5b:e1:e3:b4:62:
7c:9a:20:9d:45:90:fe:84:e8:c2:66:e9:d0:d4:05:
58:64:7b:76:3d:7c:0d:0f:6a:e4:7f:df:01:ea:bb:
9a:ad:72:0b:59:50:d6:ff:48:76:5d:c3:b6:02:ef:
a1:5a:f4:e0:c7:65:53:b4:d1:ed:ec:ed:c4:c2:4d:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:0E:EC:94:DD:84:17:30:A7:6E:4C:49:65:50:A1:E2:D2:D4:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04155968EE611F0ABB9ED7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
45.196.40.0/22
45.196.48.0/21
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:e9:61:8a:37:7f:6f:34:bd:ee:34:76:39:62:7a:03:d5:7f:
8d:b1:fb:51:05:56:7d:21:88:a7:da:c7:e1:f2:44:af:05:6c:
fb:72:b0:21:a6:21:71:7a:24:14:3a:d6:7c:76:af:e7:13:7d:
76:9f:1f:d2:db:24:52:b2:da:6e:f1:a2:b4:a3:f8:ae:74:ce:
44:cb:f6:57:e4:c7:a3:51:7a:54:58:b9:a6:42:f6:cc:de:bd:
e6:a7:48:46:17:12:a9:1d:7c:19:05:fe:ac:57:9a:a7:91:17:
c1:dc:ad:7f:3c:7a:9f:ac:80:1f:f3:7e:57:71:96:68:43:6f:
cc:e2:4e:c8:4d:11:e2:e2:14:6e:a4:3e:b7:2d:f3:e2:75:82:
9c:e4:76:44:a8:f0:50:9a:49:95:6b:9a:8c:e1:dd:19:f2:15:
c9:7f:9f:b1:8e:7b:89:c0:a6:50:ca:cb:54:25:68:2e:fa:d4:
97:08:f4:36:9f:b2:72:95:7e:1f:5d:bc:85:f7:c8:65:22:02:
00:7f:5d:b3:94:74:b8:5f:92:f9:3f:b6:76:53:b2:de:d8:92:
14:08:88:bb:f7:50:2a:7d:77:92:6b:42:8c:fd:e3:bb:7c:9b:
0f:0e:a2:fb:94:04:1f:2c:38:1e:39:ff:a8:57:fd:11:51:6f:
58:7a:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:53:33 2025 by rpki-client