Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33BAECEAA8211F0BC816592DAE4EC9C.roa
File: C33BAECEAA8211F0BC816592DAE4EC9C.roa (raw, json)
Hash identifier: wsaxw349/YkoxMfych94ivz+Gt6xXyc2Slmqly8VAOU=
Subject key identifier: CE:8C:ED:74:C9:93:D8:25:98:9F:77:9C:83:E5:6E:20:07:87:A3:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01812A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33BAECEAA8211F0BC816592DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:25:05 +0000
ROA not before: Thu 16 Oct 2025 11:25:00 +0000
ROA not after: Sat 17 Jan 2026 11:25:00 +0000
asID: 136907
IP address blocks: 45.199.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98602 (0x1812a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 11:25:00 2025 GMT
Not After : Jan 17 11:25:00 2026 GMT
Subject: CN=68f0d611-6ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:5b:9a:9e:50:b3:bc:68:de:12:5c:b9:63:
dd:b2:2d:c9:55:e4:a9:53:6f:9a:af:c7:a9:a9:94:
f2:1f:83:41:b9:5d:12:e8:e6:94:32:9d:94:8f:d4:
7d:42:9e:df:27:c3:c7:bd:9a:da:68:a4:71:68:2f:
f8:6f:84:24:07:db:94:b0:1d:87:6a:2d:0d:fe:27:
25:62:5b:8f:aa:44:1e:3a:5f:bd:8b:87:25:77:49:
84:bd:9e:1d:bc:88:5e:2e:32:73:48:2e:0c:fe:60:
04:4c:18:5e:da:f8:70:fc:74:b2:e6:22:cd:b5:ae:
cc:96:d6:54:d2:56:4c:9f:6f:72:fa:ae:16:67:12:
4c:00:6f:15:44:31:b9:c3:fa:43:af:4a:d6:18:df:
ac:c1:19:da:0f:4f:e7:22:2e:b5:76:e7:17:be:01:
cc:3d:5a:96:c0:89:38:3b:5c:dc:63:b3:a5:45:71:
18:78:cb:14:8b:49:5a:9d:7f:71:0c:5f:09:6d:3e:
11:6b:df:f8:27:6e:04:13:50:fb:b8:8e:ea:de:40:
91:6c:43:b5:2b:aa:43:19:ad:50:ec:ee:20:bf:51:
01:6d:bd:e6:52:a1:2e:3b:8b:9e:4c:ef:30:2f:68:
c0:76:80:08:df:8c:4c:b5:c4:80:01:ee:00:77:da:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:ED:74:C9:93:D8:25:98:9F:77:9C:83:E5:6E:20:07:87:A3:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33BAECEAA8211F0BC816592DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.144.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f6:e3:db:d8:79:56:8a:a5:9d:ca:85:60:55:f1:25:0d:91:
2b:e9:2f:78:c1:3b:61:64:ad:88:5d:4f:df:62:b8:40:3e:46:
ff:ae:d9:a1:46:64:c2:1b:f9:d8:59:4f:11:bb:8c:99:d7:0f:
09:11:5c:1b:43:45:be:a6:46:5f:18:a6:f1:9f:4d:8f:7d:09:
3a:12:cb:c8:5c:23:43:7c:7e:5e:a9:63:0a:85:53:2f:3c:c5:
d9:78:f3:14:54:8f:1b:db:40:c2:c5:dd:2e:b8:5f:a6:7c:4f:
3a:68:48:c8:aa:d4:81:61:a3:76:51:91:ac:f3:ee:41:54:6f:
e5:e0:28:91:b6:4a:21:89:ec:32:12:46:17:39:b7:e2:51:1f:
ab:dc:87:f0:97:d7:34:11:1c:36:d0:98:9b:17:5d:66:a9:ec:
6c:e3:9f:03:f5:8b:1f:80:2b:92:4e:e5:53:c2:0e:99:dc:87:
11:da:c5:fd:91:1c:12:70:bd:5d:b0:5f:73:b9:fa:e7:5e:2f:
8d:63:af:1b:4c:62:1f:68:c4:a1:96:87:49:ba:ec:e5:d7:21:
19:85:fb:76:81:88:a5:30:96:9e:be:16:cb:49:3c:f5:8f:2c:
21:86:50:5b:86:4f:76:46:e6:0c:9b:ee:59:b1:dc:27:44:7d:
9c:8f:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:41 2025 by rpki-client