Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D7C8A2AA7511F0B1ED48C0DAE4EC9C.roa
File: D7D7C8A2AA7511F0B1ED48C0DAE4EC9C.roa (raw, json)
Hash identifier: Op2EiPNq98vQykRS9XrKwdOCYgFoiJnDbtWk6Vtdumw=
Subject key identifier: 85:92:5A:68:58:14:7D:E4:7F:90:6F:E6:9C:3A:CE:5F:5F:6F:A7:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018116
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D7C8A2AA7511F0B1ED48C0DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 09:52:36 +0000
ROA not before: Thu 16 Oct 2025 09:52:28 +0000
ROA not after: Wed 19 Nov 2025 09:52:28 +0000
asID: 11404
IP address blocks: 45.195.0.0/24 maxlen: 24
45.195.84.0/22 maxlen: 24
45.196.92.0/22 maxlen: 24
45.197.200.0/21 maxlen: 24
45.197.224.0/21 maxlen: 24
45.200.144.0/20 maxlen: 24
45.202.16.0/20 maxlen: 24
45.204.32.0/20 maxlen: 24
45.206.128.0/18 maxlen: 24
45.206.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98582 (0x18116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:52:28 2025 GMT
Not After : Nov 19 09:52:28 2025 GMT
Subject: CN=68f0c064-dc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:f3:d9:4b:20:5c:b2:c8:cc:6d:87:0d:99:
48:78:8c:e3:2a:78:f9:94:aa:c1:4b:19:e1:94:65:
93:60:8a:10:90:ed:c5:24:aa:54:ce:cc:94:14:8b:
b9:b1:d4:3f:64:26:89:6c:10:bf:f2:8d:91:58:9e:
91:bf:14:65:3b:2e:5f:bd:df:92:83:38:49:5c:3c:
8e:61:43:64:9b:1b:a0:f8:d9:51:f4:87:a1:2d:40:
61:41:9f:89:c4:d5:c3:94:da:02:5d:a1:68:37:56:
91:6b:2c:63:f0:9a:9d:7d:46:c8:6b:33:6c:a1:de:
39:65:ff:4b:28:74:d8:fb:aa:bb:c9:ce:9d:9e:25:
83:82:36:c9:d1:e7:3f:6b:6b:cb:69:b1:2c:6b:83:
12:ba:d7:c2:1a:07:a7:d3:ec:24:a3:cf:5e:a8:66:
6a:8b:e1:1b:26:4e:8c:12:f1:bc:03:04:d4:b3:2b:
bf:5b:91:85:52:25:f7:4f:55:1f:a6:de:8f:b3:4a:
b3:da:db:0d:69:37:a2:90:c8:c2:87:f1:ec:4e:dc:
be:77:1a:19:57:10:ae:59:ae:fa:48:77:81:01:6e:
9e:ea:3b:13:88:b0:c6:d5:ae:3a:4c:d0:47:88:b8:
0d:ce:30:44:50:c0:a6:3b:9d:56:71:b7:3e:53:25:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:92:5A:68:58:14:7D:E4:7F:90:6F:E6:9C:3A:CE:5F:5F:6F:A7:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D7C8A2AA7511F0B1ED48C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.0.0/24
45.195.84.0/22
45.196.92.0/22
45.197.200.0/21
45.197.224.0/21
45.200.144.0/20
45.202.16.0/20
45.204.32.0/20
45.206.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1e:7a:75:ae:fe:c1:87:ab:d5:b9:6c:33:83:7f:79:33:ad:db:
ca:b3:81:ac:6a:fe:4b:d8:43:24:7c:52:ec:e2:24:95:8e:30:
16:6a:cb:f7:70:ae:c6:50:21:74:5a:8d:c6:0e:ba:06:f6:f3:
c1:a6:f8:34:a1:98:ff:43:a5:f2:e9:a2:67:57:6b:56:0b:2c:
f0:a9:a4:44:11:ed:26:fd:7d:61:4d:a1:72:88:6e:80:ba:49:
25:e6:6d:9b:04:a8:64:f6:66:0f:5d:df:9f:3c:2f:83:ad:ac:
67:45:4d:82:37:7b:52:38:eb:e5:4c:c2:79:c9:e8:a3:76:6e:
d8:f8:56:85:d4:e2:f4:fd:54:0c:69:5f:62:49:81:b3:46:7d:
7f:df:0c:79:5c:66:bd:10:38:b2:8d:ec:b6:bf:30:db:4a:32:
e2:fa:29:f0:cf:2e:b3:be:91:38:92:a5:f1:1d:f3:98:9e:7d:
12:4d:73:81:bf:c3:e2:56:4d:e4:40:0b:40:26:72:84:e7:37:
59:a4:5a:72:e6:ae:06:fe:67:76:d7:94:2a:77:f3:c1:bf:02:
03:37:d0:73:23:3a:87:fb:44:6e:27:3b:68:a5:56:cc:cc:9f:
4d:4c:bd:33:bc:6a:42:8f:d5:f1:d5:0f:14:ed:7f:65:2c:c9:
bd:cd:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:05 2025 by rpki-client