Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB67328AB32811F09195E6D0DAE4EC9C.roa
File: DB67328AB32811F09195E6D0DAE4EC9C.roa (raw, json)
Hash identifier: IMpsLni3k6Mlo1wva/Xd6T562AKH6fzpb/dU9+KLICA=
Subject key identifier: C1:B2:FC:41:43:3D:74:8B:46:2B:62:F3:2F:75:51:46:73:B3:6D:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB67328AB32811F09195E6D0DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 11:34:12 +0000
ROA not before: Mon 27 Oct 2025 11:34:02 +0000
ROA not after: Fri 28 Nov 2025 11:34:02 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
45.192.38.0/24 maxlen: 24
45.192.39.0/24 maxlen: 24
45.192.40.0/24 maxlen: 24
45.192.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99046 (0x182e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 11:34:02 2025 GMT
Not After : Nov 28 11:34:02 2025 GMT
Subject: CN=68ff58b4-d2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:5f:c7:0d:db:4a:d9:af:2c:c6:21:39:41:
98:1c:0d:64:c6:da:e7:b8:f2:fe:d6:e8:a7:ae:d2:
84:83:61:8e:18:f4:cb:ad:8c:7b:5d:04:20:2d:d7:
93:ce:17:8a:17:d6:60:1d:0b:98:50:c4:74:4f:1c:
d3:a4:a3:de:8a:7f:99:ff:5b:34:c7:d2:1e:2a:a8:
96:97:69:69:f4:a4:54:3e:ef:e9:a2:2a:9c:63:e7:
a8:1a:24:4d:f1:9e:3d:82:3f:fb:43:80:80:d2:b1:
0e:81:03:f4:79:07:3b:e4:b8:40:12:f4:41:c9:0f:
22:1e:9e:85:75:24:cc:62:8e:6b:30:94:e6:0c:a8:
9d:b1:5a:19:cb:49:97:b5:69:9a:59:5f:86:45:c3:
f2:26:72:5f:86:a3:71:a8:08:55:81:96:e6:3d:94:
f5:dd:a6:97:0a:60:9f:c7:9c:87:c5:a0:e6:32:d7:
7b:82:85:03:71:e8:a3:06:42:05:d4:f7:7a:b9:ba:
75:c5:7c:f4:05:c0:5b:cc:2e:20:b1:ce:97:0d:dd:
62:6d:ed:4c:6c:a3:cb:30:36:ad:b3:c2:f3:79:39:
ee:c6:e7:d3:6c:97:5a:7c:b9:df:21:2e:02:a6:0e:
4f:69:8c:b4:9d:68:cd:56:78:f8:c0:f0:9a:81:ff:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:FC:41:43:3D:74:8B:46:2B:62:F3:2F:75:51:46:73:B3:6D:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB67328AB32811F09195E6D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0-45.192.41.255
Signature Algorithm: sha256WithRSAEncryption
bb:62:4c:e0:a4:cb:98:8d:8f:63:78:8e:0c:47:56:9f:e5:53:
0f:92:86:70:d8:e9:94:d5:11:f4:9b:f2:72:a9:99:8a:4b:d5:
29:e5:c7:c8:90:cc:74:f9:c0:a8:5b:9b:09:97:37:e9:a3:23:
eb:7b:07:c5:8a:ae:c7:60:a4:64:fd:a0:a8:45:c8:6d:b8:69:
78:12:2a:04:a1:ab:0e:fd:3b:38:9a:bb:20:6a:a8:b7:46:98:
09:3c:40:91:48:10:ae:7e:e9:d2:a0:d0:48:85:89:b3:5d:19:
bb:ff:bc:37:ee:b5:b6:14:c8:48:89:32:ad:46:da:2a:ef:a5:
e0:d8:c3:ef:e9:5c:8e:d3:9a:74:e2:42:69:21:7a:34:6e:76:
84:c8:ae:50:06:61:a4:0f:0d:62:0f:8b:7e:f7:2f:59:75:9a:
71:95:63:40:d3:9c:e6:5d:d0:27:c1:96:82:66:62:9c:f7:b1:
0b:74:b0:e4:70:82:d5:72:58:b3:05:b5:c0:7a:6d:f4:4a:cb:
e1:68:cd:58:64:c1:47:4d:f7:73:29:82:f4:0d:73:cf:88:e1:
00:11:15:1e:b6:b2:99:b9:d7:af:d7:6e:46:2f:09:3a:a2:7c:
0c:9d:d8:b0:6a:72:7f:46:66:76:0a:c9:6a:30:61:f4:32:0b:
51:99:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:48 2025 by rpki-client