Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6571CA7E1111F0943A448FDAE4EC9C.roa
File: 0A6571CA7E1111F0943A448FDAE4EC9C.roa (raw, json)
Hash identifier: wmEHIub41zGsGklhmoksR5qVZPnK0IthtFHeSANVymI=
Subject key identifier: 0B:1A:A3:D8:A4:EA:32:F3:33:92:A0:53:B4:46:7C:FB:09:58:8E:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6571CA7E1111F0943A448FDAE4EC9C.roa
Signing time: Wed 20 Aug 2025 22:00:11 +0000
ROA not before: Wed 20 Aug 2025 22:00:03 +0000
ROA not after: Wed 05 Jul 2028 22:00:03 +0000
asID: 17561
IP address blocks: 45.206.208.0/24 maxlen: 24
45.206.209.0/24 maxlen: 24
45.206.210.0/24 maxlen: 24
45.206.211.0/24 maxlen: 24
45.206.212.0/24 maxlen: 24
45.206.213.0/24 maxlen: 24
45.206.214.0/24 maxlen: 24
45.206.215.0/24 maxlen: 24
45.206.216.0/24 maxlen: 24
45.206.217.0/24 maxlen: 24
45.206.218.0/24 maxlen: 24
45.206.219.0/24 maxlen: 24
45.206.220.0/24 maxlen: 24
45.206.221.0/24 maxlen: 24
45.206.222.0/24 maxlen: 24
45.206.223.0/24 maxlen: 24
45.206.224.0/24 maxlen: 24
45.206.225.0/24 maxlen: 24
45.206.226.0/24 maxlen: 24
45.206.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93415 (0x16ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 22:00:03 2025 GMT
Not After : Jul 5 22:00:03 2028 GMT
Subject: CN=68a6456a-b2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:29:8a:ad:4b:24:83:3f:04:8b:e8:55:c9:
1d:39:3b:5f:d0:19:e4:d0:53:ef:ea:00:97:b1:7f:
be:f2:06:e9:f3:bf:f0:39:34:be:b7:17:92:f2:67:
69:1f:fe:cf:96:3c:bd:72:10:00:91:2f:b4:54:17:
1a:a1:3f:ba:3d:af:e5:cc:34:0d:72:4d:0a:0c:fc:
ec:a7:41:74:c2:eb:9b:61:4a:58:94:e6:7e:b9:f2:
ec:0a:2d:47:07:dd:dc:03:5e:7b:4f:8c:57:e0:61:
97:8a:07:e5:f6:fa:36:39:84:7b:e4:29:51:f8:52:
78:4d:b8:82:c7:20:77:8b:80:84:ed:01:5e:a8:63:
ec:31:30:94:29:f6:8a:3a:1f:ee:02:77:a2:1e:8f:
47:f3:80:0f:27:99:b1:19:96:b8:b9:2b:5e:8c:a6:
e2:d2:44:4b:04:90:36:d0:34:6e:5b:96:7a:3e:6c:
5a:ec:b4:57:30:4f:a2:e2:36:d2:ec:e3:ec:4a:6f:
67:e5:22:f0:40:06:75:bb:82:38:e3:e6:fa:e3:64:
41:b8:e6:9c:3f:6e:cb:16:69:e9:22:4a:f1:3d:9a:
d8:87:44:b5:e2:9b:59:32:c9:fd:ee:47:91:af:ae:
0f:22:ea:34:4b:9e:02:da:a4:c5:98:8f:19:c1:fd:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:A3:D8:A4:EA:32:F3:33:92:A0:53:B4:46:7C:FB:09:58:8E:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6571CA7E1111F0943A448FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.208.0-45.206.227.255
Signature Algorithm: sha256WithRSAEncryption
9b:42:52:d7:c7:45:a9:62:af:67:3d:1e:78:e3:6a:94:ec:cf:
e6:ca:eb:54:b6:86:e3:6d:48:a8:04:c1:63:02:01:e4:34:4a:
91:0b:a6:d7:36:3a:26:19:ef:86:d9:42:d8:2f:a1:5b:52:4b:
1e:03:1c:7f:cd:c5:6e:ce:87:34:7b:0a:7c:6b:23:88:84:36:
43:5b:a2:03:2f:a6:7f:94:2f:32:b9:e5:13:65:ee:11:3b:5f:
24:14:af:16:5d:e2:24:a1:6f:a3:bb:a4:37:15:0e:58:d6:c8:
92:d8:9f:97:f1:8d:24:0f:76:07:b2:01:b7:40:56:af:8b:a0:
94:d2:96:89:bb:ab:f9:2b:04:3e:2b:87:cd:de:68:59:63:6c:
4c:27:17:1f:44:6b:47:13:18:3f:2b:8e:ad:00:f4:81:fb:13:
d9:c0:d2:6c:f6:7e:ac:1d:b7:86:ce:5a:6d:b8:b8:ea:8b:9c:
7b:f8:90:eb:b0:6a:0e:83:b4:2e:e1:ac:02:99:3a:13:51:ad:
96:ee:07:eb:20:a8:0e:6b:11:f8:ce:a2:79:31:22:2c:11:ed:
d3:63:59:5d:09:a0:b7:ad:0a:d2:f8:9c:26:b3:23:f3:06:d7:
6f:41:3f:66:0f:91:13:42:de:ef:dc:bc:53:fe:27:0b:e8:05:
98:f6:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:00 2025 by rpki-client