Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6AB7F07E1911F09EFB41C0DAE4EC9C.roa
File: 1D6AB7F07E1911F09EFB41C0DAE4EC9C.roa (raw, json)
Hash identifier: AY5ZBosZy9tdhJaY1/xN/mYlXeX1pGmeEJBnHmQWW88=
Subject key identifier: 71:40:A6:47:B1:18:EE:50:C0:EC:84:58:96:A6:34:55:9C:EE:08:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016D07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6AB7F07E1911F09EFB41C0DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 22:57:58 +0000
ROA not before: Wed 20 Aug 2025 22:57:53 +0000
ROA not after: Sat 22 Jul 2028 22:57:53 +0000
asID: 17561
IP address blocks: 45.194.201.0/24 maxlen: 24
45.194.202.0/24 maxlen: 24
45.194.203.0/24 maxlen: 24
45.194.204.0/24 maxlen: 24
45.194.205.0/24 maxlen: 24
45.194.206.0/24 maxlen: 24
45.194.207.0/24 maxlen: 24
45.194.208.0/24 maxlen: 24
45.194.209.0/24 maxlen: 24
45.194.210.0/24 maxlen: 24
45.194.211.0/24 maxlen: 24
45.194.212.0/24 maxlen: 24
45.194.213.0/24 maxlen: 24
45.194.214.0/24 maxlen: 24
45.194.215.0/24 maxlen: 24
45.194.216.0/24 maxlen: 24
45.194.217.0/24 maxlen: 24
45.194.218.0/24 maxlen: 24
45.194.219.0/24 maxlen: 24
45.194.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93447 (0x16d07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 22:57:53 2025 GMT
Not After : Jul 22 22:57:53 2028 GMT
Subject: CN=68a652f6-c8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:a8:a4:ed:18:29:5e:eb:6b:51:2f:81:08:
a1:cf:31:69:41:de:79:54:ab:b5:16:a4:e0:0d:d7:
c3:58:72:0b:fc:03:11:53:ea:0e:2a:9c:fe:4a:5e:
96:f8:bc:6f:5d:a3:a6:c7:80:31:e9:5a:5f:80:3c:
61:84:34:14:f6:18:a4:c9:ee:fb:8c:61:4f:ca:40:
ae:20:4b:23:b1:e5:8b:1e:df:d9:53:f3:c6:f5:c6:
11:de:6c:fa:ac:d5:59:27:e7:6e:11:99:2f:b7:db:
c5:01:2f:cf:76:f7:98:57:6d:6d:49:7e:e4:58:7c:
fb:1e:0e:0c:df:a4:50:9a:58:dd:05:5a:cf:c3:3c:
49:e8:98:74:1c:32:3c:c6:78:cb:b4:21:40:b6:69:
80:90:d7:18:ad:6b:e3:60:f4:e6:93:c2:bb:6c:ba:
39:8d:e8:db:2e:de:5a:0a:bf:dd:d3:36:75:bd:67:
c6:79:46:b4:83:9e:04:b5:a3:4c:2d:96:27:4b:0e:
d1:56:2e:5c:4b:96:a2:78:e9:ee:41:bd:64:e3:0f:
fc:ea:26:47:62:af:9a:fd:e7:a8:a4:7d:2c:ff:b8:
8e:30:35:8c:3c:b7:a7:30:54:c1:89:f2:fc:ad:2a:
ac:63:85:bc:65:a7:3f:56:6c:7d:ad:33:c9:4b:2b:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:40:A6:47:B1:18:EE:50:C0:EC:84:58:96:A6:34:55:9C:EE:08:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D6AB7F07E1911F09EFB41C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.201.0-45.194.220.255
Signature Algorithm: sha256WithRSAEncryption
02:50:e0:07:83:6b:b7:58:ef:84:c4:7d:c4:be:cd:80:5e:c8:
eb:0f:63:80:aa:3d:0d:eb:27:02:a7:65:b8:37:e6:00:0a:7c:
90:9d:5e:75:57:7b:b1:ec:08:60:ab:d5:1c:29:a8:02:ad:a2:
94:94:20:a2:5c:0c:96:fa:25:05:b2:56:ba:91:5d:82:40:d2:
d6:dd:0e:ff:0c:72:bf:3a:c7:ea:b0:c9:39:e7:49:d9:01:82:
36:5d:c3:4e:ab:9a:43:12:45:74:9f:69:8a:70:bc:98:88:94:
29:45:c7:d2:85:27:61:7f:7b:cb:e2:d6:68:03:a1:82:52:77:
3d:46:77:5c:21:80:55:db:15:4b:4b:40:b5:36:c5:4d:17:63:
62:ae:68:b9:27:e3:e5:39:f4:7c:9c:39:7f:a7:b8:55:81:42:
c0:19:67:8c:6f:5f:31:7a:a0:c6:e2:af:d5:b9:75:88:7c:a3:
55:02:24:19:60:90:d9:d5:b8:93:9b:36:ac:cc:d1:2e:6b:a3:
52:e8:8e:a0:8a:65:7e:8b:63:8a:0a:55:dd:9f:36:90:93:f9:
69:da:7d:b2:9c:c4:b4:57:a6:87:32:41:49:dc:27:fe:d2:99:
31:01:84:c5:a4:f4:e7:dc:5c:eb:77:af:6a:20:0b:42:d9:ed:
74:57:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:19:10 2025 by rpki-client