Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B73EFA7DFC11F0892C5188DAE4EC9C.roa
File: 25B73EFA7DFC11F0892C5188DAE4EC9C.roa (raw, json)
Hash identifier: DT9kUxrC2ju/ncppvbAF3qMUBtV+Z3gNYDhpx8TNRD0=
Subject key identifier: 09:AE:23:2A:DE:FA:CE:7D:B8:5E:32:1A:1E:55:7A:2D:CF:73:4C:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B73EFA7DFC11F0892C5188DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 19:30:37 +0000
ROA not before: Wed 20 Aug 2025 19:30:31 +0000
ROA not after: Mon 29 May 2028 19:30:31 +0000
asID: 17561
IP address blocks: 45.197.17.0/24 maxlen: 24
45.197.18.0/24 maxlen: 24
45.197.132.0/24 maxlen: 24
45.197.160.0/24 maxlen: 24
45.197.161.0/24 maxlen: 24
45.197.162.0/24 maxlen: 24
45.197.163.0/24 maxlen: 24
45.197.164.0/24 maxlen: 24
45.197.165.0/24 maxlen: 24
45.197.166.0/24 maxlen: 24
45.202.110.0/24 maxlen: 24
45.206.8.0/24 maxlen: 24
45.206.14.0/24 maxlen: 24
45.206.43.0/24 maxlen: 24
45.207.22.0/24 maxlen: 24
45.207.23.0/24 maxlen: 24
45.207.25.0/24 maxlen: 24
45.207.28.0/24 maxlen: 24
45.207.30.0/24 maxlen: 24
45.207.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93354 (0x16caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 19:30:31 2025 GMT
Not After : May 29 19:30:31 2028 GMT
Subject: CN=68a6225d-73d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:e3:a5:83:d4:85:e6:f0:cd:83:4b:2f:63:
d2:9c:b2:59:be:6b:41:fa:5c:53:e7:68:9e:bb:79:
d3:97:f5:e7:9e:2b:23:71:18:dc:04:2a:dd:d1:1a:
05:11:ea:20:39:f2:f8:8f:71:a7:76:06:b6:45:a7:
23:13:0c:a8:9e:75:d8:1b:02:88:82:fd:0f:df:8a:
29:82:0e:2f:69:91:e6:54:f3:23:99:2a:90:4a:76:
77:d7:4c:81:4a:ac:cc:ff:38:7c:59:b9:ea:9c:5d:
bb:a9:47:ef:fd:3e:c6:df:cd:04:da:02:7d:ec:42:
3d:98:a2:c1:fa:aa:c1:a0:7c:d5:ce:bf:d2:56:39:
76:11:43:5c:8d:d5:1f:13:af:dd:c5:6a:44:65:82:
83:c0:02:1c:e7:f7:68:d4:47:f7:11:03:2d:6d:a4:
51:f4:8d:91:e7:e5:55:db:79:6c:3d:50:7c:b9:b2:
69:e8:70:63:96:db:8a:7b:8b:b9:a8:49:bd:03:2a:
12:38:1c:32:a8:c1:10:40:b6:0b:f9:f9:8f:c5:ed:
df:ef:69:da:fb:49:d7:3c:31:f2:2c:3f:19:12:0e:
17:5d:d1:ce:c9:3b:ff:40:d3:db:e6:a3:d1:62:ad:
c6:ba:bf:96:bf:fd:ea:48:a8:76:c8:0a:61:81:a8:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:23:2A:DE:FA:CE:7D:B8:5E:32:1A:1E:55:7A:2D:CF:73:4C:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B73EFA7DFC11F0892C5188DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.17.0-45.197.18.255
45.197.132.0/24
45.197.160.0-45.197.166.255
45.202.110.0/24
45.206.8.0/24
45.206.14.0/24
45.206.43.0/24
45.207.22.0/23
45.207.25.0/24
45.207.28.0/24
45.207.30.0/24
45.207.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:99:40:2f:8c:e9:46:32:10:d4:c3:43:64:73:4f:ad:98:ab:
7f:1e:93:65:d7:ba:1d:d4:fb:86:79:4d:e4:e2:48:2a:d7:68:
5a:92:51:e4:5f:4a:b3:43:3e:cc:f4:95:04:75:02:76:d9:e8:
29:fb:7d:d2:07:e9:13:50:4d:28:23:bd:4d:87:ba:2b:b3:b7:
35:bd:be:e1:2c:da:1a:02:76:d1:f6:8d:b9:46:c9:93:3b:b4:
cc:9c:31:12:fe:ed:0e:96:65:9e:65:63:94:8d:e1:ab:39:16:
b4:d2:6d:83:65:1b:dd:5c:35:68:ce:25:84:07:77:0a:ea:50:
ae:8b:e6:a1:5c:7d:74:b7:fd:e9:36:c7:3a:10:d4:cb:fc:01:
49:2a:04:40:41:78:c2:15:d5:ed:00:20:5a:1f:a4:ec:59:55:
ec:07:84:1e:bd:91:b4:bd:d3:76:b9:ab:74:b8:27:de:1c:e9:
66:e9:1e:b1:3d:30:09:77:cf:eb:fc:24:0b:ac:d2:30:65:25:
cd:46:7c:88:22:ad:59:34:91:65:e2:d8:9d:35:9d:10:f8:04:
4e:91:0b:c6:c0:f3:8e:a9:13:44:d1:6a:bc:c9:9b:66:23:2a:
2a:b2:16:25:f9:45:db:36:13:de:53:a0:29:3f:fa:0d:06:0c:
9d:6f:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:57 2025 by rpki-client