Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/324BFE887E0311F09D4467B4DAE4EC9C.roa
File: 324BFE887E0311F09D4467B4DAE4EC9C.roa (raw, json)
Hash identifier: lNEklh0vn7eezYkeGNgGaBuO6DEn/R9Nnm/4f5IWdv4=
Subject key identifier: 2D:4E:B0:F0:35:83:6F:0A:50:95:03:1C:85:C9:B6:64:A5:29:3A:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/324BFE887E0311F09D4467B4DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 20:21:05 +0000
ROA not before: Wed 20 Aug 2025 20:20:59 +0000
ROA not after: Tue 06 Jun 2028 20:20:59 +0000
asID: 17561
IP address blocks: 45.196.129.0/24 maxlen: 24
45.198.146.0/24 maxlen: 24
45.198.147.0/24 maxlen: 24
45.198.157.0/24 maxlen: 24
45.198.159.0/24 maxlen: 24
45.198.160.0/24 maxlen: 24
45.198.164.0/24 maxlen: 24
45.198.166.0/24 maxlen: 24
45.198.170.0/24 maxlen: 24
45.198.174.0/24 maxlen: 24
45.198.175.0/24 maxlen: 24
45.198.179.0/24 maxlen: 24
45.198.180.0/24 maxlen: 24
45.198.234.0/24 maxlen: 24
45.198.235.0/24 maxlen: 24
45.198.236.0/24 maxlen: 24
45.198.237.0/24 maxlen: 24
45.200.141.0/24 maxlen: 24
45.200.155.0/24 maxlen: 24
45.200.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93372 (0x16cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 20:20:59 2025 GMT
Not After : Jun 6 20:20:59 2028 GMT
Subject: CN=68a62e30-ba91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:3a:2d:20:98:59:c3:81:e6:11:a2:02:f1:
40:17:73:00:ca:df:fb:be:53:97:a4:34:02:d4:37:
2c:1a:13:1a:76:8b:bf:68:d6:c3:ab:f6:37:4b:3e:
d6:73:2f:37:88:6e:8c:fe:99:e0:c3:53:2e:83:8d:
c0:a3:9d:f7:d7:a7:8a:7f:d7:94:e9:4e:0c:82:1e:
24:83:b5:61:d7:21:9d:b8:36:25:d4:17:33:bc:a9:
13:90:93:9c:1d:ac:08:a0:5e:40:6a:72:97:98:66:
c6:39:f9:cc:ad:e7:3b:01:b7:99:67:87:a0:bd:65:
d7:e8:4f:5e:46:13:3b:7c:86:8a:e4:25:5c:c6:4d:
49:b8:81:9c:74:88:64:47:da:a2:ee:dc:5b:ed:0c:
64:2e:d1:9e:76:38:97:09:68:a7:97:2a:d9:b2:5b:
44:92:5d:30:c3:a8:3f:d6:72:1f:b4:9e:97:8e:c3:
d1:b1:08:1c:64:f5:10:84:f0:26:95:ec:5b:53:85:
8c:66:b1:de:02:bb:db:4c:0e:da:47:34:10:4b:ae:
e9:9d:ad:e0:b2:90:81:d3:a9:b3:4c:70:3b:3f:4c:
88:2a:cc:14:c8:86:be:f7:69:8b:08:33:a7:07:72:
e9:0f:9b:b1:f6:b4:ff:0f:90:36:36:6b:e8:e6:fe:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:B0:F0:35:83:6F:0A:50:95:03:1C:85:C9:B6:64:A5:29:3A:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/324BFE887E0311F09D4467B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.129.0/24
45.198.146.0/23
45.198.157.0/24
45.198.159.0-45.198.160.255
45.198.164.0/24
45.198.166.0/24
45.198.170.0/24
45.198.174.0/23
45.198.179.0-45.198.180.255
45.198.234.0-45.198.237.255
45.200.141.0/24
45.200.155.0-45.200.156.255
Signature Algorithm: sha256WithRSAEncryption
2f:a3:a5:c8:32:40:ea:17:f3:3a:3a:7c:39:9f:11:b4:6d:12:
cd:15:ac:b1:cc:8d:fb:84:4b:50:9c:d4:c7:03:83:98:6b:4e:
bf:95:45:8e:27:1b:c0:55:09:9a:22:f5:aa:2e:8e:b9:e5:e8:
a7:68:ec:27:27:2e:6d:dd:0e:a3:68:df:20:10:35:5b:2e:a6:
57:3e:b6:5d:1b:b3:a6:fc:9c:cb:94:d9:59:00:00:f9:65:0d:
70:d3:74:8a:29:5a:7b:f4:31:77:08:df:3e:8f:ee:d1:6b:c2:
ee:34:31:a4:25:fc:3a:58:6f:d0:40:08:db:95:4d:a6:55:cb:
b5:90:d3:4f:4b:ba:01:12:24:90:86:d7:5d:d5:a7:ce:5b:c3:
20:37:ac:d8:38:b8:6d:30:36:f3:9c:72:98:b3:e2:e4:cc:12:
ef:8f:4b:66:96:2a:a9:bc:96:c8:27:b0:eb:68:73:2b:96:21:
ea:4a:f3:88:e9:2a:83:c4:e4:ec:7e:f2:90:74:53:36:7a:9a:
a1:84:da:5f:d7:9e:e7:58:4d:9a:4a:1e:c6:47:18:f7:4b:d2:
e6:c5:55:bb:05:55:38:79:29:19:87:36:f9:e1:58:44:fc:2c:
9d:ad:a6:2f:b9:2c:62:36:be:b9:51:20:90:77:cd:bb:f7:e4:
fd:ea:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:33 2025 by rpki-client