Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C2BED27E0A11F0A3C6A7E1DAE4EC9C.roa
File: 36C2BED27E0A11F0A3C6A7E1DAE4EC9C.roa (raw, json)
Hash identifier: viLat3DiPePkyuFGBbdY2aurDjhAnsK2/SffJMNydNM=
Subject key identifier: 9D:CB:B8:2F:B4:95:A4:79:DD:D2:86:0B:B5:EA:DB:7E:8F:4D:A6:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CD1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C2BED27E0A11F0A3C6A7E1DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 21:11:19 +0000
ROA not before: Wed 20 Aug 2025 21:11:12 +0000
ROA not after: Tue 13 Jun 2028 21:11:12 +0000
asID: 17561
IP address blocks: 45.196.79.0/24 maxlen: 24
45.196.80.0/24 maxlen: 24
45.196.81.0/24 maxlen: 24
45.196.82.0/24 maxlen: 24
45.196.83.0/24 maxlen: 24
45.196.84.0/24 maxlen: 24
45.196.85.0/24 maxlen: 24
45.196.86.0/24 maxlen: 24
45.196.87.0/24 maxlen: 24
45.196.88.0/24 maxlen: 24
45.196.89.0/24 maxlen: 24
45.196.90.0/24 maxlen: 24
45.196.92.0/24 maxlen: 24
45.196.93.0/24 maxlen: 24
45.196.94.0/24 maxlen: 24
45.196.95.0/24 maxlen: 24
45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.196.98.0/24 maxlen: 24
45.196.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93393 (0x16cd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 21:11:12 2025 GMT
Not After : Jun 13 21:11:12 2028 GMT
Subject: CN=68a639f6-4c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:90:a7:48:64:34:f5:46:76:3c:53:23:34:
1f:5d:01:08:63:23:45:14:0b:5f:ed:d6:47:d5:44:
6c:e1:82:b2:8d:3b:af:31:eb:6b:7b:94:b5:72:3c:
4b:b0:78:ef:2f:23:2c:57:0a:07:06:0f:82:2e:c8:
84:82:c5:6c:45:40:d4:f1:f8:16:9e:22:65:f9:38:
47:88:96:71:21:4c:5f:56:83:e7:06:40:fb:87:e4:
f7:48:86:97:97:a9:58:69:d1:94:4a:df:b5:9a:fc:
01:21:d5:20:40:18:84:32:96:d1:ed:b0:15:a5:79:
32:f9:0d:b8:20:fa:6c:71:6b:52:10:eb:1d:d0:db:
e3:97:72:b4:51:96:69:65:b2:4f:af:8d:2f:83:96:
1b:aa:5a:52:f8:65:91:48:31:3c:84:60:a7:b4:3c:
85:b1:e5:f9:27:18:a7:9d:92:86:8f:fd:82:67:b1:
b1:88:f3:e1:c2:6e:c1:2f:88:17:2c:15:8c:ea:de:
05:af:5e:fb:f7:e2:33:98:ef:6d:f7:fa:5d:af:5f:
72:49:a8:69:b9:34:f4:65:dc:38:c0:9b:f9:a0:b5:
09:41:2e:e7:7a:d9:12:5a:be:70:bf:4b:47:71:21:
93:26:d8:c3:d5:de:61:32:73:f8:f0:6e:dc:97:f4:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:B8:2F:B4:95:A4:79:DD:D2:86:0B:B5:EA:DB:7E:8F:4D:A6:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C2BED27E0A11F0A3C6A7E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.79.0-45.196.90.255
45.196.92.0-45.196.99.255
Signature Algorithm: sha256WithRSAEncryption
14:d8:a3:f3:dc:f2:5a:37:94:1d:3c:4c:71:ea:00:3f:ef:56:
f5:6a:70:e9:ca:60:cc:3c:f0:7b:6b:78:e3:11:2e:25:ce:87:
9c:14:bc:bd:19:cd:3b:5f:99:82:f0:4f:9e:ec:c5:e3:82:43:
9a:5c:0e:e9:f8:c7:74:67:12:8b:f3:a4:97:a1:6e:67:5b:ca:
4c:55:34:07:54:a2:f6:4f:c1:68:e2:75:9a:74:35:e7:a7:7f:
e4:b6:c8:2d:28:10:f5:c3:ae:3c:31:0e:78:3c:a3:08:e6:b8:
a4:97:6f:3b:85:95:fe:5f:65:14:a6:a2:82:60:ed:fe:3a:ed:
7d:7b:d9:27:c8:32:01:56:23:8b:74:d9:e1:4e:01:06:2b:04:
a7:8c:a8:ec:07:bf:ca:47:cb:31:f7:1e:57:96:5c:9d:df:ac:
cc:18:a1:80:0f:52:d5:39:18:66:69:13:fa:92:b5:5d:ac:8e:
92:2a:45:55:05:a9:6f:82:e6:fa:1f:f4:23:22:1d:09:52:b1:
1a:2c:71:de:fe:ba:31:f0:25:ef:65:3d:28:a3:d7:6c:c3:3c:
d8:c6:d4:aa:04:44:eb:7b:e4:bc:cf:2c:18:f4:a2:a3:e1:f5:
9b:1e:ed:1f:9c:3d:ef:ae:12:d6:22:94:7b:5e:02:a9:23:7d:
96:e1:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:21 2025 by rpki-client