Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/392FE8AE7E1211F0A357FF95DAE4EC9C.roa
File: 392FE8AE7E1211F0A357FF95DAE4EC9C.roa (raw, json)
Hash identifier: KHX95hM3Bub/FIaQyVnlXSdaQBDlwsG7Z+UUBNzUkyY=
Subject key identifier: 92:FD:D7:4B:C8:3C:1A:52:6E:BC:A4:EF:8A:F7:F5:1A:68:E6:F8:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/392FE8AE7E1211F0A357FF95DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 22:08:39 +0000
ROA not before: Wed 20 Aug 2025 22:08:33 +0000
ROA not after: Wed 05 Jul 2028 22:08:33 +0000
asID: 17561
IP address blocks: 45.206.228.0/24 maxlen: 24
45.206.229.0/24 maxlen: 24
45.206.230.0/24 maxlen: 24
45.206.231.0/24 maxlen: 24
45.206.232.0/24 maxlen: 24
45.206.233.0/24 maxlen: 24
45.206.234.0/24 maxlen: 24
45.206.235.0/24 maxlen: 24
45.206.236.0/24 maxlen: 24
45.206.237.0/24 maxlen: 24
45.206.238.0/24 maxlen: 24
45.206.239.0/24 maxlen: 24
45.206.240.0/24 maxlen: 24
45.206.241.0/24 maxlen: 24
45.206.242.0/24 maxlen: 24
45.206.243.0/24 maxlen: 24
45.206.244.0/24 maxlen: 24
45.206.245.0/24 maxlen: 24
45.206.246.0/24 maxlen: 24
45.206.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93417 (0x16ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 22:08:33 2025 GMT
Not After : Jul 5 22:08:33 2028 GMT
Subject: CN=68a64767-e7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:5f:d6:55:2a:27:d8:4e:06:92:61:4e:d9:
00:f9:73:41:13:c0:f7:65:51:54:34:98:5b:08:33:
7b:a7:ed:ec:8c:8a:9b:38:f2:8a:d7:08:66:3b:fb:
18:ea:43:0b:e0:9a:bb:be:f9:b0:90:5e:62:3a:95:
7a:25:bb:77:e8:c3:05:67:14:a3:ad:89:56:fe:82:
04:bf:c5:11:ba:5a:62:a3:fe:bb:c3:c4:70:7c:9c:
eb:c5:3c:bb:f5:ce:e5:e7:5c:5d:91:b4:50:1a:32:
f4:9e:c4:b8:70:4f:11:cd:42:1a:69:a8:94:15:44:
90:67:d7:aa:c0:43:9d:3b:c5:c7:34:ac:27:78:72:
7f:48:3e:62:80:9d:b7:c5:a4:e9:fb:fc:da:b8:0e:
5b:9a:8e:e5:30:8a:a2:da:11:5a:75:05:af:22:d5:
46:89:10:f6:dd:5f:00:af:f0:25:54:23:1c:5c:01:
8d:80:4b:3c:76:66:7b:67:9a:eb:d2:2a:19:26:d6:
ce:4f:92:d8:56:ef:97:6c:71:1c:67:34:12:86:be:
18:57:e3:7d:47:21:9f:33:a4:ac:92:d7:4c:b2:29:
a4:83:8f:b2:13:66:b0:ff:8b:c0:c5:b6:ef:18:9f:
ce:6e:35:7c:f6:45:cc:6e:75:92:d8:4f:29:cb:72:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FD:D7:4B:C8:3C:1A:52:6E:BC:A4:EF:8A:F7:F5:1A:68:E6:F8:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/392FE8AE7E1211F0A357FF95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.228.0-45.206.247.255
Signature Algorithm: sha256WithRSAEncryption
a5:31:b6:04:cf:82:59:d2:6d:70:b2:ef:5f:c1:f7:e9:9a:28:
bc:4d:75:11:67:a1:2e:bd:f8:79:48:cd:b6:13:d3:8a:26:bc:
eb:67:18:6e:53:0d:80:02:a7:8f:c4:5d:0d:53:b3:6e:b8:f7:
a6:fd:87:44:d1:5f:91:b5:f2:61:86:31:c8:23:aa:d2:31:0c:
54:69:0a:d1:ce:f7:8d:01:4a:cb:1b:d4:75:c7:c9:3b:11:78:
c3:b5:53:4d:17:66:d5:b4:c3:b7:ec:92:41:5d:fc:1c:ca:0c:
3a:18:c2:ab:16:ef:c8:8c:6e:87:79:00:b9:17:ca:70:63:8c:
e4:9e:f5:ea:4a:65:fc:43:3e:de:f9:3b:94:a8:35:70:8a:fe:
7a:35:ea:c3:a6:17:10:b1:4d:2c:c7:4c:0a:18:8f:38:5e:0e:
63:6d:40:2c:68:4f:23:2a:85:02:c2:8b:72:72:a8:64:86:16:
4d:fe:73:e0:f5:27:e6:54:89:9a:aa:49:8d:8e:53:ec:75:41:
c4:5c:94:e2:3b:06:dc:fc:46:ad:d0:da:21:73:c7:48:67:fe:
04:b6:ce:a7:a5:12:90:17:0a:6d:f9:9d:2c:dd:c8:cc:ef:b3:
78:c0:d5:18:02:92:47:bd:20:67:06:02:16:da:d3:a2:ae:6b:
a1:a1:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:46 2025 by rpki-client