Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490A32E07E1A11F0B6E7B6C8DAE4EC9C.roa
File: 490A32E07E1A11F0B6E7B6C8DAE4EC9C.roa (raw, json)
Hash identifier: f283eOVYoXNDPpgJfBGcqcnPTb7ql7cRkHUZX9BAZNc=
Subject key identifier: 26:5F:83:EF:52:39:45:ED:A7:B8:1D:AE:0B:52:E3:B3:F5:99:5D:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016D0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490A32E07E1A11F0B6E7B6C8DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 23:06:22 +0000
ROA not before: Wed 20 Aug 2025 23:06:16 +0000
ROA not after: Sat 22 Jul 2028 23:06:16 +0000
asID: 17561
IP address blocks: 45.194.221.0/24 maxlen: 24
45.194.222.0/24 maxlen: 24
45.194.223.0/24 maxlen: 24
45.194.224.0/24 maxlen: 24
45.194.225.0/24 maxlen: 24
45.194.226.0/24 maxlen: 24
45.194.227.0/24 maxlen: 24
45.194.228.0/24 maxlen: 24
45.194.229.0/24 maxlen: 24
45.194.230.0/24 maxlen: 24
45.194.231.0/24 maxlen: 24
45.194.232.0/24 maxlen: 24
45.194.233.0/24 maxlen: 24
45.194.234.0/24 maxlen: 24
45.194.235.0/24 maxlen: 24
45.194.236.0/24 maxlen: 24
45.194.237.0/24 maxlen: 24
45.194.238.0/24 maxlen: 24
45.194.239.0/24 maxlen: 24
45.194.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93452 (0x16d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 23:06:16 2025 GMT
Not After : Jul 22 23:06:16 2028 GMT
Subject: CN=68a654ee-9c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:38:e2:33:78:42:34:9e:1f:20:78:6c:81:
df:22:41:a7:f9:3e:60:3b:5c:89:78:c9:2f:36:55:
85:da:66:ad:9f:34:29:e4:d1:fc:e1:75:a2:aa:3b:
06:02:6c:40:8c:54:06:d6:0c:5d:ba:94:b4:9e:a1:
03:ac:cc:00:18:84:a7:26:75:15:4b:33:75:a8:1d:
13:13:3b:23:79:5d:0c:76:d7:9e:b0:15:ef:5e:9e:
60:0c:1b:06:ec:63:15:8b:d9:ad:f7:55:5e:67:c8:
3b:eb:f5:4d:fa:bd:8f:78:65:2d:91:8a:2c:2c:d0:
79:75:d2:5e:66:b1:34:af:d6:b1:ad:25:09:7b:eb:
fc:09:e0:81:84:38:55:8e:d8:35:3e:73:20:1b:11:
49:f0:00:6e:29:43:54:8c:e4:ee:3a:59:64:23:fc:
72:f6:9a:48:ec:21:af:ec:bf:20:cc:ce:e5:97:02:
47:1c:c1:4a:ed:00:16:d0:8e:39:f3:2e:99:12:61:
02:4a:4f:ca:52:90:41:cc:2c:f2:65:c1:cb:d0:a2:
3c:06:0d:3f:3a:79:30:7c:64:b3:a2:cf:e0:6d:35:
02:07:61:41:b5:1e:f9:03:20:42:76:aa:cf:ce:e8:
74:e4:d7:c3:41:06:4e:7d:7b:18:b4:3a:41:50:42:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5F:83:EF:52:39:45:ED:A7:B8:1D:AE:0B:52:E3:B3:F5:99:5D:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490A32E07E1A11F0B6E7B6C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.221.0-45.194.240.255
Signature Algorithm: sha256WithRSAEncryption
0c:63:2d:6f:fd:c2:73:4b:32:85:db:26:7c:02:0c:97:1e:d1:
96:16:90:21:3a:c1:24:6d:f4:26:dd:49:c7:aa:4e:8c:0b:f5:
fb:d8:6a:64:96:f9:3f:83:99:4c:bb:21:69:7b:2f:b8:4a:48:
bc:f1:35:4f:b0:c9:02:91:f9:8d:6d:0d:cf:ff:c3:00:36:83:
c3:ad:eb:92:4d:74:87:75:88:1b:42:99:f6:82:ec:cd:ac:e4:
6b:86:43:f4:4f:bb:5b:db:48:81:c3:71:9e:0f:01:d0:a3:e4:
ca:cb:f3:1f:23:c1:2b:f9:42:45:e9:20:75:b2:b9:ac:39:e2:
1f:cb:df:f6:48:2c:61:8c:d1:9f:04:b9:61:9a:c0:eb:c7:22:
f0:a2:8e:e2:54:51:80:54:59:4d:1f:5b:e1:2d:3a:14:99:d1:
f2:1e:ba:c5:a2:b4:3e:11:71:0b:6e:9a:0f:7f:06:3b:7a:2c:
d5:fc:b7:8c:87:11:03:e8:a6:e0:6c:6d:75:ae:d7:2c:f8:b3:
ee:b3:85:15:c6:4e:20:1e:3b:c1:37:99:46:e9:13:f3:05:6c:
14:e8:30:7d:79:53:4f:11:dc:21:f1:43:da:21:06:4d:8c:57:
a1:b7:ba:fb:f6:61:19:7d:e9:0e:31:d2:b3:10:7f:4d:3e:a5:
49:7e:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:12 2025 by rpki-client