Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A5496F07E0411F0B731BABCDAE4EC9C.roa
File: 5A5496F07E0411F0B731BABCDAE4EC9C.roa (raw, json)
Hash identifier: /LO4gxQrCFbqrwOzq8SmNWBF+BWk9Zv6NWyc/dP2r7c=
Subject key identifier: 10:4D:27:F9:1E:1E:58:1E:16:0B:6A:F7:E3:D6:70:54:FB:2B:2A:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A5496F07E0411F0B731BABCDAE4EC9C.roa
Signing time: Wed 20 Aug 2025 20:29:21 +0000
ROA not before: Wed 20 Aug 2025 20:29:16 +0000
ROA not after: Tue 06 Jun 2028 20:29:16 +0000
asID: 17561
IP address blocks: 45.195.0.0/24 maxlen: 24
45.195.88.0/24 maxlen: 24
45.195.89.0/24 maxlen: 24
45.195.91.0/24 maxlen: 24
45.195.93.0/24 maxlen: 24
45.195.94.0/24 maxlen: 24
45.195.105.0/24 maxlen: 24
45.195.108.0/24 maxlen: 24
45.195.109.0/24 maxlen: 24
45.195.153.0/24 maxlen: 24
45.195.154.0/24 maxlen: 24
45.195.156.0/24 maxlen: 24
45.195.159.0/24 maxlen: 24
45.196.130.0/24 maxlen: 24
45.196.135.0/24 maxlen: 24
45.196.138.0/24 maxlen: 24
45.196.156.0/24 maxlen: 24
45.196.157.0/24 maxlen: 24
45.196.159.0/24 maxlen: 24
45.206.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93374 (0x16cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 20:29:16 2025 GMT
Not After : Jun 6 20:29:16 2028 GMT
Subject: CN=68a63021-4805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:19:bc:1e:22:c9:f9:41:1d:37:fa:d5:ba:
1c:87:a6:48:14:ad:a9:e1:ea:98:0d:0b:44:9b:5a:
e1:24:a8:5d:10:58:f4:33:1c:dc:2a:c8:1c:9f:d7:
72:8f:19:41:19:5c:a1:27:7c:3e:9f:da:09:53:be:
13:54:85:da:7a:2e:f7:19:61:aa:30:ee:de:1a:b7:
14:81:e4:1d:aa:ee:05:d7:07:f2:3a:a6:53:0e:fd:
25:bb:7d:ec:2b:39:4e:19:85:0d:55:d2:11:2c:b1:
8e:bc:5e:0f:47:26:d0:ea:10:fc:e0:42:e2:d8:80:
21:e3:3c:3d:60:ee:c6:5a:d6:39:c1:27:9e:8b:32:
6c:9e:23:9e:2b:7d:03:cd:5f:cf:e0:43:16:95:be:
0f:2e:9e:61:4c:03:82:a5:38:ba:84:3e:d5:ad:48:
c9:b2:ec:ba:85:34:79:26:3d:d3:02:d6:b7:af:14:
09:82:21:b6:f6:f9:a8:ee:da:2e:0b:b7:ba:8d:12:
91:a7:be:b2:50:14:84:b3:08:46:2b:08:21:61:ce:
ae:03:ae:8b:93:53:f7:f5:60:9c:65:51:85:d2:86:
a0:79:50:35:97:d2:0e:f4:c0:05:68:84:12:77:42:
8b:24:15:97:d5:70:61:79:98:1e:b5:33:89:f1:7c:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4D:27:F9:1E:1E:58:1E:16:0B:6A:F7:E3:D6:70:54:FB:2B:2A:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A5496F07E0411F0B731BABCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.0.0/24
45.195.88.0/23
45.195.91.0/24
45.195.93.0-45.195.94.255
45.195.105.0/24
45.195.108.0/23
45.195.153.0-45.195.154.255
45.195.156.0/24
45.195.159.0/24
45.196.130.0/24
45.196.135.0/24
45.196.138.0/24
45.196.156.0/23
45.196.159.0/24
45.206.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e7:b4:ae:dc:66:97:7a:86:d2:41:f3:fb:bc:1c:1d:1a:29:
b7:20:29:ce:00:dc:39:3e:46:33:e3:5c:d1:9c:0b:91:83:64:
8f:0f:3b:5f:b9:e2:5e:5b:f9:f2:af:d3:5e:97:7a:ac:c2:a5:
5e:37:8a:af:2d:d7:b4:b9:e4:13:8b:2d:32:d4:f6:e0:6a:3c:
7c:05:86:67:5d:a1:7a:d3:fc:98:64:b8:3d:de:07:4d:33:03:
30:be:02:8f:dd:9b:0a:69:fe:26:f6:2a:7d:e7:06:8b:9e:7c:
21:e5:ee:e9:5b:df:42:0d:21:ac:e9:17:8b:81:07:0e:6a:3a:
9a:5d:9a:73:78:33:0e:26:cd:7f:dd:e6:c6:7f:f9:cd:06:b8:
cb:ec:3e:fd:8b:01:fd:20:75:34:b8:cf:5a:da:90:1d:c7:af:
5a:ca:81:d5:e7:ef:7a:17:1d:99:a9:78:fd:ff:5c:d1:ad:37:
2c:4d:04:9c:e1:ad:23:61:aa:bc:d6:22:34:65:cd:db:7f:d8:
ff:e1:6f:21:03:8c:ad:9c:71:c9:fc:24:46:9f:28:84:ad:3a:
de:36:69:d8:15:85:5f:11:48:d6:04:fd:67:d7:4e:b9:e6:cb:
f4:c5:29:08:78:48:de:60:5f:1b:04:62:0f:cc:0e:1a:7b:0d:
ea:47:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:06 2025 by rpki-client