Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3B0F667E5A11F09EA81184DAE4EC9C.roa
File: 5C3B0F667E5A11F09EA81184DAE4EC9C.roa (raw, json)
Hash identifier: mrNYA6TEOuL8fUUxEtnGPX1d/FcdXTcLX9vVz8fbBBE=
Subject key identifier: A1:51:D5:FA:3F:13:A8:3F:00:27:D8:C6:E3:2B:0F:A9:A9:7F:D0:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3B0F667E5A11F09EA81184DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 06:45:01 +0000
ROA not before: Thu 21 Aug 2025 06:44:56 +0000
ROA not after: Sat 01 Nov 2025 06:44:56 +0000
asID: 149014
IP address blocks: 45.192.160.0/24 maxlen: 24
45.192.161.0/24 maxlen: 24
45.192.163.0/24 maxlen: 24
45.192.175.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
45.192.181.0/24 maxlen: 24
45.192.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93610 (0x16daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 06:44:56 2025 GMT
Not After : Nov 1 06:44:56 2025 GMT
Subject: CN=68a6c06d-8399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:42:d6:4f:59:c1:c5:00:4c:00:c2:14:de:
30:14:e9:86:bc:25:cc:21:16:30:06:d8:cf:2f:d2:
d7:a5:30:3c:4b:d7:1e:65:74:d0:77:09:1d:0a:42:
a0:a1:1c:0e:87:74:94:60:28:55:c4:31:51:fe:a5:
31:f9:53:ff:da:62:06:7e:04:a3:96:8e:65:18:44:
dc:56:b3:ba:65:ce:06:62:51:08:b2:89:d5:e2:a7:
9e:82:31:4b:0a:54:06:13:af:c8:16:0a:32:70:04:
6c:3e:0a:7e:89:c3:8d:2f:0d:52:d5:99:3c:ed:db:
c4:62:29:df:1c:cf:ca:3b:65:52:86:d3:9c:00:2b:
25:d5:58:72:23:0c:3d:4e:54:b8:8c:4d:f6:d6:da:
7f:23:c1:12:55:09:7e:aa:59:7d:aa:8e:01:5d:43:
a6:29:32:fb:8a:75:fa:84:5a:b7:8e:cb:c2:b0:12:
53:c8:e3:35:42:9b:a5:b7:6f:bf:a7:e4:a0:2e:9a:
30:3f:39:69:db:e3:50:07:d4:49:3f:21:c1:75:fb:
59:29:dd:1f:84:78:64:69:08:fd:3d:65:fa:be:b5:
df:f8:43:e7:92:e1:66:4d:67:21:14:7c:b7:d3:98:
73:24:d9:a2:61:b6:04:9e:0d:f4:eb:7a:0c:2d:15:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:D5:FA:3F:13:A8:3F:00:27:D8:C6:E3:2B:0F:A9:A9:7F:D0:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C3B0F667E5A11F09EA81184DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/23
45.192.163.0/24
45.192.175.0/24
45.192.180.0/23
45.192.185.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7d:60:d0:71:40:7d:af:4d:70:a8:76:aa:42:2d:df:58:57:
fc:61:a5:05:bf:d1:be:e4:2f:bf:1c:50:2c:d9:6d:cf:76:d9:
66:fa:9c:a5:d7:57:f9:8b:18:b0:bd:e8:3b:03:f7:9b:aa:c6:
f1:58:9a:86:a3:71:4a:00:4c:cc:9d:76:20:ca:10:61:00:44:
35:9e:12:7f:19:8e:56:a2:d3:53:8a:ae:b5:20:44:a4:f0:38:
79:9c:5a:5c:f6:d8:a9:df:a2:ec:4e:a0:c7:db:e1:f2:38:1d:
ae:a0:59:8d:99:4d:86:cd:02:93:7e:c1:4e:1d:69:e6:60:1d:
f9:e0:05:7c:a3:30:d5:d7:63:54:66:0b:a5:ff:02:4a:ec:82:
08:ad:be:98:d5:2e:fe:c9:6e:b6:76:89:ac:06:43:2f:f4:1f:
9a:e2:00:0f:00:b0:af:e6:21:e5:54:70:20:2d:b6:86:21:ac:
fe:55:5f:8a:9b:ce:88:12:d4:a1:4c:30:62:14:14:2b:c3:8e:
12:2b:41:d2:1b:a9:a4:bc:6c:d3:17:96:03:6d:11:03:c3:0f:
f6:4c:15:fc:dd:ef:51:7f:7f:f5:76:c2:ce:72:d5:f7:88:37:
cc:c2:e7:c3:57:2c:9a:08:f2:05:98:b6:b0:12:ee:57:48:de:
39:98:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:07 2025 by rpki-client