Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623B115C7E2011F09EBE43F1DAE4EC9C.roa
File: 623B115C7E2011F09EBE43F1DAE4EC9C.roa (raw, json)
Hash identifier: d5IF3pHRc+gI1uXmYm1VpBG1hEvATW1RvExPzTi2jSQ=
Subject key identifier: EC:EC:6D:39:83:5D:73:5F:0D:48:7C:15:33:94:34:19:A8:2C:8C:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016D24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623B115C7E2011F09EBE43F1DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 23:50:00 +0000
ROA not before: Wed 20 Aug 2025 23:49:54 +0000
ROA not after: Sun 20 Aug 2028 23:49:54 +0000
asID: 17561
IP address blocks: 45.202.199.0/24 maxlen: 24
45.202.204.0/24 maxlen: 24
45.204.181.0/24 maxlen: 24
45.204.182.0/24 maxlen: 24
45.204.183.0/24 maxlen: 24
45.204.184.0/24 maxlen: 24
45.204.185.0/24 maxlen: 24
45.204.186.0/24 maxlen: 24
45.204.187.0/24 maxlen: 24
45.204.188.0/24 maxlen: 24
45.204.189.0/24 maxlen: 24
45.204.190.0/24 maxlen: 24
45.204.191.0/24 maxlen: 24
45.204.236.0/24 maxlen: 24
45.204.237.0/24 maxlen: 24
45.204.238.0/24 maxlen: 24
45.204.239.0/24 maxlen: 24
45.204.240.0/24 maxlen: 24
45.204.248.0/24 maxlen: 24
45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93476 (0x16d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 23:49:54 2025 GMT
Not After : Aug 20 23:49:54 2028 GMT
Subject: CN=68a65f28-69e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:63:79:c0:72:27:7b:4a:fb:b6:12:9d:18:
19:2f:3c:c9:74:ca:62:0e:10:c8:ff:06:96:33:e9:
fb:70:65:9f:4f:4c:98:cd:13:66:c5:80:bc:5f:2b:
73:2f:f4:61:43:07:70:11:dd:f5:b2:ed:60:76:a0:
2a:04:be:f6:5c:c5:5f:a0:5e:fd:e3:04:ba:05:30:
c5:72:7f:ad:15:ef:0e:8f:82:a6:05:fd:05:51:c0:
a1:55:0a:c2:a5:49:eb:fc:21:ac:38:20:b2:58:51:
b6:a8:a5:dc:b6:5b:a2:02:f6:5b:d8:d9:88:90:f6:
11:6f:74:9b:a9:a5:1b:b0:3a:9d:fa:2a:74:79:16:
85:19:c6:ba:6e:99:89:a6:3b:5d:8e:d2:6f:8a:ca:
e2:e4:34:40:92:db:19:cd:70:f4:bf:24:1f:0b:17:
86:ce:27:43:98:03:ef:69:9d:f8:77:df:99:e0:a9:
42:7f:9d:38:29:53:4e:55:17:c5:9e:28:25:7e:66:
8e:24:22:58:e9:db:4c:87:78:08:93:6b:e1:b4:6f:
85:e6:b6:5b:50:39:84:3d:04:b6:dd:e8:26:e5:34:
53:bd:a9:be:28:4e:6d:d4:3f:88:86:ea:37:bd:db:
98:35:37:06:86:62:f0:0b:37:5d:5a:cc:b1:a5:62:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EC:6D:39:83:5D:73:5F:0D:48:7C:15:33:94:34:19:A8:2C:8C:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623B115C7E2011F09EBE43F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.199.0/24
45.202.204.0/24
45.204.181.0-45.204.191.255
45.204.236.0-45.204.240.255
45.204.248.0/24
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
65:16:45:16:93:9c:22:87:04:ed:ec:a6:c3:96:7c:b3:c7:ce:
2a:ec:99:c8:e4:4f:96:ce:6e:9e:6c:17:98:3a:f7:ab:d2:d3:
af:2e:d1:ec:44:ee:de:e8:1a:ca:39:e0:a6:ce:7a:12:63:54:
2e:98:3f:02:51:b0:b3:f1:da:76:15:b9:86:e0:dd:e5:c3:c4:
12:74:14:fe:92:4f:cb:b5:86:cd:7c:83:96:25:e7:5c:1b:1d:
40:87:79:90:3b:09:db:dd:1e:d4:83:0f:f5:ea:48:33:f4:c8:
7d:3c:5f:40:4d:e4:50:af:16:e0:27:73:ad:09:38:f0:f8:b8:
bf:0a:93:2a:22:99:34:bb:0f:35:55:c0:a2:1f:6d:29:4e:a2:
03:03:8e:fc:7c:77:d4:93:5d:df:fe:62:e5:4f:16:57:04:68:
e8:bc:88:3a:13:62:b2:2d:74:40:05:a0:69:c0:36:c4:1b:e2:
75:2b:1e:a9:6d:8a:a5:05:73:34:c2:f9:73:54:f7:b8:02:89:
6f:fd:33:a4:05:d5:1c:4b:d1:8f:4b:72:05:3e:b1:2a:bd:17:
43:c2:93:b0:a5:39:0c:9a:65:37:3c:a9:95:f3:75:87:cb:90:
40:70:b3:f6:4a:8b:73:ab:5b:67:37:6d:57:d3:d4:d8:0e:e1:
fb:ff:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:14 2025 by rpki-client