Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71AEFD907DEB11F0A9A75E99DAE4EC9C.roa
File: 71AEFD907DEB11F0A9A75E99DAE4EC9C.roa (raw, json)
Hash identifier: WAxyzqRaJ8dlDNVcyVbf86qr0FZayxuYwAV5gEfuPF8=
Subject key identifier: CB:CE:AB:D7:E1:A5:18:B6:D1:FF:F8:CB:1D:25:8B:7D:31:AA:3F:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016C5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71AEFD907DEB11F0A9A75E99DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 17:31:03 +0000
ROA not before: Wed 20 Aug 2025 17:30:57 +0000
ROA not after: Sun 12 Dec 2027 17:30:57 +0000
asID: 17561
IP address blocks: 45.193.0.0/24 maxlen: 24
45.193.1.0/24 maxlen: 24
45.193.2.0/24 maxlen: 24
45.193.3.0/24 maxlen: 24
45.193.4.0/24 maxlen: 24
45.193.5.0/24 maxlen: 24
45.193.6.0/24 maxlen: 24
45.193.7.0/24 maxlen: 24
45.193.8.0/24 maxlen: 24
45.193.9.0/24 maxlen: 24
45.193.10.0/24 maxlen: 24
45.193.11.0/24 maxlen: 24
45.193.12.0/24 maxlen: 24
45.193.13.0/24 maxlen: 24
45.193.14.0/24 maxlen: 24
45.193.15.0/24 maxlen: 24
45.193.16.0/24 maxlen: 24
45.193.17.0/24 maxlen: 24
45.193.18.0/24 maxlen: 24
45.193.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93277 (0x16c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:30:57 2025 GMT
Not After : Dec 12 17:30:57 2027 GMT
Subject: CN=68a60657-9ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:ae:57:ec:5a:c2:cd:e9:b2:72:6b:7a:63:
f3:bc:4c:2d:b7:8b:72:91:c6:44:ef:ba:ed:7b:a8:
fc:5e:27:90:6e:0b:a7:4d:17:47:d5:be:56:d2:3f:
a7:7d:cf:97:6f:c9:5b:6c:e9:6a:62:9e:06:10:ea:
a4:19:b6:98:fc:c1:38:20:eb:29:f2:43:09:26:e2:
50:03:29:0a:c4:11:0e:49:2b:08:7b:34:34:d8:3d:
d8:54:43:cd:79:dc:cd:e3:38:f4:23:06:40:1f:ac:
d6:40:07:bb:67:95:b2:22:7e:05:49:a4:ca:34:9b:
bb:b0:ac:93:56:0a:00:57:e7:75:7d:be:f9:f4:93:
b9:6a:cf:a5:e5:18:63:4d:c8:60:df:78:bb:74:e0:
e8:82:35:33:13:da:b7:17:81:3c:a0:c0:f1:d7:37:
53:1e:98:eb:41:a6:5b:2d:7c:e0:81:71:c6:b5:c3:
c3:2c:d3:da:d9:19:b2:b7:f9:bf:86:61:66:6d:67:
02:32:95:44:9f:e7:c0:c1:03:7c:bb:f7:4f:36:37:
a7:0e:43:26:d3:ff:2f:30:bb:13:40:88:fd:d6:d1:
16:93:11:09:d8:5d:ef:30:d4:7e:a8:e3:f5:bc:94:
c8:1a:27:bd:0e:2d:72:80:bb:c7:b5:75:3b:fe:50:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:AB:D7:E1:A5:18:B6:D1:FF:F8:CB:1D:25:8B:7D:31:AA:3F:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71AEFD907DEB11F0A9A75E99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.193.0.0-45.193.19.255
Signature Algorithm: sha256WithRSAEncryption
92:f0:0b:65:8c:8d:d2:8f:5f:a7:10:17:6a:b8:e4:65:29:a0:
98:a1:84:c6:90:98:75:83:0f:fe:69:17:9e:ec:c5:c0:e5:4c:
02:49:c0:b4:91:99:e2:e4:0a:dc:0b:42:8d:d2:28:35:ec:44:
50:da:c2:ba:3b:41:fd:71:d5:eb:ba:03:ca:72:44:d8:71:63:
da:94:30:99:cf:87:26:6b:86:17:79:4a:e3:e2:23:5c:70:db:
c0:41:d7:f4:51:37:75:b5:1c:07:ff:20:9d:97:15:04:2b:01:
ed:60:b8:84:f4:ae:e4:c6:17:40:0e:ba:1b:57:e2:b7:df:c4:
45:6e:d1:2e:4d:8f:23:29:94:2a:6c:cc:a3:ea:90:d9:a6:fe:
1a:5e:21:6f:92:0d:b5:25:53:d1:2b:81:7b:19:3a:33:30:6e:
91:6c:33:e6:04:72:e3:5c:82:12:bc:93:92:13:21:aa:15:8c:
b0:21:e3:9e:0e:63:cf:95:c3:0b:ff:f7:16:78:ca:a9:aa:a7:
6c:8f:43:e5:a2:72:14:fd:a7:bb:1c:4c:47:e4:b6:6c:4a:31:
29:93:b2:ff:14:1f:79:5e:83:38:09:cc:84:eb:ef:d7:9a:dc:
60:b5:5c:25:4d:f1:db:2a:1d:96:45:db:e5:f5:28:2e:49:e9:
98:c8:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:40 2025 by rpki-client