Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A638D6C7DEF11F0A477A5B4DAE4EC9C.roa
File: 7A638D6C7DEF11F0A477A5B4DAE4EC9C.roa (raw, json)
Hash identifier: YmJBiqE1rSKYT4/4KQpDEnf70D2GTfQWXAWaayHJ8tk=
Subject key identifier: 10:5C:8D:83:A1:99:1D:5B:8A:81:42:3E:E7:88:EF:19:F9:00:53:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016C80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A638D6C7DEF11F0A477A5B4DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 17:59:56 +0000
ROA not before: Wed 20 Aug 2025 17:59:51 +0000
ROA not after: Sun 12 Dec 2027 17:59:51 +0000
asID: 17561
IP address blocks: 45.193.19.0/24 maxlen: 24
45.193.20.0/24 maxlen: 24
45.193.21.0/24 maxlen: 24
45.193.22.0/24 maxlen: 24
45.193.23.0/24 maxlen: 24
45.193.24.0/24 maxlen: 24
45.193.25.0/24 maxlen: 24
45.193.26.0/24 maxlen: 24
45.193.27.0/24 maxlen: 24
45.193.28.0/24 maxlen: 24
45.193.29.0/24 maxlen: 24
45.193.30.0/24 maxlen: 24
45.193.31.0/24 maxlen: 24
45.193.32.0/24 maxlen: 24
45.193.33.0/24 maxlen: 24
45.193.34.0/24 maxlen: 24
45.193.35.0/24 maxlen: 24
45.193.36.0/24 maxlen: 24
45.193.37.0/24 maxlen: 24
45.193.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93312 (0x16c80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:59:51 2025 GMT
Not After : Dec 12 17:59:51 2027 GMT
Subject: CN=68a60d1b-928e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:52:92:52:1f:23:e7:7a:90:af:12:bd:18:
72:26:ba:c4:b8:b1:91:ac:eb:53:ed:e1:06:e0:96:
cd:a6:04:3d:aa:44:bb:9a:fb:2f:85:3d:bc:1d:83:
ed:ef:7a:e1:3e:8a:cd:39:d1:32:d2:ac:7b:cd:4e:
de:65:f0:c2:71:ab:17:72:c1:45:2b:31:4b:0f:d1:
e2:16:ea:6f:65:bf:df:f3:dd:ac:7b:7a:40:60:ac:
8b:38:c0:ac:57:f2:74:82:67:5e:ba:fc:e8:57:95:
11:f5:05:62:d6:9d:be:f8:5b:a1:3f:0b:4b:30:6c:
4a:7e:ea:ba:45:33:c7:70:e8:43:a8:3e:92:9a:00:
41:9c:fb:f2:21:02:d4:e9:58:97:b7:23:c3:97:b4:
2b:ca:45:06:67:35:89:dd:95:2b:b6:66:ba:bf:28:
ce:4c:31:4d:1d:7e:bf:d4:67:60:40:19:51:88:ed:
58:a5:87:9a:13:66:c1:96:01:0b:e7:65:29:af:87:
a7:28:46:7a:c5:bb:27:ed:4b:fb:00:9d:4c:64:dc:
0b:51:52:c8:47:56:b8:72:c4:9c:14:31:8b:96:1c:
34:fb:ba:89:f9:30:fb:25:f1:c3:3d:57:3b:38:17:
6f:9d:87:87:37:95:f7:66:1f:11:36:ab:ba:03:ef:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5C:8D:83:A1:99:1D:5B:8A:81:42:3E:E7:88:EF:19:F9:00:53:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A638D6C7DEF11F0A477A5B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.193.19.0-45.193.38.255
Signature Algorithm: sha256WithRSAEncryption
2e:46:47:e1:0a:4a:5b:a7:10:83:c5:30:f4:49:7a:12:75:d3:
ac:02:e8:a8:87:57:c8:69:39:fd:85:e8:aa:8e:23:35:d2:47:
6f:e4:d3:c5:e6:9c:b3:3d:76:76:0e:4e:89:98:45:a5:ff:7a:
ba:69:c7:1d:2b:c9:14:5a:fc:19:83:6a:cb:6e:53:12:fe:7d:
a2:40:14:07:2a:8a:d7:de:53:2d:f6:4d:f6:77:a8:c0:52:28:
0a:15:9a:4d:44:2c:13:7e:6e:b5:a7:54:67:f7:8d:b8:a0:83:
5d:77:51:74:96:b9:eb:1d:81:73:b6:f3:51:3e:ec:35:63:bb:
ff:0c:cd:1c:3b:f3:92:82:30:09:65:6c:71:58:33:1c:0c:d9:
d3:22:5f:bd:f4:85:89:9e:65:55:cf:39:70:83:70:6e:7d:2c:
d8:19:0f:26:46:26:0f:a8:45:be:e4:d0:e0:98:e6:46:79:af:
17:ac:a1:94:4f:e1:5c:b8:e1:4c:c7:a8:0b:d9:f9:91:be:83:
01:e0:15:35:c3:a1:82:bb:90:80:d8:de:48:ab:d5:72:51:eb:
a8:e1:7a:dc:47:17:fe:4c:35:c9:82:55:26:3f:29:19:9d:9c:
53:68:f1:4c:93:98:26:b5:de:ea:53:a5:04:47:74:da:fc:d0:
50:01:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:14:23 2025 by rpki-client