Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/863AA4667E0511F083E1DBC1DAE4EC9C.roa
File: 863AA4667E0511F083E1DBC1DAE4EC9C.roa (raw, json)
Hash identifier: LAPJMlRi2cm67po+RulZapeltL/+oYEpwhf6y3+vjFc=
Subject key identifier: 58:B6:C1:A6:A4:F1:55:FC:81:B8:A8:0E:69:60:6F:A3:F6:CE:22:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/863AA4667E0511F083E1DBC1DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 20:37:44 +0000
ROA not before: Wed 20 Aug 2025 20:37:37 +0000
ROA not after: Tue 06 Jun 2028 20:37:37 +0000
asID: 17561
IP address blocks: 45.197.128.0/24 maxlen: 24
45.197.130.0/24 maxlen: 24
45.197.200.0/24 maxlen: 24
45.197.201.0/24 maxlen: 24
45.197.205.0/24 maxlen: 24
45.197.206.0/24 maxlen: 24
45.197.224.0/24 maxlen: 24
45.197.226.0/24 maxlen: 24
45.197.229.0/24 maxlen: 24
45.197.231.0/24 maxlen: 24
45.197.233.0/24 maxlen: 24
45.197.235.0/24 maxlen: 24
45.197.237.0/24 maxlen: 24
45.197.239.0/24 maxlen: 24
45.202.89.0/24 maxlen: 24
45.204.2.0/24 maxlen: 24
45.204.3.0/24 maxlen: 24
45.204.70.0/24 maxlen: 24
45.204.79.0/24 maxlen: 24
45.206.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93379 (0x16cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 20:37:37 2025 GMT
Not After : Jun 6 20:37:37 2028 GMT
Subject: CN=68a63218-3ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:aa:dc:1b:d2:81:27:16:20:42:69:8a:7b:
27:21:42:5c:65:db:70:ec:d3:31:2d:c8:47:8a:04:
78:03:2f:32:2e:b0:6a:93:8b:d8:9d:de:48:80:7c:
94:6e:16:a6:cd:9d:e2:ed:f6:23:8f:7c:29:1a:c3:
3e:12:7d:3e:d1:d5:13:b9:24:25:ea:f1:61:2e:de:
75:09:25:15:2c:9b:db:ff:d6:31:05:93:86:52:69:
f7:fa:ba:1d:1a:d8:d0:41:64:5c:90:78:71:88:60:
6c:2b:ba:c4:64:2f:08:86:ec:49:5e:98:ff:26:3b:
ed:5f:79:40:70:32:ad:b3:fd:8d:6b:eb:24:2b:97:
68:af:d7:22:f5:80:70:a8:c7:fd:a3:07:5a:5f:e7:
80:d2:31:06:92:00:32:eb:71:e6:b3:0a:46:a5:11:
77:39:89:35:28:75:5e:85:75:b7:9b:3d:69:29:4e:
bd:b6:b6:5e:a4:90:20:65:3d:e7:de:7e:dc:bd:34:
dc:f6:39:4a:da:7b:85:14:8d:80:ba:27:1c:0b:d8:
27:f9:bf:ce:17:20:0d:e4:c8:11:14:01:0f:53:bc:
64:9a:2a:37:06:59:99:fd:ce:36:6c:63:ec:95:0a:
a0:6f:3e:71:b9:73:b8:75:fc:11:e5:c8:54:46:99:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:C1:A6:A4:F1:55:FC:81:B8:A8:0E:69:60:6F:A3:F6:CE:22:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/863AA4667E0511F083E1DBC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.128.0/24
45.197.130.0/24
45.197.200.0/23
45.197.205.0-45.197.206.255
45.197.224.0/24
45.197.226.0/24
45.197.229.0/24
45.197.231.0/24
45.197.233.0/24
45.197.235.0/24
45.197.237.0/24
45.197.239.0/24
45.202.89.0/24
45.204.2.0/23
45.204.70.0/24
45.204.79.0/24
45.206.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f4:e3:f9:bc:51:27:53:40:5b:19:40:48:d7:ab:f2:fd:a4:
9c:3b:1f:bf:75:6e:f4:db:01:2e:8b:9e:03:a6:71:a6:f1:00:
1c:f7:d5:f2:d5:80:fd:b1:12:d1:bc:95:c5:64:fd:ba:f3:98:
ad:cd:98:3b:60:08:3a:00:b0:29:86:b4:29:0d:3b:e0:27:8d:
66:8f:f4:3a:b1:1f:12:d9:15:42:36:3a:76:b1:f7:a4:4c:81:
53:6e:e3:04:18:96:70:c1:0b:05:81:7c:db:85:f5:6e:31:5d:
08:4f:c7:e6:92:2e:2d:4a:52:a1:c3:d5:41:b4:35:f3:10:16:
4c:37:f7:03:4a:83:b3:9f:de:98:a8:22:e0:2c:48:3f:53:aa:
0a:e2:07:6c:8b:9b:48:c6:bf:32:d6:a3:88:a9:1c:ad:7d:b7:
3e:9f:2a:23:62:f5:9d:27:39:2b:e2:aa:eb:2c:3a:ef:e5:88:
4b:3b:aa:e6:ab:29:79:c2:0f:4b:86:1d:26:d9:86:56:04:41:
4c:94:20:68:f3:9d:8c:c4:7c:b9:ef:e5:47:e4:ba:94:9a:0b:
44:05:67:71:aa:3f:a0:55:e9:aa:d6:27:62:23:32:38:95:53:
b3:0a:40:5b:ed:0d:af:e2:b5:a6:4b:d2:1b:85:c0:9b:44:34:
23:f1:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:14:31 2025 by rpki-client