Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7C8B069D0E11F0B47DC39FDAE4EC9C.roa
File: 8B7C8B069D0E11F0B47DC39FDAE4EC9C.roa (raw, json)
Hash identifier: FgUKQ0rV53W92ek5Sc2o7VjT0N6CQ5n9HZ0BylA11A0=
Subject key identifier: 3B:43:B7:08:81:3F:FE:F0:1B:B1:68:6E:2E:66:73:FE:F0:8D:8A:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7C8B069D0E11F0B47DC39FDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 08:30:25 +0000
ROA not before: Mon 29 Sep 2025 08:30:19 +0000
ROA not after: Tue 28 Oct 2025 08:30:19 +0000
asID: 202656
IP address blocks: 45.192.61.0/24 maxlen: 24
45.192.62.0/24 maxlen: 24
45.195.160.0/24 maxlen: 24
45.195.166.0/24 maxlen: 24
45.195.169.0/24 maxlen: 24
45.195.171.0/24 maxlen: 24
45.195.172.0/24 maxlen: 24
45.195.173.0/24 maxlen: 24
45.195.178.0/24 maxlen: 24
45.195.180.0/24 maxlen: 24
45.200.169.0/24 maxlen: 24
45.200.170.0/24 maxlen: 24
45.200.171.0/24 maxlen: 24
45.200.172.0/24 maxlen: 24
45.200.173.0/24 maxlen: 24
45.200.174.0/24 maxlen: 24
45.200.175.0/24 maxlen: 24
45.200.176.0/24 maxlen: 24
45.200.177.0/24 maxlen: 24
45.200.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97705 (0x17da9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:30:19 2025 GMT
Not After : Oct 28 08:30:19 2025 GMT
Subject: CN=68da43a1-c0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:f6:89:cf:35:d7:6a:f6:13:48:3b:44:3a:
61:8f:4f:99:11:4f:c6:5f:16:40:f5:47:4e:b5:7e:
f6:b2:5f:de:d4:15:8b:5c:d5:3c:81:2b:7f:e3:b0:
03:a4:33:1b:4c:87:dd:e7:64:29:f4:8f:12:38:cc:
03:aa:ed:71:5b:6f:8d:a5:e3:bf:28:2c:c6:82:f0:
38:23:b4:8c:4c:70:0b:42:c9:bb:df:e9:9f:bc:85:
15:ae:4b:75:4c:9a:63:b1:e3:d3:56:2a:a0:aa:b3:
8a:f9:f2:c8:d9:27:27:7b:68:db:0d:7c:8b:56:76:
8c:c0:ae:7b:41:0c:7a:9b:ab:6c:5a:fa:84:23:80:
9a:ef:05:51:7e:b2:ce:4f:c8:40:ff:7d:4f:ed:12:
c5:2a:ce:a3:32:a5:86:71:90:b2:70:c3:7f:38:e4:
a2:96:e2:87:3e:fc:d7:ef:da:8d:d7:c0:bc:22:f2:
a3:97:fa:2a:65:05:db:dd:94:d3:b3:b1:01:63:9c:
8f:b9:40:2e:a2:23:0c:86:bb:8c:d8:94:2c:db:8d:
15:de:20:c9:4e:c3:bc:9b:05:6a:5c:e8:c0:39:ad:
49:97:db:87:e4:5d:55:3c:9f:63:b9:89:4a:fb:1e:
ab:04:9a:8a:d3:0c:9d:36:f4:f3:0a:1a:f9:97:e9:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:B7:08:81:3F:FE:F0:1B:B1:68:6E:2E:66:73:FE:F0:8D:8A:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B7C8B069D0E11F0B47DC39FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.61.0-45.192.62.255
45.195.160.0/24
45.195.166.0/24
45.195.169.0/24
45.195.171.0-45.195.173.255
45.195.178.0/24
45.195.180.0/24
45.200.169.0-45.200.178.255
Signature Algorithm: sha256WithRSAEncryption
54:77:5b:63:7d:3a:4f:d4:36:19:7b:74:08:f5:93:72:35:df:
fd:66:16:dc:cc:fe:c9:dd:d5:03:43:7a:f6:74:55:7e:ab:11:
8c:5d:ba:dd:8f:de:54:f6:fb:75:33:3a:64:2c:d4:3f:2d:83:
29:bc:dc:c6:45:80:90:37:bc:0f:7e:96:d7:e7:9f:58:2b:2c:
f1:e3:3f:0a:e3:e9:12:eb:04:7a:fc:20:3a:94:a5:1e:26:02:
66:e5:b0:f4:4d:6f:a5:96:da:9f:ef:c4:e3:c8:6f:2a:94:9a:
7a:de:02:86:24:de:d9:b5:0e:ed:b7:17:5e:c8:85:b8:9d:fa:
6a:52:33:42:3e:a2:04:53:ea:80:57:50:3c:cc:00:90:04:64:
93:22:d8:c8:a3:18:2e:67:0c:3f:fb:8d:bc:7b:1e:9f:eb:c1:
42:10:48:67:bf:02:4c:47:7e:27:27:31:a6:06:51:f0:7a:f0:
b6:91:86:da:99:0d:c3:0a:94:39:42:5e:41:55:c0:5b:ca:dc:
c4:e9:aa:c9:2a:b1:a9:28:a5:dd:fb:32:cc:83:55:de:12:50:
b9:d2:1a:fe:85:69:29:a5:0a:ca:51:ec:b6:1f:4a:e1:f3:59:
25:62:af:20:16:c7:bd:34:db:4f:24:f8:26:51:d8:b1:0e:fd:
32:05:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:12 2025 by rpki-client