Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9616DA6A7E0C11F0B6A52BEFDAE4EC9C.roa
File: 9616DA6A7E0C11F0B6A52BEFDAE4EC9C.roa (raw, json)
Hash identifier: p51pWetY8tT9Q1e14zZR80+INXYIL5YfIP52mPXeO38=
Subject key identifier: 79:D5:43:7F:97:A8:4B:B6:3A:CE:B9:6D:31:A4:D0:DB:22:02:1D:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9616DA6A7E0C11F0B6A52BEFDAE4EC9C.roa
Signing time: Wed 20 Aug 2025 21:28:17 +0000
ROA not before: Wed 20 Aug 2025 21:28:12 +0000
ROA not after: Wed 05 Jul 2028 21:28:12 +0000
asID: 17561
IP address blocks: 45.206.128.0/24 maxlen: 24
45.206.129.0/24 maxlen: 24
45.206.130.0/24 maxlen: 24
45.206.131.0/24 maxlen: 24
45.206.132.0/24 maxlen: 24
45.206.133.0/24 maxlen: 24
45.206.134.0/24 maxlen: 24
45.206.135.0/24 maxlen: 24
45.206.136.0/24 maxlen: 24
45.206.137.0/24 maxlen: 24
45.206.138.0/24 maxlen: 24
45.206.139.0/24 maxlen: 24
45.206.140.0/24 maxlen: 24
45.206.141.0/24 maxlen: 24
45.206.142.0/24 maxlen: 24
45.206.143.0/24 maxlen: 24
45.206.144.0/24 maxlen: 24
45.206.145.0/24 maxlen: 24
45.206.146.0/24 maxlen: 24
45.206.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93402 (0x16cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 21:28:12 2025 GMT
Not After : Jul 5 21:28:12 2028 GMT
Subject: CN=68a63df1-6844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:7e:08:40:00:ad:32:29:19:1a:1a:b1:ea:
d8:8c:38:d5:f8:63:03:00:a8:fd:1e:72:64:3e:20:
84:75:f2:e1:37:6c:41:1c:b8:a1:ad:e7:60:a6:5b:
73:b4:4a:37:98:26:0d:98:4c:06:1a:3a:f4:98:f7:
d6:8c:ae:7b:26:62:cb:0d:1a:b5:a2:07:7e:d5:76:
79:88:b7:f0:5f:be:fb:c2:d4:c5:20:5a:1a:9c:29:
a5:65:08:d5:81:58:f2:fc:d4:da:15:30:21:21:2c:
f0:a0:8e:65:b5:8d:70:44:b1:17:61:e7:11:ba:ed:
43:08:4d:a6:b9:d4:c1:8f:78:91:58:9e:fa:1b:d2:
70:d2:a5:00:45:55:a7:c3:fa:a1:ed:d6:f0:b2:1e:
42:eb:b4:80:b4:2e:53:12:6b:e0:df:98:d7:b7:ce:
2c:8c:7a:55:b2:b6:85:67:47:13:7f:b0:46:3a:b3:
cf:ce:d8:27:c3:1e:f4:38:31:da:0f:00:5a:31:81:
dc:e3:22:7d:5e:b8:d5:a9:64:7b:9e:d1:57:89:6f:
08:2a:ce:4e:a0:4d:53:18:13:96:3d:72:9a:53:64:
51:2c:b9:47:7f:9b:6e:8d:51:c6:08:d5:75:0f:04:
24:d7:d4:25:4f:14:8a:58:92:f7:7c:d0:a1:28:60:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D5:43:7F:97:A8:4B:B6:3A:CE:B9:6D:31:A4:D0:DB:22:02:1D:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9616DA6A7E0C11F0B6A52BEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.128.0-45.206.147.255
Signature Algorithm: sha256WithRSAEncryption
9c:49:a0:bf:0e:80:a4:f8:09:99:26:5f:a7:ea:68:66:60:de:
3c:17:34:b7:37:5e:ca:4c:46:c4:cf:03:1e:e1:70:fe:5c:cd:
72:48:6d:04:e7:20:bf:ba:05:0b:8d:f0:3d:37:b5:aa:66:f5:
a3:56:d1:5a:04:ca:d2:fd:ed:7e:56:93:63:d7:b9:b4:28:ee:
5c:e0:fb:c6:82:aa:71:80:78:23:8e:1d:2e:83:14:68:3f:8e:
39:da:78:0d:0b:ec:21:c5:a7:7f:35:ab:b2:6a:b4:2b:66:3c:
dc:23:dc:5c:b2:32:b8:f4:54:72:fb:65:0f:59:2c:d6:1f:5c:
cf:c4:13:96:4b:96:3f:1f:2f:9d:24:ef:ca:fa:86:88:99:6a:
61:fa:f0:19:d2:ca:ae:31:53:89:2b:f4:9e:ed:2c:6c:85:cb:
b6:a3:76:dd:55:4b:e2:57:38:6a:2f:59:d6:2f:ab:5a:09:2a:
34:b1:91:34:7e:9a:91:08:14:57:85:cf:22:69:d2:e5:7a:26:
87:87:0a:21:60:b7:e5:8f:cd:f5:a1:aa:fe:b5:ae:2d:2c:e1:
b0:60:a8:c3:85:36:ce:45:17:cc:3d:93:e7:f1:d8:97:fa:79:
c3:81:b0:e7:15:a2:c5:66:3a:8a:72:63:94:83:ce:ef:e4:14:
0f:9d:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:20:34 2025 by rpki-client