Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADB273F67E0611F09C7C8FCADAE4EC9C.roa
File: ADB273F67E0611F09C7C8FCADAE4EC9C.roa (raw, json)
Hash identifier: Ye9Holm7uHw26yRdyFzWZdYx0IRwal2p3DFub1rkN3s=
Subject key identifier: BB:6C:76:3F:0E:E6:BB:13:C7:94:AF:AE:33:8D:E7:C3:3A:A9:2C:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADB273F67E0611F09C7C8FCADAE4EC9C.roa
Signing time: Wed 20 Aug 2025 20:46:00 +0000
ROA not before: Wed 20 Aug 2025 20:45:54 +0000
ROA not after: Sun 11 Jun 2028 20:45:54 +0000
asID: 17561
IP address blocks: 45.202.16.0/24 maxlen: 24
45.202.17.0/24 maxlen: 24
45.202.18.0/24 maxlen: 24
45.202.19.0/24 maxlen: 24
45.202.20.0/24 maxlen: 24
45.202.21.0/24 maxlen: 24
45.203.56.0/24 maxlen: 24
45.203.57.0/24 maxlen: 24
45.203.132.0/24 maxlen: 24
45.203.135.0/24 maxlen: 24
45.203.245.0/24 maxlen: 24
45.207.34.0/24 maxlen: 24
45.207.35.0/24 maxlen: 24
45.207.40.0/24 maxlen: 24
45.207.41.0/24 maxlen: 24
45.207.43.0/24 maxlen: 24
45.207.47.0/24 maxlen: 24
45.207.56.0/24 maxlen: 24
45.207.58.0/24 maxlen: 24
45.207.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93384 (0x16cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 20:45:54 2025 GMT
Not After : Jun 11 20:45:54 2028 GMT
Subject: CN=68a63408-78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:b4:ef:94:18:ab:9e:b9:b9:ec:51:92:80:
39:42:f9:d3:5e:58:1e:8a:6a:af:33:ea:12:97:7b:
1d:b7:fb:66:a0:e8:00:4f:bb:48:c2:16:37:79:19:
77:88:ac:90:c2:1a:7b:ce:16:19:e6:81:f6:c1:c1:
50:b7:b0:ec:4c:fc:f0:4e:0b:8b:de:f4:16:0f:3f:
13:17:a3:ef:7c:02:49:e8:63:f8:ee:ff:7e:07:ec:
5d:2c:a3:66:5b:4a:c6:bf:da:38:41:85:4d:2a:7a:
9a:b3:e2:5a:26:02:ca:6b:fc:78:9c:b5:70:b5:22:
f4:9c:5c:e1:f2:69:ba:93:e3:60:76:1b:94:64:26:
29:59:77:c7:34:0f:e8:84:75:b2:4b:bd:a6:7a:b2:
77:e0:bb:6a:d7:56:37:85:3f:33:39:20:00:51:f5:
c4:e9:c7:fd:7b:98:84:8d:60:cf:f2:cf:b3:24:79:
fc:4c:bd:e9:09:13:06:fa:d3:02:c6:5f:70:21:cf:
cd:e7:3f:0c:2e:ab:05:ac:f9:32:ee:15:a2:04:f7:
44:a3:92:9c:a1:2e:eb:7d:5d:b6:1b:1f:d9:07:21:
ef:68:e8:09:f2:8f:e9:ec:ee:a4:47:59:3b:b1:76:
03:e8:88:46:78:82:fb:77:49:32:b5:36:89:b8:aa:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:76:3F:0E:E6:BB:13:C7:94:AF:AE:33:8D:E7:C3:3A:A9:2C:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADB273F67E0611F09C7C8FCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.16.0-45.202.21.255
45.203.56.0/23
45.203.132.0/24
45.203.135.0/24
45.203.245.0/24
45.207.34.0/23
45.207.40.0/23
45.207.43.0/24
45.207.47.0/24
45.207.56.0/24
45.207.58.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:45:46:2c:8b:ef:81:85:c4:66:b9:f9:0f:23:11:4c:c8:45:
94:89:5d:a0:9e:7f:4a:f3:d8:8a:01:3d:de:ac:f2:60:2a:06:
8c:cd:4b:f2:2a:ed:72:83:3e:ca:bc:eb:4b:34:42:0b:f4:cc:
82:1d:e2:af:4c:b1:ef:49:b1:8f:74:85:00:a7:93:61:b0:dc:
77:c0:93:a7:d1:da:1b:ef:78:23:46:38:e6:a1:31:92:d8:33:
35:97:b3:b1:15:36:37:72:8f:66:e1:f7:f4:ac:4c:fa:b4:5f:
31:20:95:b4:17:ad:0e:86:5f:90:d3:b3:85:ef:a0:0c:c4:c5:
ac:40:c7:c5:4e:68:85:3e:71:f4:b3:d6:7d:f5:c4:c2:16:7b:
98:0a:93:12:a2:bb:fb:c9:84:ae:8e:74:22:d0:bd:ae:7c:28:
a3:c3:3f:ff:00:92:49:f2:db:9f:f6:7d:54:01:6d:c5:c3:b8:
6a:c8:48:0d:0c:a7:7d:e1:01:8f:b0:39:5f:b1:3b:72:6f:7e:
a3:9b:87:2f:52:71:59:c6:9d:da:8f:48:10:e0:0f:7f:aa:c8:
68:7f:5b:cc:58:2f:68:93:fd:c9:bc:d1:d9:6a:9b:88:94:61:
2c:60:ac:7f:4c:5e:e7:fb:87:a4:56:2a:55:a8:23:5b:5d:39:
ba:0d:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:16 2025 by rpki-client