Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF55E7B07E6411F0ADF3F9C5DAE4EC9C.roa
File: BF55E7B07E6411F0ADF3F9C5DAE4EC9C.roa (raw, json)
Hash identifier: Dq1DuIBCjwO8x2HAotA4Nqm142+XjwieRG29ZnRQFKY=
Subject key identifier: 04:FE:1F:32:E0:1F:5C:90:19:D6:A5:7B:4C:B6:69:3F:AE:F7:C2:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF55E7B07E6411F0ADF3F9C5DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 07:59:22 +0000
ROA not before: Thu 21 Aug 2025 07:59:17 +0000
ROA not after: Sat 01 Nov 2025 07:59:17 +0000
asID: 150706
IP address blocks: 45.192.162.0/24 maxlen: 24
45.192.172.0/24 maxlen: 24
45.192.173.0/24 maxlen: 24
45.192.174.0/24 maxlen: 24
45.192.182.0/24 maxlen: 24
45.192.183.0/24 maxlen: 24
45.192.184.0/24 maxlen: 24
45.192.186.0/24 maxlen: 24
45.192.187.0/24 maxlen: 24
45.192.188.0/24 maxlen: 24
45.192.189.0/24 maxlen: 24
45.192.190.0/24 maxlen: 24
45.192.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93625 (0x16db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 07:59:17 2025 GMT
Not After : Nov 1 07:59:17 2025 GMT
Subject: CN=68a6d1da-e9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:74:f9:4a:c6:ca:b4:f3:96:fd:e5:96:ba:
a7:f4:1f:3d:19:fa:40:7d:af:41:4c:0e:b7:23:c1:
a2:80:de:04:3c:29:ad:bd:10:4e:f1:08:0f:1c:42:
82:b2:29:5c:fe:d2:44:a8:2d:1f:de:92:b3:d8:9d:
44:70:6a:26:89:ff:c4:3c:1d:c4:60:cd:d4:62:22:
a0:de:94:f4:1a:b4:89:ff:6d:41:31:0f:73:7e:92:
45:a1:08:af:1b:57:07:79:ab:bc:d9:68:27:5c:d5:
a0:c6:b7:98:ad:38:2f:a5:da:57:5b:6b:09:95:89:
a6:4e:94:5f:8d:dd:00:5e:51:19:02:99:cd:cb:ff:
20:79:9d:6d:70:14:87:e4:9f:91:4b:8e:b1:0c:40:
c6:ea:aa:15:04:f7:4f:05:ff:83:d4:9b:34:b3:ef:
4e:a8:89:15:5d:d8:d2:e2:81:87:03:53:e3:c9:0f:
c5:6b:03:f6:29:75:f6:3d:6e:1f:23:81:c4:1a:07:
81:c5:5f:96:36:d9:8e:50:9b:74:a4:b4:61:9b:84:
9c:63:09:e7:81:74:45:f7:3b:b8:c3:c9:78:a6:91:
a3:26:81:34:7f:5d:10:59:e4:ac:d6:24:cd:bc:df:
5a:db:07:9d:06:b1:81:7e:7a:aa:f3:2c:bf:b1:e7:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:1F:32:E0:1F:5C:90:19:D6:A5:7B:4C:B6:69:3F:AE:F7:C2:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF55E7B07E6411F0ADF3F9C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.162.0/24
45.192.172.0-45.192.174.255
45.192.182.0-45.192.184.255
45.192.186.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
b8:9e:ec:08:0c:db:8b:36:06:a8:bd:87:54:ad:65:87:23:82:
ba:69:2b:95:86:17:4b:41:e5:3b:f0:00:77:19:71:e4:5e:1c:
47:ab:0e:1b:7f:e8:e1:fe:0b:3f:09:ab:dd:03:6e:fb:2b:14:
cc:03:dd:ad:ea:72:b7:9b:6f:e4:95:94:70:dc:c4:9a:28:91:
f3:6f:d7:3b:9f:e3:78:de:1c:5d:a4:b5:89:3a:3b:67:82:f1:
73:34:5c:2c:02:b0:2b:17:4b:db:f5:df:7c:38:59:7c:49:bc:
dd:78:c1:04:eb:00:5b:3b:4c:b6:d4:dc:e2:4b:6d:39:a7:d6:
70:f7:ce:d1:70:a3:cf:01:18:79:68:87:69:95:93:75:91:c8:
cf:08:29:21:d5:8d:a1:47:0e:f8:3c:a4:b2:28:30:c5:0e:2f:
74:0a:20:c8:de:1a:d6:a3:75:d0:fd:3f:cf:35:72:cd:5b:b9:
de:d3:a2:43:03:25:ba:33:0a:a8:aa:3f:ce:49:cf:28:19:73:
70:5d:7c:09:4c:67:58:d6:6e:f0:78:12:05:75:a9:19:59:b2:
70:e4:26:00:ee:dc:e5:d2:b2:de:be:c4:7b:b9:1c:a1:b5:83:
11:bb:fe:b9:1e:a3:34:88:49:1a:e1:3a:c2:7b:0b:05:fc:0a:
7f:a5:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:59 2025 by rpki-client