Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6DD6DA6781E11F0869E90CDDAE4EC9C.roa
File: C6DD6DA6781E11F0869E90CDDAE4EC9C.roa (raw, json)
Hash identifier: 1pBlkIrIofq+02+QGre7nQneaBfxO0EYFEut+DJmcTk=
Subject key identifier: C8:4A:E1:75:B6:00:CE:CD:73:C0:F1:B6:90:DD:8A:76:15:56:7A:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6DD6DA6781E11F0869E90CDDAE4EC9C.roa
Signing time: Wed 13 Aug 2025 08:23:23 +0000
ROA not before: Wed 13 Aug 2025 08:23:17 +0000
ROA not after: Wed 17 Sep 2025 08:23:17 +0000
asID: 22773
IP address blocks: 45.192.4.0/22 maxlen: 24
45.192.24.0/21 maxlen: 24
45.194.72.0/23 maxlen: 24
45.194.75.0/24 maxlen: 24
45.194.76.0/23 maxlen: 24
45.194.78.0/24 maxlen: 24
45.194.82.0/24 maxlen: 24
45.194.84.0/24 maxlen: 24
45.194.121.0/24 maxlen: 24
45.196.116.0/22 maxlen: 24
45.197.28.0/22 maxlen: 24
45.202.106.0/24 maxlen: 24
45.206.80.0/20 maxlen: 24
45.206.96.0/19 maxlen: 24
45.207.27.0/24 maxlen: 24
45.207.29.0/24 maxlen: 24
45.207.31.0/24 maxlen: 24
45.207.45.0/24 maxlen: 24
45.207.166.0/24 maxlen: 24
45.207.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92829 (0x16a9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 08:23:17 2025 GMT
Not After : Sep 17 08:23:17 2025 GMT
Subject: CN=689c4b7b-103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:9e:02:5c:94:13:f8:97:fa:ef:1b:a2:b8:
46:3f:98:2c:0d:61:c8:21:6d:54:ee:86:aa:15:f3:
48:9d:5d:53:ff:e9:be:1f:34:58:31:6b:68:34:73:
58:09:44:b1:8c:91:ac:34:82:ee:77:47:98:cc:fd:
d1:de:95:4f:fb:ed:89:62:72:76:93:6c:28:f4:fb:
e3:f7:30:a0:f0:02:29:f4:14:8b:23:50:2b:6b:12:
df:6d:4d:4e:34:49:6e:e2:e6:8d:0f:05:be:34:ac:
ec:98:f3:2c:98:7f:e7:04:37:70:0f:ce:28:d0:b5:
95:d6:20:fd:89:b0:cb:7b:d0:05:43:d3:2c:bd:08:
e1:84:95:c8:29:89:ff:6c:17:ca:0d:35:18:98:63:
78:dd:fa:da:37:52:05:e0:07:72:93:57:42:bc:89:
50:0f:f6:fc:ab:ee:a4:48:40:08:10:a7:ec:de:f7:
aa:ea:5d:b0:e5:8a:4a:8f:0c:92:13:dc:a2:60:32:
4a:ab:71:71:3e:a9:5f:db:c9:16:6d:52:5c:45:cf:
ef:e2:cf:31:e0:1d:7e:c5:53:be:a7:76:7a:6c:ea:
3b:ed:ca:de:49:25:f5:a8:c8:22:b7:fd:04:60:87:
14:37:9b:75:cc:d2:4c:46:d4:37:02:5a:f5:18:d8:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:E1:75:B6:00:CE:CD:73:C0:F1:B6:90:DD:8A:76:15:56:7A:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6DD6DA6781E11F0869E90CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.4.0/22
45.192.24.0/21
45.194.72.0/23
45.194.75.0-45.194.78.255
45.194.82.0/24
45.194.84.0/24
45.194.121.0/24
45.196.116.0/22
45.197.28.0/22
45.202.106.0/24
45.206.80.0-45.206.127.255
45.207.27.0/24
45.207.29.0/24
45.207.31.0/24
45.207.45.0/24
45.207.166.0/24
45.207.176.0/20
Signature Algorithm: sha256WithRSAEncryption
06:13:bd:61:3f:74:a9:a6:79:fc:aa:ec:f9:3f:f8:04:c4:27:
17:13:0e:c3:63:1c:f7:6f:7a:e6:f3:cc:c2:3e:df:df:b9:62:
1d:19:76:a1:c5:9b:61:a7:50:68:d2:21:f7:c5:db:c6:7c:e3:
31:f5:91:68:b4:09:06:a0:07:57:15:23:c7:ae:a2:cf:d7:fb:
81:77:88:23:79:2a:c0:d7:1b:dd:12:d5:87:a0:e4:22:95:42:
9c:3c:dd:be:68:ec:14:af:4c:24:8c:24:66:21:9b:b4:fb:1d:
eb:5a:72:82:2f:c7:5b:ad:9a:04:95:f2:a0:1f:9a:88:99:28:
99:31:88:de:0c:2c:ec:0e:31:8a:63:df:b1:0c:1b:ce:7d:fc:
b6:d8:ee:e4:da:ab:4c:83:8d:0f:13:5e:34:13:79:91:bc:3e:
d7:31:c6:e9:f7:01:c8:65:eb:7c:fd:d8:c7:e1:ab:3e:1f:85:
55:7d:61:57:d9:ae:5a:b6:1a:83:ff:82:8c:30:f5:43:0a:e6:
74:69:b7:45:f9:d8:05:ce:b8:84:4a:07:d5:c0:d9:3e:c5:6b:
23:9a:73:a0:a3:98:0b:e2:95:52:52:ec:6b:8e:6c:5c:2e:f9:
77:c7:67:c0:03:4c:2f:cb:cd:f3:52:ef:1c:3b:a9:b0:ca:2f:
f8:a0:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:54 2025 by rpki-client