Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD4BFE407E5A11F08683AD84DAE4EC9C.roa
File: CD4BFE407E5A11F08683AD84DAE4EC9C.roa (raw, json)
Hash identifier: PAWOrpLiQKrJ9YIV/jYlCU+NTQ6hJFUYGA4TMKrM2k4=
Subject key identifier: 9E:49:9A:2B:15:36:27:76:BC:7F:21:CD:8C:74:0A:91:56:1C:22:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD4BFE407E5A11F08683AD84DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 06:48:11 +0000
ROA not before: Thu 21 Aug 2025 06:48:06 +0000
ROA not after: Sat 01 Nov 2025 06:48:06 +0000
asID: 150706
IP address blocks: 45.192.160.0/24 maxlen: 24
45.192.161.0/24 maxlen: 24
45.192.163.0/24 maxlen: 24
45.192.175.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
45.192.181.0/24 maxlen: 24
45.192.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93612 (0x16dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 06:48:06 2025 GMT
Not After : Nov 1 06:48:06 2025 GMT
Subject: CN=68a6c12b-ad0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:93:fe:07:69:e5:07:4e:0f:58:a8:8d:3a:
d2:02:5f:64:de:c2:1e:63:1d:ca:e9:65:d9:3a:b8:
d3:62:95:d5:e5:91:2e:ac:6d:68:87:4c:af:a4:bc:
85:73:c3:fd:8f:ea:38:39:4a:77:89:1a:e5:84:39:
18:b5:63:79:07:55:51:34:18:2d:f6:2a:32:5c:60:
bd:46:23:cc:3c:34:56:07:94:a0:fc:8a:08:11:d1:
0b:5a:f4:7f:48:c5:77:e9:4a:b4:ea:7a:0f:ac:0c:
16:a6:3e:67:e9:cc:e3:f3:05:95:f0:0a:b3:eb:c9:
c1:ab:49:d2:1d:a0:5d:64:83:ba:72:10:0f:2e:af:
25:5b:8e:67:53:44:5f:40:51:74:7a:21:61:31:ea:
60:61:ec:70:72:ac:8b:b5:66:ee:d3:9a:24:f4:59:
4b:34:27:12:57:af:86:75:f4:0e:00:a9:19:89:06:
37:89:88:fd:bf:9a:da:15:66:22:73:ba:b1:6e:44:
ef:a6:5a:aa:53:1b:aa:68:18:e8:8f:f7:92:51:29:
dc:44:2e:3a:5e:ab:d1:55:94:0d:9b:a5:31:b5:7b:
4b:95:f7:06:61:51:17:dc:36:06:90:1d:22:f9:f0:
4f:da:16:14:80:bf:51:2b:37:d3:af:6c:6a:ac:e3:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:9A:2B:15:36:27:76:BC:7F:21:CD:8C:74:0A:91:56:1C:22:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD4BFE407E5A11F08683AD84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/23
45.192.163.0/24
45.192.175.0/24
45.192.180.0/23
45.192.185.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:19:c0:6a:dc:ba:f5:dd:d1:94:56:c1:d9:68:41:94:61:4a:
2c:1b:aa:b5:ef:45:d9:02:3e:39:bc:7d:10:66:3a:c5:c7:71:
f4:73:7a:b9:4e:d9:51:6e:3f:9e:be:b3:bf:e8:ed:6a:33:0b:
9d:46:6e:69:90:2d:88:98:af:6a:2a:fc:ab:a4:3a:4b:d1:d0:
4b:45:6d:ac:ff:a0:1a:c2:e7:de:bf:ec:42:be:47:27:65:55:
42:34:ac:d3:6f:92:96:1f:f0:62:67:f1:8d:77:89:b9:7e:91:
d9:d0:1e:9c:c4:bc:0c:8e:bc:08:fe:a0:1c:ee:0c:c7:4e:0d:
35:3c:54:85:46:d2:42:77:b6:40:c8:d9:1f:5a:e2:c6:90:4c:
37:af:10:5a:95:78:34:32:f1:eb:e8:34:af:c6:c0:f6:61:a0:
6b:74:c5:47:9d:83:f7:bd:c4:3d:49:57:4a:9b:30:89:a8:bd:
ce:e5:22:69:4e:f2:3d:45:45:53:9b:45:2e:18:a4:8e:3e:7b:
90:b0:05:0e:ef:bf:0c:01:89:0c:f5:f9:22:59:1f:d3:3f:b7:
9b:3b:a2:84:31:a8:52:e7:40:c8:2e:24:b5:da:a3:49:2e:12:
2a:23:fe:75:d7:2e:0f:fc:79:a9:34:f1:fa:28:af:b6:64:0a:
bc:13:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:15:16 2025 by rpki-client