Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0ED94147E0011F08855A8A6DAE4EC9C.roa
File: D0ED94147E0011F08855A8A6DAE4EC9C.roa (raw, json)
Hash identifier: Ol+PpJrd2RX1RBzyrvzwHzcIDenBI62htASKNe6ZuS8=
Subject key identifier: 76:A3:B0:B4:E3:09:03:1F:FD:A1:3E:6D:89:E3:5E:5B:C6:23:AA:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0ED94147E0011F08855A8A6DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 20:04:02 +0000
ROA not before: Wed 20 Aug 2025 20:03:57 +0000
ROA not after: Tue 06 Jun 2028 20:03:57 +0000
asID: 17561
IP address blocks: 45.194.79.0/24 maxlen: 24
45.194.91.0/24 maxlen: 24
45.194.92.0/24 maxlen: 24
45.194.123.0/24 maxlen: 24
45.194.124.0/24 maxlen: 24
45.194.125.0/24 maxlen: 24
45.194.126.0/24 maxlen: 24
45.194.127.0/24 maxlen: 24
45.196.109.0/24 maxlen: 24
45.198.67.0/24 maxlen: 24
45.198.72.0/24 maxlen: 24
45.198.73.0/24 maxlen: 24
45.202.69.0/24 maxlen: 24
45.204.145.0/24 maxlen: 24
45.204.153.0/24 maxlen: 24
45.204.172.0/24 maxlen: 24
45.204.176.0/24 maxlen: 24
45.204.178.0/24 maxlen: 24
45.204.179.0/24 maxlen: 24
45.204.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93365 (0x16cb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 20:03:57 2025 GMT
Not After : Jun 6 20:03:57 2028 GMT
Subject: CN=68a62a32-aac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:4f:08:85:68:91:5f:7d:de:fd:14:8a:4a:
c5:f1:8d:f1:dd:a1:e3:31:58:8d:68:99:ee:ea:33:
95:84:82:92:15:82:5a:6e:b2:ad:a7:69:e6:3a:41:
e2:ee:da:af:02:01:ac:07:df:03:24:cc:f5:7e:f3:
ab:57:f2:8a:96:65:5b:fb:c8:bb:21:49:24:27:d0:
2d:27:72:e5:e0:16:72:ba:e7:45:6c:39:df:6d:62:
92:38:ed:b8:79:a1:15:78:f7:03:d8:23:17:70:02:
2e:e4:68:1b:ee:41:1f:25:ac:50:b0:d4:c6:50:7b:
38:82:fb:8e:ab:fb:5c:96:cb:a9:7e:ac:47:59:8e:
2a:35:5d:a7:ad:cf:15:3a:12:4f:e4:3a:94:5a:47:
d2:03:63:3b:ba:88:0a:e4:4c:43:8c:83:cd:f1:e5:
cb:28:8f:a1:7a:41:6e:6d:19:47:39:f3:84:9e:7e:
81:d1:9e:4d:fd:30:9e:5c:c8:81:7f:0c:49:22:fa:
91:cb:30:06:5d:22:44:0a:dd:c8:eb:1b:b5:0d:4a:
11:d0:ba:b0:7d:cc:76:29:48:c6:5c:93:88:51:46:
85:56:84:7e:52:53:2e:c8:e1:4c:58:67:f7:99:85:
f2:5b:3c:69:cc:ec:d1:7e:6c:14:62:6d:83:da:dd:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A3:B0:B4:E3:09:03:1F:FD:A1:3E:6D:89:E3:5E:5B:C6:23:AA:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0ED94147E0011F08855A8A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.79.0/24
45.194.91.0-45.194.92.255
45.194.123.0-45.194.127.255
45.196.109.0/24
45.198.67.0/24
45.198.72.0/23
45.202.69.0/24
45.204.145.0/24
45.204.153.0/24
45.204.172.0/24
45.204.176.0/24
45.204.178.0-45.204.180.255
Signature Algorithm: sha256WithRSAEncryption
36:30:3f:d3:23:5b:3c:1a:96:b9:fb:f3:c2:d4:07:38:81:e4:
11:52:6e:c0:3b:0b:1b:b9:e2:0f:0f:bc:d9:95:e4:67:00:a5:
3b:7b:8e:06:2a:b0:fb:0d:f2:b4:93:dd:fb:fd:93:4f:c4:39:
9f:9a:fe:d5:8f:05:dc:4b:ab:a7:6e:ee:72:8a:32:30:fa:0c:
4b:35:ba:32:a1:c9:b5:e4:7d:db:cf:92:64:58:bc:ff:34:19:
19:10:0b:41:5a:1b:1d:a3:2d:f8:35:4b:a1:2f:f5:b7:cb:c6:
c8:3a:f8:c8:ad:af:da:e8:b5:c9:6b:e7:7d:9b:4f:02:45:5e:
fc:f5:67:f3:fc:c9:02:94:19:ed:f6:44:4e:e7:f1:06:5e:48:
ce:35:0e:bf:bd:29:98:7f:a8:07:81:f7:ff:3f:63:cb:fd:1f:
2c:a3:5b:ec:7b:24:01:5b:19:fc:0a:eb:4e:23:cd:4f:69:12:
8c:e7:71:99:2a:8d:ad:f0:af:0d:f2:8a:b8:b1:20:0a:42:1c:
97:49:58:55:6a:e3:06:10:4e:d4:36:7f:2a:d7:20:fd:a9:58:
ff:1b:88:b3:52:70:0f:de:b0:2d:91:4b:08:76:38:81:89:0d:
b4:07:c6:97:cd:3b:02:d7:2d:70:c3:40:5e:d8:f1:ab:d9:c9:
73:7a:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:01 2025 by rpki-client