Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE52A9BA511811F0AC44B7C3DAE4EC9C.roa
File: DE52A9BA511811F0AC44B7C3DAE4EC9C.roa (raw, json)
Hash identifier: um3hs53B3IRFYAhw9bg50e0+XpEHKynWJcxIdrizf3E=
Subject key identifier: AC:D5:D5:CC:89:6D:51:D2:5D:44:1E:92:54:24:11:9A:CA:95:8A:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE52A9BA511811F0AC44B7C3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 16:32:50 +0000
ROA not before: Tue 24 Jun 2025 16:32:46 +0000
ROA not after: Fri 08 Aug 2025 16:32:46 +0000
asID: 44559
IP address blocks: 45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89736 (0x15e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 16:32:46 2025 GMT
Not After : Aug 8 16:32:46 2025 GMT
Subject: CN=685ad332-638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:a7:0b:fd:b4:c7:ba:e8:bd:61:6a:cc:4f:
ee:58:7e:7b:09:af:2d:ce:8a:51:f3:10:6e:33:c7:
f4:d6:c3:cf:e3:f9:cc:96:84:50:34:77:b3:41:ca:
61:81:e0:79:82:7f:fe:90:6b:5b:a7:cd:eb:52:48:
d8:55:cc:d6:6d:c0:e7:81:9c:a8:93:e2:a0:29:16:
3e:87:ec:d1:7b:f1:72:23:64:d5:e9:e8:2c:75:62:
95:bb:bf:51:ad:ae:c2:61:18:f1:43:ce:c8:96:c7:
22:a4:e7:a7:2a:d8:6c:1e:7b:99:0d:5b:af:9c:7b:
de:97:3c:eb:1a:16:eb:66:a0:d5:a0:01:1b:fa:0d:
c7:65:8d:7e:4e:57:ef:bd:6f:a7:5c:d4:fa:43:20:
ca:4e:41:4d:7d:cc:ac:18:bd:89:78:1a:58:1b:08:
7d:12:94:97:2f:03:5c:b7:19:08:52:fa:e2:b6:51:
14:24:3d:12:0e:1c:8c:b1:d2:86:d1:8b:8b:4d:be:
7d:a2:1d:a9:d4:f5:04:e8:02:fa:79:d4:b7:11:f1:
c0:09:40:62:2c:67:30:f0:32:bd:a3:62:44:7b:57:
a2:8c:a4:f1:81:c5:07:95:b4:61:2a:9d:77:f3:e5:
28:e3:6d:6a:ba:c7:cf:16:18:a1:dc:48:a4:16:be:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D5:D5:CC:89:6D:51:D2:5D:44:1E:92:54:24:11:9A:CA:95:8A:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE52A9BA511811F0AC44B7C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.201.0-45.202.202.255
45.202.205.0-45.202.208.255
45.202.213.0/24
45.204.65.0/24
45.204.73.0/24
45.204.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:34:97:a8:73:3b:c8:dd:df:7b:1c:65:86:c4:0b:ad:62:f0:
04:a0:ab:4e:7e:b7:a9:32:29:3d:1f:99:3d:6d:2e:d0:92:32:
ff:5b:e4:63:20:02:c0:f0:dd:3a:28:62:9b:ca:57:f5:d6:bd:
3e:57:7e:60:2c:24:d8:e8:22:1e:b8:e4:32:01:35:33:5d:53:
c5:6f:83:e8:ff:88:2c:0f:75:87:cf:dd:3a:03:8a:cc:ba:84:
ea:d5:6f:f6:a1:84:53:77:f1:66:f1:8e:56:5c:d3:dd:c3:b5:
df:04:98:05:50:f6:88:d6:e8:30:6d:38:27:7a:a7:6f:b0:ff:
3a:1b:94:94:d9:bb:b1:cf:88:54:06:1a:a9:78:58:2a:b6:9f:
c1:67:47:ce:38:ed:14:b6:f4:89:de:bc:02:dc:52:c0:cb:11:
ee:e6:5f:5d:4c:9d:40:c8:0b:12:08:3e:ee:b2:2d:41:4c:a5:
0b:8d:df:46:f5:fd:73:2c:35:4b:72:f1:21:bf:66:04:e2:0d:
82:98:f1:f0:fb:c5:47:cb:a6:09:a2:78:2c:90:cc:c8:e9:29:
a7:61:6e:63:d2:04:09:1e:b6:eb:00:f2:a9:89:3e:dc:3f:18:
16:0e:36:5e:68:50:3d:e7:d8:76:59:e8:db:34:58:c4:7f:85:
2a:9b:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:05:09 2025 by rpki-client