Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E02C75B6752311F0B70694D8DAE4EC9C.roa
File: E02C75B6752311F0B70694D8DAE4EC9C.roa (raw, json)
Hash identifier: HQkAOKLoVDJfoY8Mt+cv3cadkdnOXEWeQnfgIesPv6s=
Subject key identifier: 77:A1:91:3A:ED:3B:EB:B0:19:7F:BE:9A:6B:1E:C2:F5:CE:82:3D:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E02C75B6752311F0B70694D8DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 13:22:20 +0000
ROA not before: Sat 09 Aug 2025 13:22:13 +0000
ROA not after: Mon 15 Sep 2025 13:22:13 +0000
asID: 54801
IP address blocks: 45.194.85.0/24 maxlen: 24
45.195.60.0/24 maxlen: 24
45.195.192.0/24 maxlen: 24
45.195.196.0/24 maxlen: 24
45.195.197.0/24 maxlen: 24
45.197.1.0/24 maxlen: 24
45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92621 (0x169cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 13:22:13 2025 GMT
Not After : Sep 15 13:22:13 2025 GMT
Subject: CN=68974b8c-6f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:2d:d8:a1:3f:18:fe:7a:d5:3d:cf:2b:13:
d9:74:e4:55:f6:01:fc:52:26:68:a2:c3:25:c1:e7:
46:a4:1e:e0:44:77:84:42:03:e8:f1:13:2c:1d:ad:
c7:bc:02:b8:5f:95:ea:31:80:15:86:5f:34:c5:07:
3d:b4:57:8a:b6:36:6e:09:25:4f:c5:32:dd:4a:2c:
fd:83:b6:ef:64:af:65:27:49:cb:57:71:21:55:03:
ec:20:8e:5e:49:c4:30:0b:9f:49:d4:58:01:e0:96:
75:68:27:06:8c:5c:06:26:0f:9b:55:1c:bc:be:36:
b9:5e:53:be:db:9a:da:64:40:0a:e0:5d:b7:41:55:
73:a8:8e:93:3c:e9:d3:b2:dd:78:88:ec:f1:42:72:
a5:ab:33:50:31:c9:53:2d:d2:1d:a4:4a:70:95:c9:
58:68:bd:5a:03:5b:6a:71:18:9e:c0:6a:da:46:e9:
3c:76:ed:0e:e4:20:ec:cb:2c:e1:20:cc:53:63:e6:
a4:53:92:9c:39:82:6c:49:16:e8:4a:70:1c:d4:0b:
2e:4d:bf:a5:14:29:3a:e2:f2:8b:f1:c2:ee:9b:26:
e9:66:77:07:6b:e9:e0:14:a2:be:92:b8:6b:82:59:
72:28:90:61:c0:6b:9a:1f:7d:6b:3e:2c:78:be:4d:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:91:3A:ED:3B:EB:B0:19:7F:BE:9A:6B:1E:C2:F5:CE:82:3D:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E02C75B6752311F0B70694D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.195.60.0/24
45.195.192.0/24
45.195.196.0/23
45.197.1.0-45.197.2.255
45.197.4.0/23
45.199.191.0/24
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a8:78:63:fe:a4:99:8a:26:e8:dc:4e:2c:38:1f:0c:2c:0d:
68:33:e5:bf:ad:2e:83:d2:f1:e7:9d:60:ca:ff:d8:1a:31:14:
b5:a4:eb:e0:4a:06:6d:b3:5d:ea:23:ec:40:9d:7a:fa:ca:e5:
60:51:b2:7e:54:e6:69:c0:f6:b8:99:f7:5e:76:22:36:66:9a:
ce:db:17:ae:40:81:09:b6:64:1c:0b:4d:c0:05:4c:30:94:38:
6f:09:99:3d:79:c1:59:52:47:71:8a:59:58:03:8f:6f:c7:25:
c5:56:70:51:7c:4f:3c:9f:11:6c:51:42:f1:6c:e7:87:e8:41:
ee:be:92:be:85:78:37:af:f2:9b:f8:3c:fc:67:9c:cd:9e:a8:
ca:d1:af:89:28:51:ae:cd:50:7f:79:00:ff:50:c1:85:40:1b:
e4:10:05:05:f5:97:5e:4c:c3:c6:d0:ed:e8:d0:4d:be:56:4b:
d7:cf:27:53:ae:5e:13:b7:1e:61:4d:fd:f7:30:cf:b4:ca:9e:
72:10:17:1b:13:f1:e5:04:37:4a:d9:c2:c8:69:e6:6c:70:6d:
42:33:8c:3b:07:d5:b7:d8:0c:40:8f:4e:84:ab:3b:2a:c3:4f:
22:3f:49:3e:60:01:14:1c:03:a2:12:80:81:13:7c:5e:f8:0f:
0f:9d:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:25:11 2025 by rpki-client