Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4ECC887E0E11F0AB3ECF81DAE4EC9C.roa
File: EC4ECC887E0E11F0AB3ECF81DAE4EC9C.roa (raw, json)
Hash identifier: Kyd/4MW6zywmgoCbM5heF9HFskwy5Ry/145dBnMbgRM=
Subject key identifier: 4F:38:2C:4A:D2:E5:F9:F1:98:0C:00:BE:3C:50:6F:62:09:1C:2E:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016CE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4ECC887E0E11F0AB3ECF81DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 21:45:01 +0000
ROA not before: Wed 20 Aug 2025 21:44:56 +0000
ROA not after: Wed 05 Jul 2028 21:44:56 +0000
asID: 17561
IP address blocks: 45.206.168.0/24 maxlen: 24
45.206.169.0/24 maxlen: 24
45.206.170.0/24 maxlen: 24
45.206.171.0/24 maxlen: 24
45.206.172.0/24 maxlen: 24
45.206.173.0/24 maxlen: 24
45.206.174.0/24 maxlen: 24
45.206.175.0/24 maxlen: 24
45.206.176.0/24 maxlen: 24
45.206.177.0/24 maxlen: 24
45.206.178.0/24 maxlen: 24
45.206.179.0/24 maxlen: 24
45.206.180.0/24 maxlen: 24
45.206.181.0/24 maxlen: 24
45.206.182.0/24 maxlen: 24
45.206.183.0/24 maxlen: 24
45.206.184.0/24 maxlen: 24
45.206.185.0/24 maxlen: 24
45.206.186.0/24 maxlen: 24
45.206.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93408 (0x16ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 21:44:56 2025 GMT
Not After : Jul 5 21:44:56 2028 GMT
Subject: CN=68a641dd-8ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:55:f8:c4:e0:17:19:fe:75:6e:f3:da:e9:
79:d2:f3:79:31:60:72:15:f5:e7:18:92:64:a8:64:
84:32:d8:e7:42:42:fe:ef:64:60:83:02:79:ed:65:
e6:04:52:ed:c4:be:07:e9:b4:0a:5e:d1:ba:cd:5c:
88:40:40:31:d5:44:15:9e:60:4a:c5:11:2f:c5:57:
cc:1f:04:d6:26:38:ea:5f:53:a5:21:01:92:7e:c5:
4c:7d:35:b5:db:a6:fd:c8:c4:c0:b2:42:82:0c:b7:
7d:15:09:56:7b:31:90:e0:62:0b:fe:ce:f8:3c:d7:
04:9a:ef:48:ca:73:13:37:49:a8:06:35:17:c8:7d:
84:93:b8:96:60:54:db:d4:00:dd:34:5c:a4:79:69:
ae:69:35:3b:18:29:38:27:6a:1f:53:39:16:5e:35:
66:7c:1d:f5:8d:89:bb:74:07:cc:65:73:b3:1a:e5:
a3:18:ff:96:40:b3:9f:a8:d2:3a:c8:e5:04:88:5b:
c4:81:94:08:9c:34:5e:57:1a:d8:b5:2b:19:63:0e:
32:1d:5b:f7:e2:94:35:e0:d8:1e:78:dd:6f:f9:87:
56:5b:98:05:13:60:9a:9d:4c:45:5f:43:8c:31:8a:
8e:dd:8e:38:a4:f3:d8:27:2c:45:df:5e:68:01:2c:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:2C:4A:D2:E5:F9:F1:98:0C:00:BE:3C:50:6F:62:09:1C:2E:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC4ECC887E0E11F0AB3ECF81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.168.0-45.206.187.255
Signature Algorithm: sha256WithRSAEncryption
0b:18:ab:21:f8:87:94:05:3c:88:b5:d3:b6:0a:c0:86:b8:dc:
71:e4:93:5f:86:3c:c6:bd:ff:de:76:e0:41:b1:f4:f6:2f:02:
73:5f:45:1b:09:23:59:85:af:3e:3e:f8:1a:51:08:cd:51:e0:
96:cf:42:6a:0a:5f:ab:71:fe:53:6c:04:75:5e:d5:46:ae:df:
b4:fe:ea:33:2c:d2:9d:fe:1a:9f:3e:40:c2:f7:34:0a:e8:a5:
d3:96:7b:25:fc:17:44:22:16:df:5e:ee:d6:64:5d:3b:b9:6f:
d4:38:06:90:6d:e9:8e:51:6d:82:56:b8:3e:fa:69:d7:c4:83:
a1:d4:35:8b:fb:a2:31:ce:68:0d:2b:c4:cd:2c:08:b4:7c:ab:
61:34:fd:ec:f8:17:19:c1:43:5d:a3:0b:c7:cb:57:45:a6:c0:
74:da:c4:e5:da:2d:73:88:28:87:fb:09:50:bc:45:80:0f:02:
45:3f:14:6e:1b:37:df:15:bb:47:bc:f3:39:ec:9b:63:47:6d:
63:f9:7d:e7:e4:d7:43:e7:cb:8f:20:8c:b6:20:d2:4f:b9:c7:
74:66:a3:22:33:25:da:cb:bc:8b:82:73:1b:5c:0d:85:db:14:
e7:40:e8:22:11:fd:60:b6:46:b8:7c:b8:09:01:76:e5:6f:01:
b8:6e:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:59:58 2025 by rpki-client