Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F76055F67E1D11F0AFBA2AE0DAE4EC9C.roa
File: F76055F67E1D11F0AFBA2AE0DAE4EC9C.roa (raw, json)
Hash identifier: BNnyNukK47jI0DlRb1zVR5P9KBuwbFqsXEM0WYRfEAI=
Subject key identifier: C0:C5:66:35:3B:90:00:BD:54:8B:AF:DC:33:D9:12:F9:90:4A:00:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016D1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F76055F67E1D11F0AFBA2AE0DAE4EC9C.roa
Signing time: Wed 20 Aug 2025 23:32:42 +0000
ROA not before: Wed 20 Aug 2025 23:32:37 +0000
ROA not after: Sun 20 Aug 2028 23:32:37 +0000
asID: 17561
IP address blocks: 45.194.85.0/24 maxlen: 24
45.194.94.0/24 maxlen: 24
45.196.101.0/24 maxlen: 24
45.196.102.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.49.0/24 maxlen: 24
45.201.50.0/24 maxlen: 24
45.201.51.0/24 maxlen: 24
45.201.52.0/24 maxlen: 24
45.201.53.0/24 maxlen: 24
45.201.54.0/24 maxlen: 24
45.201.55.0/24 maxlen: 24
45.201.56.0/24 maxlen: 24
45.201.57.0/24 maxlen: 24
45.201.58.0/24 maxlen: 24
45.201.59.0/24 maxlen: 24
45.201.60.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
45.201.62.0/24 maxlen: 24
45.201.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93466 (0x16d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 23:32:37 2025 GMT
Not After : Aug 20 23:32:37 2028 GMT
Subject: CN=68a65b1a-37a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:98:c9:c0:5e:fc:d0:0d:04:49:cb:b8:37:
9d:c0:ce:de:8f:90:d8:e0:5c:dd:ca:5b:87:95:28:
3e:1b:ec:46:d0:73:c6:15:01:f5:3d:2f:33:bd:2d:
20:c7:ac:9d:10:b8:49:b7:e9:59:df:04:ad:32:29:
98:ca:4b:c7:6b:8c:9a:5a:f7:01:d8:b9:a6:8c:96:
12:f6:17:12:04:16:a7:e4:03:5b:c2:ec:c7:5c:b0:
6f:79:d4:65:ed:e9:36:20:84:fe:ae:14:2c:64:39:
2e:b7:d0:5b:29:06:ea:6c:da:7a:89:eb:80:7c:33:
9e:19:58:dd:26:e0:d1:eb:3c:4c:52:3a:40:f2:e7:
bc:13:73:da:e2:df:21:e9:cb:86:3c:14:40:08:55:
07:03:ef:20:e6:ba:19:85:34:c7:d7:ce:ff:81:27:
d2:7f:30:8a:8b:97:b5:56:99:12:30:93:ad:ba:90:
7f:75:4f:e8:7e:c8:3f:25:94:fb:84:8e:81:2a:59:
f6:98:e5:e3:d0:60:05:b5:5b:54:9b:98:48:5e:f5:
cb:ce:e8:1f:94:dd:d8:9e:e5:2c:00:16:e0:c1:c0:
56:d0:71:90:9b:a3:54:e6:b2:5d:12:ad:71:b6:99:
9b:7a:6f:d9:95:b8:5a:69:fc:18:80:92:db:c8:c6:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:66:35:3B:90:00:BD:54:8B:AF:DC:33:D9:12:F9:90:4A:00:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F76055F67E1D11F0AFBA2AE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.194.94.0/24
45.196.101.0-45.196.102.255
45.201.48.0/20
Signature Algorithm: sha256WithRSAEncryption
02:ad:05:1b:44:6a:2f:56:da:2f:3b:c1:46:bb:c0:4c:db:7e:
14:6b:5c:9b:45:d0:a7:96:ac:ea:25:c0:8a:57:4e:6f:3b:6e:
74:8a:e1:54:ec:3a:84:53:27:11:60:c9:70:53:de:5c:69:8d:
ee:a1:c3:69:43:6f:b6:be:80:aa:bd:ce:ab:12:40:e2:fb:71:
03:0f:5e:a8:39:a7:d8:8c:0b:b1:84:67:f3:72:2d:6d:a5:9d:
e3:69:94:3a:21:6e:53:3d:e2:29:56:9d:ec:83:9b:df:78:ca:
a3:9e:4c:fc:c5:c6:87:3a:af:45:ff:22:03:8a:5b:e1:d9:ec:
25:cf:cc:12:13:4e:d4:27:83:4f:e2:62:b2:5c:ea:87:7c:46:
8f:f4:dd:5d:3d:7b:0a:58:8b:f2:d6:d8:34:d9:11:68:b4:c4:
84:c7:49:8c:92:8b:54:c8:0e:8d:56:26:aa:dd:d3:e1:29:b5:
3c:37:1a:29:58:f3:a0:4f:37:e9:54:f7:59:ef:13:d9:75:43:
54:37:d4:d7:df:75:ce:13:84:e4:f2:8c:18:ee:98:04:cd:01:
ea:bc:86:da:16:cc:5d:25:c9:af:d4:88:f7:8c:58:7c:f1:27:
35:a0:49:7c:1b:44:70:20:02:6d:aa:76:b8:81:e7:42:02:f5:
7d:4d:ce:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:17 2025 by rpki-client