Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3AD94E67C711F0BF4CEED1DAE4EC9C.roa
File: 4F3AD94E67C711F0BF4CEED1DAE4EC9C.roa (raw, json)
Hash identifier: zORM2v0AzOmbkJag74LumhHPgKcil0CJqLKO5JosAn8=
Subject key identifier: 5B:4B:A6:CF:89:37:D2:EC:4E:91:A5:E9:20:C2:A2:2F:3B:42:CB:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016700
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3AD94E67C711F0BF4CEED1DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 13:16:58 +0000
ROA not before: Wed 23 Jul 2025 13:16:52 +0000
ROA not after: Tue 09 Sep 2025 13:16:52 +0000
asID: 63139
IP address blocks: 45.197.88.0/24 maxlen: 24
45.197.89.0/24 maxlen: 24
45.197.90.0/24 maxlen: 24
45.197.91.0/24 maxlen: 24
45.197.92.0/24 maxlen: 24
45.197.93.0/24 maxlen: 24
45.197.94.0/24 maxlen: 24
45.197.95.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
45.197.103.0/24 maxlen: 24
45.197.104.0/24 maxlen: 24
45.197.105.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91904 (0x16700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 13:16:52 2025 GMT
Not After : Sep 9 13:16:52 2025 GMT
Subject: CN=6880e0ca-2fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:e1:5f:eb:6e:52:56:76:e6:ac:f6:c1:3d:
a7:e2:6c:a9:a0:11:b2:8b:f5:c1:ef:f7:23:30:0b:
72:a4:25:2a:98:57:31:89:6c:a9:a4:8c:41:0f:c9:
37:33:e4:03:ab:6e:1e:7c:f8:ca:d5:d4:d8:c2:64:
76:47:46:83:74:15:56:2e:a1:99:47:4e:16:2b:77:
82:32:ac:2d:03:30:0e:9d:cd:0c:d3:70:29:d4:65:
92:82:d4:0c:a1:5b:33:c3:39:f1:f5:37:57:d4:7a:
83:74:e4:83:93:b4:d3:2b:82:4c:93:7d:cc:a9:1b:
6b:67:da:bb:d9:97:37:95:10:14:b7:a5:60:93:56:
3a:89:56:7c:4e:54:c7:be:b5:0b:46:15:fb:c8:05:
e3:28:e8:8d:da:b0:b4:dd:78:bf:b7:b0:3a:bd:08:
1a:47:49:f7:4d:e3:82:00:3c:45:b9:55:01:09:07:
e1:89:c1:5d:27:d6:e7:d1:43:81:d4:4c:02:59:f0:
24:90:36:81:f6:e7:a6:36:d6:76:3c:4a:d0:bf:b9:
49:e2:53:1e:f8:5f:b8:0d:26:15:07:c9:11:e9:e8:
bb:73:97:67:15:49:0e:05:50:0d:6e:da:aa:09:f1:
02:cb:58:22:c7:6d:41:9e:3d:9c:dd:09:34:98:fb:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:A6:CF:89:37:D2:EC:4E:91:A5:E9:20:C2:A2:2F:3B:42:CB:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3AD94E67C711F0BF4CEED1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.88.0-45.197.107.255
Signature Algorithm: sha256WithRSAEncryption
04:92:16:2f:af:9b:66:50:e1:01:ef:ce:18:20:7b:fb:c1:90:
60:af:7e:e2:d6:06:35:7e:97:f9:e9:d3:32:7c:b2:3c:58:5c:
95:7a:11:a3:af:eb:cc:67:bd:40:94:b0:20:90:90:9b:24:04:
c6:d5:42:68:2c:74:34:3d:ab:b0:93:a4:4e:5a:62:f2:cf:3f:
a8:3f:fa:cb:ae:bb:00:f9:90:fe:26:ca:d2:c5:8e:3c:d4:51:
f6:0f:28:62:d5:a4:83:b1:5e:84:99:aa:d0:a5:89:5a:a1:85:
8a:2e:57:cc:d0:21:16:d3:b7:4c:85:97:89:66:65:2b:44:5f:
07:84:d3:24:1e:99:0f:7f:10:d4:f8:fa:fb:6c:e9:53:d6:7e:
4b:18:53:f7:c2:ef:71:42:fe:5f:a2:33:2c:70:4a:4e:81:99:
e5:dd:e7:b4:a1:48:0f:f1:df:e8:25:5e:62:8c:08:4d:b9:1e:
a7:41:6f:b0:5e:3d:db:51:89:07:33:7c:5c:b0:c8:1e:06:e0:
ce:92:16:6c:50:b6:fc:ab:2f:b6:30:95:cb:f5:b7:63:4e:2e:
ee:5c:65:26:1b:f3:af:34:6d:2d:c5:b5:43:37:5f:a6:46:be:
c4:2f:b7:1d:4c:9b:f0:81:ba:58:f6:fd:49:d8:08:94:dc:ad:
54:ab:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:19 2025 by rpki-client