Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A05EBE067AA11F0B5692B9ADAE4EC9C.roa
File: 7A05EBE067AA11F0B5692B9ADAE4EC9C.roa (raw, json)
Hash identifier: hsXl9WA8i1VMYwA+SenKiqdDKxUp032WXDiORTyueEw=
Subject key identifier: 79:7C:D0:26:35:6E:4F:5D:8F:E8:F4:54:34:63:61:F7:24:AA:D2:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0166BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A05EBE067AA11F0B5692B9ADAE4EC9C.roa
Signing time: Wed 23 Jul 2025 09:50:34 +0000
ROA not before: Wed 23 Jul 2025 09:50:29 +0000
ROA not after: Fri 29 Aug 2025 09:50:29 +0000
asID: 214143
IP address blocks: 45.195.3.0/24 maxlen: 24
45.197.135.0/24 maxlen: 24
45.198.69.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.81.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.198.89.0/24 maxlen: 24
45.198.90.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.104.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.112.0/24 maxlen: 24
45.198.138.0/24 maxlen: 24
45.198.163.0/24 maxlen: 24
45.198.168.0/24 maxlen: 24
45.198.176.0/24 maxlen: 24
45.198.181.0/24 maxlen: 24
45.206.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91839 (0x166bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 09:50:29 2025 GMT
Not After : Aug 29 09:50:29 2025 GMT
Subject: CN=6880b06a-ded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:38:4b:7f:a9:a9:54:53:af:47:d0:4e:63:
b2:2c:4b:90:96:22:96:ad:28:ee:39:83:15:19:c1:
07:86:ce:a3:e1:70:84:1c:84:d6:1c:71:fb:6d:b2:
11:2e:73:76:6e:1f:02:cd:b3:43:79:dd:d6:4e:a5:
69:41:9d:c8:ee:51:11:6d:57:cc:77:4c:7f:a8:b5:
bd:c1:c3:ea:88:f3:df:76:31:e3:35:67:d9:cb:de:
20:ea:d9:e3:f8:2f:2a:98:97:27:f7:51:1b:4c:82:
ec:6f:ed:12:b8:79:45:da:f6:50:ad:b9:58:1f:92:
49:cd:16:a5:77:33:39:5f:4d:1d:8a:dc:61:d0:1b:
e3:48:b9:02:72:22:07:c5:54:e0:7e:81:12:07:7c:
d2:85:bc:c1:c5:55:57:7d:27:da:eb:f8:57:70:88:
5f:87:bf:53:ec:48:09:93:73:39:4c:78:fb:09:d0:
76:9c:84:91:d7:2a:1a:1f:3c:60:60:b0:a6:bd:8b:
b1:0f:cf:c6:4a:e5:5c:ea:2f:7a:9f:36:b7:50:80:
1c:6e:55:9a:7f:ca:6e:e6:f4:2a:91:bd:8e:e0:cb:
79:30:4c:5b:96:39:88:10:bf:c7:69:c7:11:16:a9:
3d:39:e0:59:a5:c7:34:c4:5d:bb:74:f3:d3:f5:ab:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7C:D0:26:35:6E:4F:5D:8F:E8:F4:54:34:63:61:F7:24:AA:D2:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A05EBE067AA11F0B5692B9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
45.197.135.0/24
45.198.69.0/24
45.198.75.0/24
45.198.81.0/24
45.198.84.0/24
45.198.86.0/24
45.198.89.0-45.198.90.255
45.198.97.0/24
45.198.104.0/24
45.198.109.0/24
45.198.112.0/24
45.198.138.0/24
45.198.163.0/24
45.198.168.0/24
45.198.176.0/24
45.198.181.0/24
45.206.44.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:0e:ac:87:e3:87:66:c6:0a:10:b4:e9:14:b3:8d:94:0d:2e:
a2:ba:09:cb:4a:15:da:97:c2:19:1d:ef:60:90:ba:ad:b5:a8:
1e:17:4e:2a:30:11:4c:ca:a9:9c:6f:c9:19:05:25:20:0a:d6:
78:61:f4:0d:d1:ac:87:9a:86:1c:8d:27:f2:c3:93:68:3c:f8:
d5:9c:ee:06:f0:ec:3e:f3:06:9a:fe:4d:5d:e3:68:e9:a3:11:
e6:d3:82:4b:7c:14:af:7b:8a:50:6e:48:7d:5d:14:9a:f1:f9:
85:f5:b8:37:58:9f:a7:e4:c0:97:f7:33:40:2c:59:1b:f6:4d:
d7:0c:79:9f:41:a5:21:ba:0b:1e:64:b2:86:50:98:d8:2a:fe:
93:b8:c4:06:e3:68:80:2c:6d:08:45:8e:d3:c7:c9:a9:72:94:
4c:20:8a:81:cf:b2:1c:25:8f:81:cb:20:3d:27:90:27:9d:14:
71:f1:e2:63:75:41:67:db:b1:12:48:cb:19:89:92:c9:72:de:
ae:35:0f:3c:99:a1:51:a3:3d:28:7c:17:d5:15:da:1f:5c:37:
7d:ee:23:bc:ff:c1:a0:10:f4:ce:87:81:90:86:e6:cb:0b:8a:
33:4a:94:c2:7e:86:be:b5:de:3f:66:bf:e8:87:3d:76:b3:2a:
a8:db:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:16 2025 by rpki-client