Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D208154E66CD11F0BB645E7FDAE4EC9C.roa
File: D208154E66CD11F0BB645E7FDAE4EC9C.roa (raw, json)
Hash identifier: 6cpxN5H6rT4XVd0CekK3Bs3gY+4zU/X5/xK9jxKk5Xw=
Subject key identifier: 68:8F:47:2C:B2:B0:D2:FC:B9:D0:0A:65:83:27:0B:0C:3B:CD:B9:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01667F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D208154E66CD11F0BB645E7FDAE4EC9C.roa
Signing time: Tue 22 Jul 2025 07:31:03 +0000
ROA not before: Tue 22 Jul 2025 07:30:58 +0000
ROA not after: Sat 30 Aug 2025 07:30:58 +0000
asID: 203020
IP address blocks: 45.198.193.0/24 maxlen: 24
45.198.194.0/23 maxlen: 24
45.198.196.0/22 maxlen: 24
45.198.200.0/21 maxlen: 24
45.198.208.0/20 maxlen: 24
45.198.224.0/24 maxlen: 24
45.201.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91775 (0x1667f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 07:30:58 2025 GMT
Not After : Aug 30 07:30:58 2025 GMT
Subject: CN=687f3e37-e004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:d1:1c:30:50:35:53:eb:1a:f2:d8:eb:99:
dc:b6:eb:8b:0d:3c:2b:26:a7:0d:6c:6c:ad:00:69:
e7:c9:32:b5:50:b1:8e:20:fe:3c:c9:f4:ef:ce:93:
46:54:4b:44:09:02:a0:bb:8b:c1:eb:b9:54:5d:97:
8f:5f:2a:37:8c:6b:51:33:c2:b6:96:aa:66:53:88:
87:98:d5:4a:40:a2:d7:e7:0e:24:6f:f4:f0:68:fd:
c2:32:ff:d1:75:89:ff:29:1c:12:08:0a:27:f0:55:
97:14:40:7a:a0:27:dc:31:ea:57:e7:c8:dc:ef:f1:
06:5a:23:2c:1c:44:2a:50:7a:e5:ca:11:27:f0:ec:
9a:eb:ef:12:2c:44:25:1f:b4:7d:8d:0b:0b:4d:c4:
bf:87:84:43:83:2c:07:ff:18:1d:19:22:04:ca:87:
5f:ab:66:9b:12:a2:20:5e:dc:6c:05:fb:ab:5a:53:
a4:ef:8a:18:ed:08:8c:5e:7e:f7:49:79:45:5c:1a:
46:85:56:68:9e:29:05:96:42:c3:39:01:17:8e:75:
50:cc:5b:53:23:e6:12:36:ed:01:d6:cc:5b:51:f2:
c6:c0:d1:ae:6d:9a:fa:13:6a:68:68:00:b1:7f:78:
b5:b4:d3:bb:8d:85:7b:71:b5:8f:bc:bb:27:6b:0b:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:47:2C:B2:B0:D2:FC:B9:D0:0A:65:83:27:0B:0C:3B:CD:B9:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D208154E66CD11F0BB645E7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.193.0-45.198.224.255
45.201.64.0/18
Signature Algorithm: sha256WithRSAEncryption
46:15:20:e2:0f:a1:34:8b:d8:7b:53:2c:a4:b3:4a:1b:a5:7d:
66:97:a9:c5:e6:7c:c1:0d:60:8f:aa:2d:bb:fb:1c:6e:22:5f:
09:dd:88:06:82:7d:a4:21:fd:5b:39:bc:4c:86:5a:75:88:25:
42:82:cc:f3:f3:f6:fd:b2:b3:90:fa:13:ae:41:5b:b9:ad:73:
a4:1e:1b:7a:64:57:40:e3:7d:5d:1e:76:32:c7:03:62:2f:a0:
12:40:e2:9e:29:0f:e1:c9:51:a0:c0:b4:62:73:cd:6e:8a:d4:
3d:93:9d:84:d1:53:38:d8:e9:d2:1b:d6:fa:67:11:5c:b0:0b:
32:e6:92:39:e9:fc:1b:45:4f:54:64:94:65:69:bd:44:0d:23:
81:f1:e0:2f:dd:d0:d3:53:08:ee:8b:2d:8a:1b:54:7c:a7:c6:
b6:39:36:ad:a4:dd:01:ee:23:88:fd:a9:c0:59:a6:90:7f:df:
55:34:4d:81:01:30:c9:28:56:ef:2b:93:9e:a3:65:22:86:4c:
4d:32:df:f8:4b:a7:0c:48:70:3b:37:5c:90:b4:ee:e9:bd:97:
96:e1:af:53:d9:41:31:aa:dd:b4:4c:40:56:3c:50:3d:54:6b:
d4:e6:51:92:c6:b5:62:77:d1:7f:ff:f7:c7:b4:41:8f:0d:15:
4a:ad:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:21 2025 by rpki-client