
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA56D426F9611F0988BEBB1DAE4EC9C.roa
File: EEA56D426F9611F0988BEBB1DAE4EC9C.roa (raw, json)
Hash identifier: +RvCR6wge00SUmZGNRbDyi8LHBKfyYcuAIkGr17h5N4=
Subject key identifier: 46:D3:57:F2:1A:9A:07:80:99:6F:95:61:09:30:08:E1:FD:BD:A8:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01687A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA56D426F9611F0988BEBB1DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:50:49 +0000
ROA not before: Sat 02 Aug 2025 11:50:44 +0000
ROA not after: Sat 06 Sep 2025 11:50:44 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92282 (0x1687a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:50:44 2025 GMT
Not After : Sep 6 11:50:44 2025 GMT
Subject: CN=688dfb99-c9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:a2:7b:1a:8b:10:a6:61:0d:13:59:55:65:
97:d5:ae:2f:08:34:49:f5:25:57:cb:91:2e:3f:c2:
44:c1:b1:d0:ac:9e:50:f6:0a:28:52:d9:49:68:75:
9c:04:c4:a1:c2:96:5e:ff:7b:7e:50:47:0d:71:74:
ac:0d:7a:03:6f:d7:c0:4c:73:d8:3f:af:b0:b8:a8:
d2:52:07:cf:4c:41:b4:b3:ba:9d:db:5d:f9:71:d6:
2c:29:77:36:ab:97:29:2d:3c:02:a4:98:17:28:b1:
c3:fe:ea:11:31:35:65:02:ba:41:8d:87:bb:90:a6:
90:c1:25:57:8e:9e:93:6f:ff:ea:5b:72:f0:2d:53:
12:b1:a6:cb:ed:54:61:c1:42:45:3e:cc:81:4d:85:
e3:43:bb:5b:d7:8b:0c:d1:68:bb:63:4b:17:b4:71:
9e:d5:25:82:eb:8e:8a:8a:f9:7a:37:b7:06:ac:4b:
c5:ca:1f:06:f8:39:d8:12:ca:47:37:89:1f:e4:66:
57:f9:3c:09:15:d0:15:f1:3a:5a:c4:16:1e:b2:99:
d6:00:ef:23:d8:8c:34:b1:fd:f2:26:c9:d8:1c:56:
8f:fe:13:33:7c:91:80:2f:7e:37:26:97:02:1d:fc:
97:db:6a:50:ab:3a:37:52:d8:d5:14:bc:ac:0e:b3:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D3:57:F2:1A:9A:07:80:99:6F:95:61:09:30:08:E1:FD:BD:A8:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEA56D426F9611F0988BEBB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:54:9a:99:1f:7e:26:5e:36:74:1f:92:d6:2e:99:c8:56:5f:
79:fb:1b:de:25:4e:40:ff:76:9b:ed:22:4d:b6:9b:94:a1:1d:
fb:fb:1b:ac:8b:73:5e:79:c0:5e:fa:45:01:c1:a9:e6:3e:4b:
82:35:1c:e7:80:83:07:f0:bd:d4:00:7b:a0:aa:e2:43:e7:bd:
00:48:59:ef:80:0b:3e:b6:1e:81:27:e9:30:7f:0a:af:35:ba:
22:c6:fb:99:e6:07:30:84:28:69:71:ed:6d:7f:36:56:64:07:
77:10:45:d2:79:91:d7:f6:c0:b2:6f:fc:b2:ae:8b:bd:95:93:
7d:88:bc:e8:56:7e:f5:a9:e0:cd:1d:fb:26:20:7e:28:e8:44:
d7:48:bb:1f:8b:97:bb:1e:74:4f:5a:0e:5d:a8:23:2c:0f:99:
78:ff:d9:3a:de:c6:98:92:9d:1b:5c:12:28:d7:6b:78:63:55:
85:04:63:67:38:c4:34:f1:93:fe:26:2e:c6:06:9b:7f:05:16:
72:6a:ad:79:9f:59:6d:11:7b:ac:85:b5:29:ff:e6:83:c8:f4:
3d:29:7d:7d:2b:bb:87:71:ce:58:43:a2:66:2c:1d:1b:6d:58:
9c:ac:73:0a:47:de:1c:96:a8:3c:eb:9b:17:83:ea:53:45:67:
de:0d:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:07 2025 by rpki-client