Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0E2D05466C711F0B42142DADAE4EC9C.roa
File: F0E2D05466C711F0B42142DADAE4EC9C.roa (raw, json)
Hash identifier: +4hpdDPeo02+kEDtVCcV+JwcXdXCIBAKb12jD6DfcQs=
Subject key identifier: 66:34:97:56:A6:88:68:F5:5B:35:D6:AD:47:B4:5B:42:5B:65:20:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016679
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0E2D05466C711F0B42142DADAE4EC9C.roa
Signing time: Tue 22 Jul 2025 06:48:58 +0000
ROA not before: Tue 22 Jul 2025 06:48:52 +0000
ROA not after: Wed 27 Aug 2025 06:48:52 +0000
asID: 6079
IP address blocks: 45.197.240.0/20 maxlen: 24
45.198.185.0/24 maxlen: 24
45.198.186.0/23 maxlen: 24
45.198.188.0/22 maxlen: 24
45.198.192.0/24 maxlen: 24
45.203.139.0/24 maxlen: 24
45.203.196.0/23 maxlen: 24
45.203.198.0/24 maxlen: 24
45.203.210.0/24 maxlen: 24
45.203.221.0/24 maxlen: 24
45.203.222.0/23 maxlen: 24
45.203.240.0/22 maxlen: 24
45.203.244.0/24 maxlen: 24
45.203.252.0/22 maxlen: 24
45.205.85.0/24 maxlen: 24
45.205.110.0/23 maxlen: 24
45.205.132.0/24 maxlen: 24
45.205.151.0/24 maxlen: 24
45.205.154.0/24 maxlen: 24
45.205.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91769 (0x16679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 06:48:52 2025 GMT
Not After : Aug 27 06:48:52 2025 GMT
Subject: CN=687f345a-61b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:1b:7d:0b:65:7b:e1:72:6c:cc:e3:e5:60:
8c:39:4b:c1:3b:60:b8:6e:1e:b1:19:7b:b8:0a:7f:
75:f3:10:84:c4:72:ba:d8:0e:34:4d:42:92:eb:86:
b8:86:7d:f5:8a:22:62:5d:f3:3b:77:26:5b:e1:79:
57:34:b6:ca:7b:2d:67:13:a8:21:a3:46:e6:f2:bf:
ce:2e:4c:1f:5b:1e:53:b6:17:40:65:04:4c:1c:b6:
75:cc:da:ef:ca:2c:8d:dd:94:8d:5c:e1:ee:64:3c:
0c:e9:33:68:b9:a3:58:be:67:25:80:9b:de:3e:53:
5f:11:bf:4b:b1:1c:e2:37:d2:02:72:94:8a:00:c0:
19:ac:66:83:b6:70:73:d1:bb:69:03:3d:cb:d5:51:
aa:b1:b7:7e:ac:f8:88:94:a0:00:db:7d:d6:02:05:
e1:5a:8f:bc:cb:d6:25:c2:35:6b:9b:a2:9c:44:14:
01:1a:c2:db:8c:9f:aa:25:d4:d2:ef:bd:10:50:2f:
6b:cc:73:5e:37:6c:6f:c1:e1:ba:07:ec:5c:d9:1c:
77:cb:2d:a6:90:24:93:0b:b9:2f:66:86:52:98:58:
bd:67:ed:6a:22:48:8b:c5:d0:ad:8c:77:95:99:dd:
1f:1a:97:c6:cd:e3:b5:f9:71:19:c7:e6:99:12:3d:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:97:56:A6:88:68:F5:5B:35:D6:AD:47:B4:5B:42:5B:65:20:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0E2D05466C711F0B42142DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.240.0/20
45.198.185.0-45.198.192.255
45.203.139.0/24
45.203.196.0-45.203.198.255
45.203.210.0/24
45.203.221.0-45.203.223.255
45.203.240.0-45.203.244.255
45.203.252.0/22
45.205.85.0/24
45.205.110.0/23
45.205.132.0/24
45.205.151.0/24
45.205.154.0/24
45.205.172.0/23
Signature Algorithm: sha256WithRSAEncryption
29:f6:e3:b3:ec:a9:16:8e:d1:53:38:b9:78:db:38:0e:9a:8a:
5e:9c:9f:18:96:08:17:b9:92:fc:71:09:de:c8:34:15:8b:53:
46:8d:bf:33:95:fc:05:ea:ec:a3:b0:63:e7:8b:41:ab:59:7e:
83:5a:fe:cf:a9:fa:30:be:92:75:8f:e0:7a:20:e3:5d:f4:bd:
cc:91:ae:19:02:ea:96:6d:48:0c:ac:7e:ff:05:2b:12:61:2e:
05:1e:15:bd:9b:4f:b6:42:f9:9d:ad:c9:53:2a:84:ea:e2:ff:
83:09:3e:68:f0:6b:69:bd:93:e0:74:3c:51:9c:be:63:88:6e:
2f:35:ce:ae:ff:c9:1e:e6:cd:3b:62:c9:01:fc:92:77:08:44:
95:99:9f:fa:78:74:81:bf:bd:ac:ef:18:9d:13:da:ff:09:ba:
7c:2d:1c:9b:75:1a:b5:7f:00:7a:2a:80:d3:59:ab:4b:56:20:
62:cb:65:38:54:10:60:d4:09:8c:d5:84:42:c9:9a:94:0e:51:
02:8b:5b:4b:84:7d:03:30:29:9f:43:c1:d7:d0:a6:c4:86:75:
89:9e:d4:6c:bf:83:4e:81:a5:a2:29:81:c9:7f:b3:46:74:95:
06:bb:1e:e2:f0:ad:dd:d0:52:d2:e0:d1:98:01:2e:1c:64:3c:
77:74:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:35 2025 by rpki-client