Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56C2684C631911F08A3F52D5DAE4EC9C.roa
File: 56C2684C631911F08A3F52D5DAE4EC9C.roa (raw, json)
Hash identifier: SxqbW6qlk+aZzUwZMEYk/bB06ylUbc51ezq6uNxyJdo=
Subject key identifier: 9F:0D:18:CE:3C:0C:A2:E5:FE:E8:B4:B0:67:90:9D:08:83:6F:A3:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56C2684C631911F08A3F52D5DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 14:21:33 +0000
ROA not before: Thu 17 Jul 2025 14:21:25 +0000
ROA not after: Sun 31 Aug 2025 14:21:25 +0000
asID: 44559
IP address blocks: 45.192.253.0/24 maxlen: 24
45.192.254.0/24 maxlen: 24
45.192.255.0/24 maxlen: 24
45.195.96.0/24 maxlen: 24
45.195.97.0/24 maxlen: 24
45.195.98.0/24 maxlen: 24
45.195.99.0/24 maxlen: 24
45.195.100.0/24 maxlen: 24
45.195.101.0/24 maxlen: 24
45.195.102.0/24 maxlen: 24
45.195.103.0/24 maxlen: 24
45.195.252.0/24 maxlen: 24
45.195.253.0/24 maxlen: 24
45.196.121.0/24 maxlen: 24
45.196.124.0/24 maxlen: 24
45.196.125.0/24 maxlen: 24
45.196.126.0/24 maxlen: 24
45.196.127.0/24 maxlen: 24
45.196.139.0/24 maxlen: 24
45.196.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91620 (0x165e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 14:21:25 2025 GMT
Not After : Aug 31 14:21:25 2025 GMT
Subject: CN=687906ed-62b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:8c:d3:2a:a8:b9:b6:45:5f:0f:88:ee:ef:
ea:8b:87:0a:00:da:9b:2e:30:66:0e:54:5f:af:74:
a6:11:fe:ce:a5:6a:17:f5:10:87:68:98:ef:e4:02:
27:18:14:d4:a2:fe:57:e4:3f:44:28:28:f9:4d:9a:
b7:80:97:ab:87:c9:cf:eb:ab:c2:c0:42:4f:e3:be:
9b:71:90:2b:f5:ae:2e:e5:bc:fa:c5:16:ac:20:b3:
0b:5e:2d:14:7a:db:9f:2b:b8:e7:fa:16:c0:4a:f5:
9d:f5:7c:20:fa:36:d4:23:60:db:a3:d9:60:28:44:
d2:7f:1a:35:63:58:ea:bd:7e:6f:e0:88:13:91:d4:
b5:41:f9:c2:26:00:17:5a:cb:95:47:a3:30:09:5f:
81:d7:27:ae:fb:f7:88:74:f1:00:58:55:a3:56:33:
3a:73:46:5e:aa:30:dc:a7:4b:19:98:91:4d:af:9a:
82:01:65:e8:e1:47:2d:43:89:5d:6a:39:36:f6:ad:
b8:38:70:94:03:61:12:83:29:c9:84:1b:d9:24:22:
55:f9:6f:7f:83:13:9b:56:1f:7e:98:9e:2b:90:79:
39:4a:17:98:ec:89:f5:6f:1a:93:d8:f2:d8:d6:9e:
d8:bd:e1:fb:4b:23:fc:4c:10:64:32:fa:7d:fb:33:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:18:CE:3C:0C:A2:E5:FE:E8:B4:B0:67:90:9D:08:83:6F:A3:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56C2684C631911F08A3F52D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.253.0-45.192.255.255
45.195.96.0/21
45.195.252.0/23
45.196.121.0/24
45.196.124.0/22
45.196.139.0-45.196.140.255
Signature Algorithm: sha256WithRSAEncryption
9f:b5:ec:30:15:64:45:e0:c2:8f:63:f6:03:cd:a9:99:bf:4c:
4e:cd:86:c5:a8:2b:77:e5:d4:c0:ad:a4:59:5a:50:02:57:ea:
3d:cc:b3:07:1e:9d:e8:c5:e8:38:3b:ce:59:02:b0:6e:a0:ca:
7a:b7:cd:d4:ef:34:c3:27:cb:d5:ce:a0:ad:5e:be:ea:58:3f:
01:a0:51:4a:72:71:a1:a2:54:28:09:1a:a6:4c:a9:52:8f:2c:
7b:cf:04:a9:c5:f1:0a:6c:db:f0:75:73:ea:51:b4:48:0c:46:
a4:ce:fa:94:5b:2c:27:b6:ae:a5:72:b0:cc:29:1c:cb:4b:e7:
4e:8c:e2:1a:2b:d8:ce:75:54:bd:e8:4a:79:a3:50:a8:ac:9b:
5a:71:3f:8e:3d:0a:c4:14:a5:17:96:6f:45:55:0b:2d:db:ae:
99:a1:f6:12:88:3e:10:35:67:90:b4:92:6d:13:bc:a6:b0:19:
23:ff:fc:92:31:0c:e1:59:cb:d9:be:c4:15:4b:07:a3:df:85:
97:33:09:92:5d:cb:4a:68:d1:6c:36:d5:fc:dc:9a:23:d1:21:
f3:a9:56:4f:b4:62:7b:be:41:15:ce:8d:90:73:f3:1b:06:f9:
8a:28:e9:09:f8:1e:0e:c7:64:89:40:ae:64:46:2d:2c:0c:b8:
2b:5a:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:46 2025 by rpki-client