Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E81998609D11F0A25B879FDAE4EC9C.roa
File: A2E81998609D11F0A25B879FDAE4EC9C.roa (raw, json)
Hash identifier: OAtP3+h4HYHI0DgIBaXFvFXqz37Qhvjcjd907zgKYAE=
Subject key identifier: DE:91:C1:AC:CB:CE:F5:76:38:9C:90:6C:D8:1C:E5:5A:4F:8A:BB:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01650C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E81998609D11F0A25B879FDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:31:01 +0000
ROA not before: Mon 14 Jul 2025 10:30:56 +0000
ROA not after: Thu 24 Jul 2025 10:30:56 +0000
asID: 141883
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91404 (0x1650c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:30:56 2025 GMT
Not After : Jul 24 10:30:56 2025 GMT
Subject: CN=6874dc65-d366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:d4:4d:81:bd:e2:98:b4:f5:fd:3c:8a:9c:
02:3b:28:a9:15:60:c7:30:e7:83:12:30:2f:d6:85:
e1:51:65:96:6a:4f:a0:58:2b:f3:da:94:cc:97:65:
8a:8f:40:e9:9f:e7:58:ef:81:ca:35:69:a0:e3:69:
16:96:19:2a:cd:21:5c:cb:28:75:71:16:41:61:cb:
66:79:b4:ed:6e:b3:57:85:78:90:7c:46:42:bc:72:
3c:88:34:95:53:9a:90:8b:3b:27:36:e9:f0:77:b7:
d6:6c:32:8e:f1:89:40:9e:41:6e:b4:b1:7f:a4:9a:
8f:e7:1a:37:a3:93:32:58:da:08:05:e1:43:91:f5:
9c:46:e7:cf:5e:70:90:85:dc:cd:0c:8f:20:17:63:
4c:89:f6:05:c2:a2:07:0f:c0:d7:b3:68:72:a0:ca:
3e:16:b8:79:31:7f:bd:fd:9a:46:f8:8a:dc:31:c5:
5c:51:41:7d:56:7d:27:dc:a9:5d:4b:19:67:97:8d:
da:c2:58:85:5c:57:e6:db:1a:7b:37:f3:d4:ab:ff:
9a:50:12:b8:ca:0f:c4:35:4c:07:bb:a2:c4:1f:87:
43:80:11:29:1b:0a:95:5e:bc:1b:a4:c5:88:7b:a6:
fd:ff:82:f2:3c:e5:df:dd:3f:2f:82:e3:95:18:25:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:C1:AC:CB:CE:F5:76:38:9C:90:6C:D8:1C:E5:5A:4F:8A:BB:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E81998609D11F0A25B879FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:74:93:d7:09:b8:9a:c6:ea:b0:2d:47:d1:72:63:ef:c0:3d:
61:f6:9c:f8:31:aa:ee:52:94:30:be:4d:a1:84:3c:51:23:6d:
6a:80:34:f1:f2:da:93:2f:83:9d:87:a7:94:95:55:c7:a8:47:
89:2b:bc:a5:f1:68:fb:b6:d1:d2:79:6a:65:95:86:1d:38:73:
a8:c2:b9:dd:5a:7f:18:7c:7c:04:b2:07:fa:54:c0:c6:5b:e4:
e2:c3:d4:19:f3:68:69:68:0b:34:6a:a7:12:9a:5e:3f:42:c4:
1f:39:e4:da:03:bb:63:f9:fc:7a:af:b6:4a:90:7b:61:0f:4b:
ca:ba:84:85:84:9b:1b:ee:63:db:9d:11:81:e7:c5:e6:e8:85:
c8:5d:cf:1b:de:5e:64:e3:a1:9f:e4:b3:4b:90:87:4b:05:4d:
aa:49:34:c5:a9:f7:3d:06:72:e1:4a:51:1b:0b:0b:5c:0a:af:
b5:98:af:64:a7:84:2d:4e:1e:fb:2b:49:52:20:91:7e:b9:64:
f7:56:35:cd:da:9d:5b:dd:f8:45:e4:b6:43:98:5b:41:fc:af:
4f:30:50:c5:ef:dc:f2:4b:60:a6:5a:d3:bb:38:a2:2c:cb:e6:
57:9b:03:84:8c:e6:7b:a6:53:b5:fb:cf:44:b1:51:f6:34:91:
62:74:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:35:40 2025 by rpki-client