Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0366F3803E2411F08BD0D3E3DAE4EC9C.roa
File: 0366F3803E2411F08BD0D3E3DAE4EC9C.roa (raw, json)
Hash identifier: KAVIhjCntsO73X//+69OIj2pUV6KvMVcDpOhhVUBToI=
Subject key identifier: 07:D1:1C:35:3E:B8:43:33:94:EB:1D:55:78:B2:95:6A:15:47:FE:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01591E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0366F3803E2411F08BD0D3E3DAE4EC9C.roa
Signing time: Sat 31 May 2025 13:34:45 +0000
ROA not before: Sat 31 May 2025 13:34:40 +0000
ROA not after: Tue 08 Jul 2025 13:34:40 +0000
asID: 44559
IP address blocks: 45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88350 (0x1591e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 13:34:40 2025 GMT
Not After : Jul 8 13:34:40 2025 GMT
Subject: CN=683b0575-8062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:cf:af:ca:ae:3e:33:f1:ff:ca:d3:bf:65:
b6:76:b9:50:cd:83:2f:bb:81:e9:07:fa:7b:c6:82:
37:1e:7b:4c:c4:86:b1:98:3b:14:82:57:67:75:bb:
43:37:88:3a:82:9e:84:e0:16:f0:01:2c:02:32:03:
cc:e3:51:41:cf:ec:eb:df:81:73:d8:f7:48:12:3c:
67:2b:47:fa:fb:85:0a:2a:44:7a:0f:f9:79:31:aa:
9a:bf:4d:44:6c:18:ec:39:a5:af:aa:95:f2:3d:03:
56:5c:89:c9:9c:5a:51:c1:e4:dc:c3:7d:ad:37:a9:
01:a8:54:60:f4:b4:48:e5:58:c4:f4:c8:01:54:70:
00:2c:8c:2a:44:2b:57:fa:83:a7:4e:b0:56:e8:85:
f4:b7:7c:51:9a:68:0d:ea:d6:8f:07:fe:72:b4:be:
86:3a:e2:e2:c7:47:97:57:29:88:e3:af:05:b3:be:
9b:bb:e4:3d:ec:f1:b6:2c:54:b5:fb:4b:3e:1a:1a:
a1:da:ac:d8:88:d2:a3:c5:7a:ae:ad:70:47:5d:bd:
fe:20:9c:98:ac:74:62:cf:65:0c:d7:76:e1:4e:70:
f4:2a:b1:7b:96:91:65:ac:bd:d5:57:77:84:eb:3c:
65:42:55:bd:10:14:f3:b4:57:3d:21:22:4e:47:dd:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D1:1C:35:3E:B8:43:33:94:EB:1D:55:78:B2:95:6A:15:47:FE:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0366F3803E2411F08BD0D3E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.201.0-45.202.202.255
45.202.205.0-45.202.208.255
45.202.213.0/24
45.204.65.0/24
45.204.73.0/24
45.204.75.0/24
45.207.2.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
04:cd:4e:8e:c3:cc:11:f8:31:a8:99:23:da:45:45:5d:ff:a3:
c9:7e:02:a1:54:1b:50:bf:2b:fe:d7:fc:1e:84:e2:ce:15:14:
5e:f5:e1:f9:9d:d9:53:0f:79:ce:b2:1f:42:7c:33:87:81:b7:
ad:52:66:51:ec:f7:13:dc:d3:f6:5b:2d:a5:0e:16:41:90:97:
9f:0d:8f:1f:aa:6b:15:ca:9d:fc:13:2e:1c:d0:eb:5c:59:b0:
fa:3c:93:75:2c:a7:c6:ee:8b:56:ad:90:a8:de:b4:9f:3f:4a:
50:92:6d:b5:d2:e1:5b:bb:8d:45:cf:23:49:e4:48:eb:b9:d5:
dc:6f:6d:64:f5:cd:86:c4:0d:cc:4d:24:84:f4:57:28:8b:90:
26:8e:12:5d:0f:72:e5:21:e8:35:a1:c5:75:96:9a:32:29:1b:
f5:ce:4e:a9:41:95:aa:7a:e5:67:73:a7:75:f4:b1:32:db:ff:
bd:5c:cc:7d:fb:a0:48:a3:01:97:28:eb:64:ad:fc:f7:ae:94:
63:3b:69:3e:46:00:32:91:bc:87:5d:76:3e:3a:6e:80:2e:28:
d8:fc:d6:7e:dd:04:df:92:92:f1:45:8f:69:87:d6:b1:1e:84:
f6:fa:2f:c4:81:05:3f:61:4d:b5:98:b9:48:45:f9:ea:5e:1f:
7e:4a:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 01:45:39 2025 by rpki-client