Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129410A69F6B11F0866712EBDAE4EC9C.roa
File: 129410A69F6B11F0866712EBDAE4EC9C.roa (raw, json)
Hash identifier: s7ckVCscbPWgyxy7Bj6bAyIS+Xq6M38QqBSPwkzSBPs=
Subject key identifier: 13:F1:34:F3:46:56:19:BD:A9:6A:0F:90:59:65:88:BA:A4:95:B9:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129410A69F6B11F0866712EBDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 08:37:47 +0000
ROA not before: Thu 02 Oct 2025 08:37:38 +0000
ROA not after: Sat 08 Nov 2025 08:37:38 +0000
asID: 44559
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97892 (0x17e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 08:37:38 2025 GMT
Not After : Nov 8 08:37:38 2025 GMT
Subject: CN=68de39db-c659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:f9:5f:02:62:f4:4c:70:ad:2f:22:c4:81:
44:a3:1f:14:26:e6:a0:42:db:ca:84:70:f3:d4:42:
b7:e3:68:87:43:0a:0d:72:22:b7:6e:f6:2d:f3:7d:
48:d1:41:20:15:91:a6:cb:c7:93:1f:ee:85:ab:55:
8d:cb:c4:0d:9f:e0:84:c0:43:80:b8:a1:8e:b9:94:
5c:4c:06:f9:95:33:52:29:e2:1b:59:84:75:ca:a9:
5e:d6:f2:5d:43:d8:e6:d5:d2:26:f6:c8:49:d2:49:
e4:39:dc:1f:94:28:59:fb:97:27:8d:3d:dd:ea:4e:
82:70:61:22:65:82:48:32:ef:ec:14:50:b7:86:86:
73:ee:fb:ec:14:4f:ac:e6:81:4b:73:5f:16:a9:17:
d5:02:05:27:13:39:fa:10:a9:98:8e:0f:48:94:64:
db:11:75:81:cf:cd:29:e8:c6:2f:a3:d6:a8:53:78:
7a:24:ce:92:7c:0a:02:25:7c:69:5b:e0:41:b1:f1:
94:03:6c:66:1f:3f:1e:c8:f5:d1:21:2b:64:a9:7f:
cb:3c:85:e2:e0:51:51:74:0a:e0:94:2d:5d:a0:a1:
87:aa:92:5a:43:c6:47:cd:83:f6:6a:95:02:53:03:
cd:16:63:f7:4a:ff:aa:b0:a9:07:10:5c:2f:6a:58:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F1:34:F3:46:56:19:BD:A9:6A:0F:90:59:65:88:BA:A4:95:B9:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/129410A69F6B11F0866712EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.201.0-45.202.202.255
45.202.205.0-45.202.208.255
45.202.213.0/24
45.204.65.0/24
45.204.73.0/24
45.204.75.0/24
45.207.2.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:1e:6c:b0:3f:fc:16:c5:8b:bf:92:7f:ac:84:5f:ab:6e:16:
61:ce:de:cb:1b:3c:e8:f8:38:1e:95:08:9e:ba:bf:6d:84:3c:
5e:c3:ca:53:0c:48:c5:2e:a7:a8:1e:04:e8:45:d3:4a:52:8e:
bc:4d:2f:fa:9d:01:6a:0e:da:a7:ea:19:fc:bc:db:8d:34:59:
14:56:cf:e5:7d:ee:c5:84:5a:42:37:90:31:26:ce:2c:a8:9c:
cd:d9:c2:92:f6:04:e2:63:cc:61:1d:67:bf:5e:cb:fb:3a:41:
5d:e1:1f:f7:4a:9b:3c:c6:7f:df:1a:41:f1:4c:8b:bd:f3:7d:
6a:be:06:4c:c8:b5:78:b8:6c:6e:7d:47:9a:ba:af:9a:45:44:
cb:4b:4a:62:3d:3b:e8:36:fb:fb:7c:58:43:ff:ad:72:93:76:
66:aa:26:12:67:2e:68:9a:09:9a:97:7b:45:a7:a7:e2:ea:48:
e5:fa:c2:65:35:95:c4:3c:cf:43:06:75:6f:7d:a2:f9:7c:b2:
76:30:95:af:6c:0b:be:04:fd:4e:0c:aa:73:19:db:7b:e7:62:
2e:12:e1:56:3f:35:5c:58:4e:88:b2:59:00:60:37:f0:7c:cb:
91:bc:22:e2:4a:9b:ed:dc:0d:9d:3e:bf:7f:cc:43:8a:ca:38:
46:b1:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:16 2025 by rpki-client