Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3713820C334311F0931B14EBDAE4EC9C.roa
File: 3713820C334311F0931B14EBDAE4EC9C.roa (raw, json)
Hash identifier: F0/D5VViqDIxMNpDhqXKXiAaNykYorXPwklZUKANa4E=
Subject key identifier: 2C:8E:31:3E:D6:D3:EB:24:63:8A:18:6B:ED:21:47:25:95:53:EC:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0155B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3713820C334311F0931B14EBDAE4EC9C.roa
Signing time: Sat 17 May 2025 17:20:23 +0000
ROA not before: Sat 17 May 2025 17:20:17 +0000
ROA not after: Tue 16 Jun 2026 17:20:17 +0000
asID: 984
IP address blocks: 45.205.148.0/24 maxlen: 24
45.205.149.0/24 maxlen: 24
45.205.150.0/24 maxlen: 24
45.205.155.0/24 maxlen: 24
45.205.162.0/24 maxlen: 24
45.205.163.0/24 maxlen: 24
45.205.164.0/24 maxlen: 24
45.205.165.0/24 maxlen: 24
45.205.166.0/24 maxlen: 24
45.205.168.0/24 maxlen: 24
45.206.0.0/24 maxlen: 24
45.206.5.0/24 maxlen: 24
45.206.17.0/24 maxlen: 24
45.206.18.0/24 maxlen: 24
45.206.19.0/24 maxlen: 24
45.206.20.0/24 maxlen: 24
45.206.21.0/24 maxlen: 24
45.206.22.0/24 maxlen: 24
45.206.23.0/24 maxlen: 24
45.206.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87477 (0x155b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 17:20:17 2025 GMT
Not After : Jun 16 17:20:17 2026 GMT
Subject: CN=6828c557-987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:ec:75:19:b4:84:77:a4:e0:cf:ef:a2:d9:
99:8b:0b:99:85:88:f0:44:8a:d8:aa:49:4a:c9:87:
24:7c:e6:6f:c5:50:ff:59:e2:0c:7a:25:eb:da:fe:
b7:63:e1:98:36:f2:b1:3b:82:e8:1e:cf:70:8b:3c:
47:97:8e:5d:83:5f:9b:cf:e2:9b:54:4c:40:9e:98:
7d:8a:0f:50:1a:61:58:70:8b:99:e3:e4:52:f2:05:
8c:bf:0a:3b:4b:af:93:51:14:68:20:f5:bb:0f:b2:
2d:43:25:a9:e3:ae:15:bc:9b:db:06:eb:db:fb:e3:
d6:da:74:b8:a5:c2:ff:cb:b2:d7:98:27:06:00:63:
60:c2:63:82:c3:b9:85:22:e2:45:59:db:9d:e9:ed:
dc:0f:fe:1c:62:82:00:7f:81:ab:1a:ef:d3:a0:25:
b7:6a:79:8c:c6:a0:e0:94:4b:98:9d:47:cd:48:89:
73:1f:74:a2:0c:5c:f6:be:49:6d:30:ff:58:25:61:
82:a5:18:2e:71:70:2e:f6:1f:99:40:59:73:a5:57:
d1:d3:e2:ce:1f:01:ef:4c:22:c9:af:34:d3:43:4a:
ef:d5:7c:c1:05:76:df:2a:c6:b9:11:4d:10:67:36:
be:80:fa:10:9c:20:06:b7:99:e8:20:ea:b5:4d:84:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8E:31:3E:D6:D3:EB:24:63:8A:18:6B:ED:21:47:25:95:53:EC:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3713820C334311F0931B14EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.148.0-45.205.150.255
45.205.155.0/24
45.205.162.0-45.205.166.255
45.205.168.0/24
45.206.0.0/24
45.206.5.0/24
45.206.17.0-45.206.24.255
Signature Algorithm: sha256WithRSAEncryption
1f:da:2c:9e:0e:d9:60:56:f4:14:89:4e:6b:b4:62:c8:a1:87:
15:38:b7:cc:db:10:81:80:14:4a:ab:23:d6:42:11:20:7a:0a:
70:73:fb:17:26:32:b6:7e:da:e5:85:94:88:18:c9:21:48:28:
af:8d:5c:52:b1:95:60:65:f8:b1:c2:77:8e:11:1f:ee:3e:89:
7e:8d:dd:55:df:b3:52:30:5b:fa:cd:88:15:ee:09:9f:0e:69:
59:31:82:6c:01:e4:0c:34:4e:cd:c4:6a:11:f3:8d:47:6d:ba:
3e:4b:8a:d9:6f:bc:d5:43:93:8f:63:9d:73:e2:6b:6b:a8:b8:
67:14:84:39:1f:ec:ac:74:a6:ea:94:61:92:dc:ef:93:3a:0e:
22:60:fd:78:84:88:af:78:9b:c0:15:f9:b0:c8:b2:5a:6e:3e:
fb:e9:c8:14:eb:a2:6d:ac:52:e1:57:b3:12:2e:ab:02:7b:ab:
87:57:55:51:b7:9a:61:21:ef:86:56:b8:d4:52:f6:ed:05:2b:
7f:15:b1:a5:d5:e3:77:93:b3:8b:61:58:44:6c:cb:3f:78:7a:
dc:f6:f5:b1:ac:47:ff:15:0e:2a:02:c5:8b:c9:b7:2e:2f:a3:
08:41:bf:82:e2:9c:97:0c:2a:db:89:06:04:f3:83:15:44:4e:
34:04:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:35:38 2025 by rpki-client