Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C15373098B711F09848D7EFDAE4EC9C.roa
File: 3C15373098B711F09848D7EFDAE4EC9C.roa (raw, json)
Hash identifier: oOTgr8uIG5xbkoFAISpU5PtsjiXM5txvA+NQgPlXHAQ=
Subject key identifier: 06:0C:6B:E4:29:82:55:1F:A4:E7:09:68:D2:0C:AE:2D:BA:7E:1B:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C15373098B711F09848D7EFDAE4EC9C.roa
Signing time: Tue 23 Sep 2025 19:55:21 +0000
ROA not before: Tue 23 Sep 2025 19:55:15 +0000
ROA not after: Tue 06 Jun 2028 19:55:15 +0000
asID: 17561
IP address blocks: 45.194.69.0/24 maxlen: 24
45.194.74.0/24 maxlen: 24
45.198.15.0/24 maxlen: 24
45.202.203.0/24 maxlen: 24
45.204.45.0/24 maxlen: 24
45.204.46.0/24 maxlen: 24
45.204.47.0/24 maxlen: 24
45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
45.204.54.0/24 maxlen: 24
45.204.55.0/24 maxlen: 24
45.204.56.0/24 maxlen: 24
45.204.57.0/24 maxlen: 24
45.204.58.0/24 maxlen: 24
45.204.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97439 (0x17c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 23 19:55:15 2025 GMT
Not After : Jun 6 19:55:15 2028 GMT
Subject: CN=68d2fb28-7888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:85:1e:62:d9:7b:ec:74:09:92:ca:73:34:
2e:18:2e:aa:68:1c:0a:3a:d4:93:65:4e:0e:2a:d0:
9f:95:5b:d3:7d:d4:b9:91:a8:e4:e1:d7:8e:e8:7a:
1c:d1:7b:e4:2d:22:1a:0b:c3:0a:7d:47:3d:4a:37:
da:8b:fa:d5:7a:dd:e4:06:4e:43:31:11:2f:2e:6e:
76:45:9b:96:82:bd:08:ab:e9:f5:c2:12:39:7e:d4:
53:1f:26:c7:e6:22:26:95:da:9e:66:e5:ea:ae:1b:
a7:9c:4b:4a:f9:13:58:67:0a:b6:b7:b5:23:e6:86:
a3:dd:4c:f7:88:96:4c:51:52:1f:52:09:d3:4e:4c:
41:bb:eb:95:48:d3:47:26:a1:11:9c:68:4c:2b:d0:
87:8a:27:30:bc:8f:f0:84:cc:34:27:ef:9d:04:52:
51:fb:29:10:61:98:c9:c3:f5:60:d4:25:95:33:c0:
7a:26:4d:71:c0:71:de:96:aa:57:cd:18:ad:2a:5c:
fe:c3:ff:2c:0b:f7:38:4a:c6:9e:c3:0b:52:97:4a:
5c:5a:83:5f:15:99:3e:d7:1c:5a:b4:f5:e3:23:38:
71:49:31:4c:c0:96:48:e4:92:33:0a:4d:dd:8d:1c:
f1:4e:2f:53:08:65:eb:0b:04:45:23:b1:1e:46:8c:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:6B:E4:29:82:55:1F:A4:E7:09:68:D2:0C:AE:2D:BA:7E:1B:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C15373098B711F09848D7EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.69.0/24
45.194.74.0/24
45.198.15.0/24
45.202.203.0/24
45.204.45.0-45.204.59.255
Signature Algorithm: sha256WithRSAEncryption
a2:b5:97:ac:c0:d0:ab:22:36:19:2f:33:72:c4:a4:85:e7:79:
23:ec:52:5a:4a:d7:35:b7:01:d7:23:4b:1f:37:49:99:01:ec:
70:7c:f8:fe:43:6d:3a:9c:cc:61:41:d5:4c:bc:93:76:be:84:
06:37:7e:93:fa:e9:38:5f:58:1d:6f:81:34:95:e6:be:a7:34:
2c:d0:a3:e5:08:cb:36:87:ef:1b:ef:fd:c9:50:19:58:fc:4a:
04:9e:45:36:4f:6b:51:12:77:e0:ef:78:42:6c:ed:a9:25:b5:
f8:1f:0f:45:03:47:be:91:0b:ee:fb:c2:21:61:3f:d3:d1:69:
eb:20:b7:9b:57:f2:f6:42:ba:37:7f:95:5c:04:ff:11:8e:68:
78:5b:7d:09:57:7a:87:ae:6e:1c:5d:a4:29:11:b9:a9:59:cc:
3c:de:05:7b:50:d5:59:f4:f0:1e:b9:1f:32:8e:a6:a4:01:9b:
14:30:64:d8:4a:52:bb:0a:e4:e0:08:40:16:d4:a6:45:4b:ba:
80:51:aa:f2:c3:f4:f4:79:77:44:5b:b1:fd:75:2f:1d:3e:a6:
a8:62:ba:d5:bd:4a:69:d0:96:b9:51:38:15:8c:b0:dd:91:6d:
d0:58:b8:d4:ac:b6:7c:11:41:7c:62:a2:84:8e:28:96:27:43:
3d:a1:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:05 2025 by rpki-client