Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/452E655AB0BB11F0B2C3AAA2DAE4EC9C.roa
File: 452E655AB0BB11F0B2C3AAA2DAE4EC9C.roa (raw, json)
Hash identifier: OBVf/yEWq+yKV2UasvXKhxFGv22zuweONmOkBcIzBkQ=
Subject key identifier: 85:51:DF:4D:96:84:21:23:A8:23:64:A0:9C:F3:A6:06:FD:C8:E0:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01827C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/452E655AB0BB11F0B2C3AAA2DAE4EC9C.roa
Signing time: Fri 24 Oct 2025 09:24:42 +0000
ROA not before: Fri 24 Oct 2025 09:24:37 +0000
ROA not after: Fri 31 Oct 2025 09:24:37 +0000
asID: 54801
IP address blocks: 45.194.85.0/24 maxlen: 24
45.195.60.0/24 maxlen: 24
45.195.62.0/24 maxlen: 24
45.195.192.0/24 maxlen: 24
45.195.196.0/24 maxlen: 24
45.195.197.0/24 maxlen: 24
45.195.199.0/24 maxlen: 24
45.197.1.0/24 maxlen: 24
45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.197.20.0/24 maxlen: 24
45.199.130.0/24 maxlen: 24
45.199.131.0/24 maxlen: 24
45.199.134.0/24 maxlen: 24
45.199.137.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 27 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98940 (0x1827c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 24 09:24:37 2025 GMT
Not After : Oct 31 09:24:37 2025 GMT
Subject: CN=68fb45da-8475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:15:dd:c5:99:7e:df:51:8e:fe:36:59:7e:
0d:65:08:29:4f:71:3e:a2:91:cb:df:84:9a:38:d2:
95:88:97:1a:51:11:a8:14:56:6f:c9:35:6e:f3:a1:
5f:f9:ac:0e:10:86:b7:5e:f7:75:68:d2:0b:07:49:
77:ed:18:0c:69:f8:7d:f8:0d:3b:03:6d:42:44:c8:
59:79:03:96:db:86:37:4b:98:91:42:f7:38:0b:76:
c9:03:92:09:85:6b:f6:b2:fe:7f:04:39:b0:13:bf:
e9:38:dc:3b:09:a9:d3:51:a7:e3:eb:88:e0:40:9a:
27:27:d1:7e:f4:12:db:2d:41:3d:60:dd:9e:5c:18:
8a:ab:54:3c:bc:6c:9a:21:d2:64:3d:d9:c8:86:f2:
0a:73:8a:4d:f3:6b:78:17:f7:cb:92:b2:d9:63:b2:
9f:6d:5d:df:11:c5:12:aa:86:d7:ad:c0:ec:7b:cd:
65:f6:dc:3f:90:01:77:7b:ac:c7:20:7e:16:dc:38:
7d:b5:d4:b8:b0:4b:c4:2d:48:cd:c4:d1:57:60:c1:
60:ea:c2:34:61:62:87:0d:79:56:cf:28:89:c6:50:
31:a7:f9:b3:f8:62:81:1d:39:74:c6:53:cd:ab:7b:
d3:fc:76:5f:3d:3f:67:22:37:26:5e:3e:7c:21:91:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:DF:4D:96:84:21:23:A8:23:64:A0:9C:F3:A6:06:FD:C8:E0:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/452E655AB0BB11F0B2C3AAA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.195.60.0/24
45.195.62.0/24
45.195.192.0/24
45.195.196.0/23
45.195.199.0/24
45.197.1.0-45.197.2.255
45.197.4.0/23
45.197.20.0/24
45.199.130.0/23
45.199.134.0/24
45.199.137.0/24
45.199.191.0/24
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
78:73:14:f0:17:d0:73:8d:d0:37:40:73:4f:11:8a:0f:43:56:
42:9a:a1:e7:eb:3c:14:01:89:2a:a5:c4:f1:99:42:ae:7c:ae:
3c:10:54:a0:7d:1a:0d:88:5e:34:e3:61:1a:2f:3a:58:dc:8f:
a2:61:9b:a8:9d:d6:da:6e:04:a7:d1:fb:14:2a:9b:48:19:ef:
6e:27:5c:98:29:5d:30:70:a9:95:c2:37:35:b1:27:ec:5a:c2:
a1:50:c9:b5:36:c3:3e:ac:6b:6c:79:41:1e:f1:8f:98:ac:5e:
2d:aa:d1:67:35:49:d0:c4:42:65:67:dc:df:1e:a7:00:19:87:
00:b7:36:bd:77:ec:73:e4:b2:ff:78:8c:b9:3c:9d:21:99:49:
b5:22:87:35:98:98:96:05:30:27:60:bd:c8:fb:b0:42:63:d1:
50:8e:b1:9c:e2:e7:4b:de:f7:8d:79:28:1a:d3:60:2d:49:3e:
94:af:1e:3d:3d:0a:ec:d2:20:62:35:c1:a8:0e:97:9c:16:6f:
52:f2:f6:cd:4a:c4:e6:7b:79:a6:a5:74:f7:d1:f0:cb:4d:93:
10:18:91:54:8c:45:30:71:e7:59:1e:40:87:49:5e:c0:10:37:
70:8b:4e:af:3a:bf:e2:6c:9a:e2:a9:08:ea:d2:22:a9:2d:fa:
1a:d3:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 02:57:02 2025 by rpki-client