Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D0599509DD311F0ACD6C19BDAE4EC9C.roa
File: 5D0599509DD311F0ACD6C19BDAE4EC9C.roa (raw, json)
Hash identifier: u7irnmr9xewlmeTE0vdT+gLhhyuocwYITnDUra7qxEA=
Subject key identifier: 3B:2C:84:94:28:FB:9A:39:E7:E8:AE:15:2D:A2:DA:18:C0:D5:69:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D0599509DD311F0ACD6C19BDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 07:59:18 +0000
ROA not before: Tue 30 Sep 2025 07:59:12 +0000
ROA not after: Tue 28 Oct 2025 07:59:12 +0000
asID: 44559
IP address blocks: 45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97819 (0x17e1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 07:59:12 2025 GMT
Not After : Oct 28 07:59:12 2025 GMT
Subject: CN=68db8dd5-f94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:04:52:88:ca:cc:f0:6e:81:b8:91:14:cb:
17:a8:a8:75:83:35:4c:4c:45:68:cf:7f:0d:96:ea:
bf:eb:99:8b:a5:55:e7:4f:4c:1a:03:07:8b:3a:6a:
a1:d0:07:a0:58:ab:18:35:c9:84:3b:82:a4:12:b7:
2a:51:0d:27:f9:51:fa:5c:ec:bc:1d:39:26:65:bb:
f8:31:2e:bc:d4:95:53:9f:96:87:1e:00:7b:de:5f:
92:97:f4:6b:68:0b:7e:18:28:63:c1:f2:02:47:6c:
af:96:0a:8c:de:db:fd:09:ef:21:3c:78:4b:64:0e:
fd:0d:a2:99:f1:40:27:ec:18:a0:93:5a:26:94:57:
de:ac:93:69:15:22:80:1e:69:b7:9d:79:27:c8:45:
ef:0f:19:83:00:20:ae:61:63:dd:fc:e1:43:68:9d:
91:0d:6e:4c:e5:24:c1:4e:3a:a9:8f:9e:73:79:27:
84:9a:4c:7b:8c:3c:ef:79:d3:b8:21:0f:ac:f8:af:
f5:ed:c8:51:c4:5b:0e:42:89:be:d6:53:29:0f:03:
f8:ba:64:74:a8:00:ee:8a:fd:b4:0e:c0:c9:d3:18:
59:17:e2:68:26:b3:83:63:91:a5:e7:ed:93:5e:a9:
59:19:1e:d1:1a:7c:79:c2:92:81:17:8c:24:e6:cb:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2C:84:94:28:FB:9A:39:E7:E8:AE:15:2D:A2:DA:18:C0:D5:69:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D0599509DD311F0ACD6C19BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.207.0-45.199.208.255
45.199.231.0-45.199.240.255
45.199.246.0-45.199.248.255
45.199.251.0/24
45.199.253.0-45.199.254.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
36:77:61:32:d0:1f:e9:e3:9c:87:56:64:18:04:58:e6:be:1b:
45:e9:d5:cc:ef:a1:fa:84:47:a0:e5:25:40:99:57:19:8b:7c:
a6:e6:4f:d1:fd:78:10:d9:20:04:ef:7c:db:24:f1:8a:b3:e2:
19:f6:6d:f7:ee:df:bc:82:0e:53:6c:c9:83:ac:13:f3:ba:7f:
2f:82:e7:42:86:a5:16:d6:ce:8d:55:0d:1a:02:39:55:c8:e5:
4d:5c:38:86:8f:8f:76:48:b4:90:5e:0c:b5:a2:ba:2b:40:18:
61:5d:3c:39:b3:66:8c:02:3a:6d:ce:6c:fb:e5:03:9a:ca:40:
8e:6a:a3:14:d1:99:f5:66:84:ff:2d:fc:1d:2c:32:39:af:3c:
2e:2e:1b:1d:4a:8c:f5:e7:3d:58:8c:c4:ee:5d:16:e8:b0:32:
a4:2e:08:8d:fd:dd:d0:bb:94:9a:86:78:b2:1d:75:de:17:ce:
e9:87:26:10:1b:85:8b:e2:be:45:d7:c5:03:3c:ff:ca:59:3f:
70:4b:56:a8:92:fd:54:b5:3c:4b:65:3b:01:cb:2b:e0:6d:d4:
fc:d8:d0:30:8b:2d:7c:4e:2b:c6:0a:3c:77:6e:d8:f7:06:00:
6c:3e:be:01:dd:63:96:61:dd:2c:d5:09:62:48:fc:6f:e7:9a:
ab:7b:b7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:07 2025 by rpki-client