Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6724E08E9D4311F09E564DECDAE4EC9C.roa
File: 6724E08E9D4311F09E564DECDAE4EC9C.roa (raw, json)
Hash identifier: GPQw3l2yJmeIZiVNzGDPwts9n14Lp/j8IHYcMNZ8h6Y=
Subject key identifier: CC:B3:7F:6B:72:28:FB:67:5F:65:D8:D8:D6:A5:13:F5:E6:CD:42:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6724E08E9D4311F09E564DECDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 14:48:47 +0000
ROA not before: Mon 29 Sep 2025 14:48:42 +0000
ROA not after: Tue 28 Oct 2025 14:48:42 +0000
asID: 44559
IP address blocks: 45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97729 (0x17dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 14:48:42 2025 GMT
Not After : Oct 28 14:48:42 2025 GMT
Subject: CN=68da9c4f-5433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:79:4f:59:d5:2b:9b:c6:6a:6e:68:c3:7b:
0a:a0:2d:04:48:b8:e9:4a:ae:ea:c6:0a:dc:c6:47:
81:d9:81:4e:a7:b9:86:91:51:53:fb:58:da:3a:53:
9e:07:7b:eb:98:66:53:97:58:c1:64:1a:3a:5e:76:
8f:95:21:bb:74:f4:96:e1:5c:8a:a0:92:a4:b1:80:
b5:73:2c:f6:67:22:b1:04:4f:6a:3b:bf:b4:cf:5a:
81:ba:3b:1a:fb:00:3f:8d:6e:58:b2:a7:51:a4:fe:
4c:53:78:fe:c6:7f:bb:ac:ac:27:a3:a1:f8:f2:0a:
1d:ab:ea:74:98:f7:08:70:f8:6d:a4:90:8e:ce:e1:
9b:78:a5:d8:1f:59:50:61:db:3f:26:3c:dc:ea:06:
cb:4f:23:20:ff:05:de:da:7d:b5:e3:7e:b7:28:e1:
07:82:fe:3a:13:96:6c:89:42:82:cb:a3:88:9a:3e:
b7:3b:76:05:81:1f:8d:23:f0:07:e8:65:ab:b5:03:
ea:17:ab:ca:8e:54:2c:7b:2e:ee:e8:62:e1:8e:7f:
a4:e8:6f:1f:c5:62:36:8a:e9:94:7b:7a:14:89:38:
23:da:7a:76:e3:8d:72:d6:dc:86:5c:2a:76:ee:ce:
3d:ab:d9:43:cc:9e:71:eb:40:16:22:87:dc:55:26:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:7F:6B:72:28:FB:67:5F:65:D8:D8:D6:A5:13:F5:E6:CD:42:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6724E08E9D4311F09E564DECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.170.0/24
45.195.174.0-45.195.177.255
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.199.209.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
4b:2b:bb:1e:22:b7:04:dd:bb:ac:7e:13:09:6e:ed:cf:cf:f3:
c0:a3:c8:a1:b2:19:2d:74:4e:99:db:34:3f:75:a8:ed:b7:57:
80:d7:3c:af:c4:93:7c:e8:99:0d:b2:ff:ed:20:1b:76:e2:ca:
fd:2c:3c:a8:1d:3f:93:e3:c8:f3:87:d4:aa:fe:0d:1a:f2:7b:
f6:4e:e3:f7:78:79:1b:b8:d3:78:13:e8:c1:4c:93:5b:a1:4c:
51:01:f5:6e:3e:80:f7:93:34:2f:a5:59:9e:da:df:a1:81:ef:
53:3e:a4:27:4c:4e:7a:47:79:90:2e:cc:79:00:36:e1:37:fe:
4e:a9:93:22:d6:6a:02:f7:ce:fe:82:3a:aa:f1:5b:67:25:15:
19:61:3f:ce:7f:7d:d3:0a:5a:8d:71:81:52:fb:d7:4c:8b:72:
bc:96:03:36:f7:11:88:7f:28:13:06:ff:33:ff:6c:6a:69:cd:
68:74:ba:ed:33:83:ae:76:be:ea:9b:d1:ce:ac:7f:d4:95:0f:
5f:18:be:01:b0:31:4b:ae:af:40:2c:56:14:2e:80:00:5a:81:
b4:dc:ae:9e:9d:46:1d:34:b6:7b:60:66:ea:ba:fd:8c:3b:2e:
e7:c8:37:07:0b:25:6b:c4:6b:6a:79:bc:2c:4a:54:cf:56:f9:
e9:de:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:55 2025 by rpki-client