Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACE6529683EF11F099AF81F6DAE4EC9C.roa
File: ACE6529683EF11F099AF81F6DAE4EC9C.roa (raw, json)
Hash identifier: oKmZFG/xCCi6L4lp4ubqmEXFR7bSTY2YHmxDrwwhU1U=
Subject key identifier: CD:DA:68:2B:F1:AA:01:08:03:C3:62:C8:65:92:DB:D1:ED:08:1F:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017262
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACE6529683EF11F099AF81F6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:16:27 +0000
ROA not before: Thu 28 Aug 2025 09:16:22 +0000
ROA not after: Sun 28 Sep 2025 09:16:22 +0000
asID: 202656
IP address blocks: 45.192.61.0/24 maxlen: 24
45.192.62.0/24 maxlen: 24
45.195.160.0/24 maxlen: 24
45.195.166.0/24 maxlen: 24
45.195.169.0/24 maxlen: 24
45.195.171.0/24 maxlen: 24
45.195.172.0/24 maxlen: 24
45.195.173.0/24 maxlen: 24
45.195.178.0/24 maxlen: 24
45.195.180.0/24 maxlen: 24
45.200.169.0/24 maxlen: 24
45.200.170.0/24 maxlen: 24
45.200.171.0/24 maxlen: 24
45.200.172.0/24 maxlen: 24
45.200.173.0/24 maxlen: 24
45.200.174.0/24 maxlen: 24
45.200.175.0/24 maxlen: 24
45.200.176.0/24 maxlen: 24
45.200.177.0/24 maxlen: 24
45.200.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94818 (0x17262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 09:16:22 2025 GMT
Not After : Sep 28 09:16:22 2025 GMT
Subject: CN=68b01e6b-1e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:fd:0e:a5:19:cf:9d:4f:9b:b9:fa:9d:22:
25:af:0c:98:42:ac:2c:b0:51:b7:9e:6c:5c:c9:18:
49:5b:44:0a:71:fb:ce:b5:e4:2a:13:94:73:cd:c7:
b5:4c:9d:95:6e:b1:ea:d8:c2:09:63:a2:70:85:7a:
fd:28:0e:6e:ea:69:e1:d8:50:ef:68:2f:3f:4c:c5:
60:37:0b:31:35:0a:06:01:5d:7f:61:d1:77:b3:f1:
25:8e:e6:94:0d:2e:81:95:47:f2:12:20:2d:e6:c4:
d4:53:d6:4d:f0:41:38:5d:48:88:ee:e1:ce:39:70:
b7:39:a2:0d:17:53:1a:91:d3:f0:7e:45:d0:7e:66:
cf:d3:65:5f:0e:ef:01:28:1a:b3:58:0b:3d:cc:26:
e6:5b:0f:92:fb:f7:c9:d6:92:a9:35:c4:f3:db:3b:
9c:c8:af:a6:4b:f0:fc:71:e8:18:d1:fb:a4:84:b0:
20:ba:81:56:25:b5:88:5b:25:29:26:2d:dd:72:51:
f2:5d:d4:b4:16:49:46:0b:8e:70:2b:1c:e3:c2:31:
3e:4b:42:63:33:78:5a:08:8d:1a:0f:8c:3d:d0:2f:
94:60:8b:92:e7:d2:d0:d0:69:f3:7b:60:75:b1:37:
b8:0e:61:d1:af:15:26:57:ed:c4:70:6c:88:ed:0d:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:68:2B:F1:AA:01:08:03:C3:62:C8:65:92:DB:D1:ED:08:1F:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACE6529683EF11F099AF81F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.61.0-45.192.62.255
45.195.160.0/24
45.195.166.0/24
45.195.169.0/24
45.195.171.0-45.195.173.255
45.195.178.0/24
45.195.180.0/24
45.200.169.0-45.200.178.255
Signature Algorithm: sha256WithRSAEncryption
40:e3:98:b2:6d:b1:f2:c8:f1:2c:a7:68:34:9f:51:26:1c:04:
88:06:68:c6:62:9d:5e:bf:e9:cf:94:d8:56:e9:69:5c:eb:c6:
dc:24:27:d9:be:09:1b:61:dc:87:2f:d2:8d:9d:ea:25:49:3e:
04:cd:00:cf:ce:20:f5:6a:fb:41:73:78:e2:78:5c:a2:4f:f9:
5e:80:13:48:8c:6e:57:f3:c3:e4:33:15:9c:96:e4:de:b7:ae:
89:77:70:49:d4:f2:d1:d8:90:ad:3e:cf:23:0f:e5:0d:4f:4d:
94:95:4b:50:b2:75:49:d9:90:0f:bf:76:32:4e:5d:b7:d8:18:
ec:3f:8f:85:75:ff:f9:28:11:3c:24:30:cb:63:5d:ae:53:6d:
ac:0a:22:a9:6e:1e:a6:5a:c9:95:5f:1e:ea:ab:ce:27:69:8b:
f2:cc:dd:79:95:8a:42:28:a9:b1:e9:16:0b:92:51:90:97:4e:
c7:cd:31:a2:ec:cc:16:be:f4:83:8a:c8:6a:31:24:2a:4c:a5:
0f:4b:b5:b6:92:7a:3f:d9:f2:b0:52:8f:d3:f1:9b:7f:7e:35:
72:7e:1e:7a:61:b9:f0:23:99:44:74:09:76:7f:92:3b:94:32:
f7:fa:d1:59:46:93:cb:cb:25:b2:42:5d:6a:de:32:13:af:4b:
32:c5:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:54 2025 by rpki-client