Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3F7C769D0F11F0BC3C2DA6DAE4EC9C.roa
File: BB3F7C769D0F11F0BC3C2DA6DAE4EC9C.roa (raw, json)
Hash identifier: KPIkOCNsX0oeH6ruTHgx0IXcQMFNgSqp1W+m1A4UDww=
Subject key identifier: F2:04:BF:B2:47:71:99:60:91:DC:B2:DF:7D:F0:6A:2B:04:CC:96:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3F7C769D0F11F0BC3C2DA6DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 08:38:55 +0000
ROA not before: Mon 29 Sep 2025 08:38:49 +0000
ROA not after: Tue 28 Oct 2025 08:38:49 +0000
asID: 202656
IP address blocks: 45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
45.199.255.0/24 maxlen: 24
45.200.160.0/24 maxlen: 24
45.200.161.0/24 maxlen: 24
45.200.162.0/24 maxlen: 24
45.200.163.0/24 maxlen: 24
45.200.164.0/24 maxlen: 24
45.200.165.0/24 maxlen: 24
45.200.166.0/24 maxlen: 24
45.200.167.0/24 maxlen: 24
45.200.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97707 (0x17dab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:38:49 2025 GMT
Not After : Oct 28 08:38:49 2025 GMT
Subject: CN=68da459f-eab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:3c:65:e3:3d:8c:12:ae:80:1b:b9:ec:67:
77:fb:64:d2:b4:da:d6:71:0d:3f:42:0f:2b:61:fd:
1f:af:d4:d8:e3:cb:01:00:8f:41:99:9e:c3:a9:1c:
4b:be:d8:5e:93:ef:54:7d:db:30:50:53:9c:88:58:
93:79:62:75:8f:d9:cc:64:cd:91:02:ce:88:e9:63:
21:17:77:b3:87:d9:cb:1c:5e:66:86:63:30:71:b2:
59:88:d2:cc:d7:4f:e8:c6:d5:22:30:7f:bb:7e:5e:
6d:97:6d:55:31:2c:41:89:fc:a5:62:2b:a7:85:96:
f5:cf:6f:e5:2f:71:ce:db:4a:46:fb:43:35:e7:c1:
a7:c7:8f:1e:ea:fe:a7:fe:77:2c:cb:96:74:60:17:
58:3e:52:bb:12:09:d2:0e:8d:b3:81:5a:ea:2f:26:
29:33:a0:4d:28:a0:60:b4:e0:e2:a5:e3:84:eb:81:
2b:a3:f7:5d:18:7a:65:e3:28:9a:86:ad:3a:22:cb:
16:74:6d:8c:bb:c5:7b:15:86:9c:63:93:7b:74:a5:
d8:6a:fd:c0:3c:55:82:0e:1e:35:4c:b0:06:5e:67:
71:e9:7b:b4:02:29:c8:4b:b5:ca:aa:bd:9b:f7:e2:
ba:06:12:fe:d4:45:a2:a1:0c:ef:46:3b:fb:f1:f9:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:BF:B2:47:71:99:60:91:DC:B2:DF:7D:F0:6A:2B:04:CC:96:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB3F7C769D0F11F0BC3C2DA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.229.0-45.199.230.255
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.199.252.0/24
45.199.255.0/24
45.200.160.0-45.200.168.255
Signature Algorithm: sha256WithRSAEncryption
5b:24:a2:af:85:28:f3:31:cc:0d:6f:e2:8a:d9:37:fc:90:fc:
14:4b:2a:a8:b5:c8:7c:c3:ff:95:e9:d7:0f:24:b0:dd:12:39:
2d:0e:ce:19:0e:ee:c0:a3:14:43:7c:d8:e7:8f:6f:18:7a:c7:
9f:6c:36:fb:db:22:d8:44:f5:2e:f7:0e:e6:27:40:8d:94:4b:
57:bb:ba:e1:b4:b4:47:5b:7e:bd:11:75:d9:fe:cd:3f:83:04:
b7:46:ad:58:89:93:40:12:6b:30:93:65:69:85:90:3c:ca:25:
d8:bf:d4:b6:37:1c:ca:9b:a5:da:4a:1c:8d:18:7f:09:b1:68:
58:0d:69:c2:75:b3:62:e3:23:ad:bf:cd:8c:f9:47:7d:97:a0:
4a:a0:83:4e:d1:fd:bf:3c:61:52:90:f8:73:8e:b7:94:3f:00:
88:c9:2c:02:5a:97:21:68:37:2d:a5:9c:76:96:68:f0:06:40:
e5:c7:c6:f8:9f:cb:26:b1:fa:1a:53:a7:39:db:a4:4f:a2:f6:
1d:96:f0:67:b6:68:00:af:3c:26:de:e6:cb:25:b9:51:68:84:
b2:96:ed:de:f5:55:b6:d3:47:cb:2b:b3:ca:27:95:70:d1:29:
60:ac:95:da:84:e6:7f:d2:ef:35:71:56:9e:5d:f3:b8:a9:0f:
b8:29:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:34 2025 by rpki-client