Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE69398038A211F09E8BAC93DAE4EC9C.roa
File: CE69398038A211F09E8BAC93DAE4EC9C.roa (raw, json)
Hash identifier: tiH6Wwnen3CPFZmmxBq9r9BJWQPwmEpsPFOhGg66Bcg=
Subject key identifier: FD:F0:30:E9:45:16:A0:BD:C2:79:48:AD:58:53:28:CE:B0:FF:44:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01575A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE69398038A211F09E8BAC93DAE4EC9C.roa
Signing time: Sat 24 May 2025 13:27:15 +0000
ROA not before: Sat 24 May 2025 13:27:10 +0000
ROA not after: Mon 30 Jun 2025 13:27:10 +0000
asID: 2914
IP address blocks: 45.196.69.0/24 maxlen: 24
45.196.82.0/24 maxlen: 24
45.196.83.0/24 maxlen: 24
45.196.84.0/24 maxlen: 24
45.196.85.0/24 maxlen: 24
45.196.86.0/24 maxlen: 24
45.196.87.0/24 maxlen: 24
45.196.88.0/24 maxlen: 24
45.196.89.0/24 maxlen: 24
45.196.90.0/24 maxlen: 24
45.196.91.0/24 maxlen: 24
45.196.92.0/24 maxlen: 24
45.196.93.0/24 maxlen: 24
45.196.94.0/24 maxlen: 24
45.196.95.0/24 maxlen: 24
45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.196.98.0/24 maxlen: 24
45.196.99.0/24 maxlen: 24
45.196.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87898 (0x1575a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:27:10 2025 GMT
Not After : Jun 30 13:27:10 2025 GMT
Subject: CN=6831c933-0fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:81:b4:70:70:33:40:f3:21:4a:61:dc:72:
fe:15:c2:f2:f2:a3:f4:99:e7:00:8a:ca:6f:b8:41:
4b:dc:3b:cd:7f:8b:2a:5a:f0:8a:cf:92:5e:ed:34:
bc:1d:e5:e0:15:2d:ea:11:ed:68:3d:16:8f:4e:bc:
85:b3:24:65:ee:43:97:f5:3f:5c:e8:21:2a:75:57:
93:a4:3f:c9:7c:0d:4a:62:7a:cb:82:53:f7:28:79:
d0:db:ba:b9:f5:5b:8c:65:65:62:ef:ab:82:85:77:
d0:5e:34:f5:1a:46:60:52:87:01:2c:ef:51:8c:17:
d6:02:96:ed:a1:23:ef:8b:58:ae:cc:14:6f:2f:5f:
51:5e:b1:6c:7b:ce:82:49:cb:a6:65:38:32:25:3f:
e2:90:1f:c9:fe:d2:6f:39:74:bb:93:b1:23:7e:2d:
12:4a:9a:4f:df:1c:9a:26:f7:6f:7b:e1:44:d1:48:
41:e9:61:83:68:d3:dd:81:eb:00:f0:dd:ee:30:ad:
68:13:2f:2c:83:bf:20:d8:71:a3:d1:98:3b:bb:f7:
59:02:90:72:73:75:91:ad:56:9a:1d:4e:fb:97:37:
6f:da:c2:a0:c2:92:92:c7:16:52:f6:ce:c1:f7:a7:
79:bd:9b:48:fd:df:e5:8f:af:60:bc:33:e5:55:0e:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:30:E9:45:16:A0:BD:C2:79:48:AD:58:53:28:CE:B0:FF:44:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE69398038A211F09E8BAC93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.69.0/24
45.196.82.0-45.196.100.255
Signature Algorithm: sha256WithRSAEncryption
27:70:16:ef:b5:84:79:84:92:ca:74:9a:a0:84:87:a0:9f:ab:
ab:b4:1c:57:33:ed:be:b4:14:98:65:ab:e4:a4:67:e0:b6:b3:
a5:b8:bc:92:70:f7:83:2f:37:51:78:95:11:ec:88:f4:7f:e8:
d0:39:26:16:b0:5e:37:10:f3:8b:6b:9e:87:dc:51:43:78:68:
82:38:02:47:fe:0b:06:15:be:fe:d7:e0:a4:43:24:07:17:b1:
1c:1d:e8:78:d8:e1:40:db:f4:ac:02:05:58:ed:46:35:99:f4:
d0:c6:1a:94:ee:73:9b:41:62:23:eb:60:50:a4:46:ed:1a:83:
d2:56:5f:3b:f5:60:4c:e1:d3:11:9d:63:3c:38:9e:2a:be:3f:
48:73:1c:f3:d0:b5:fe:0e:8b:3e:19:aa:e5:e0:88:e1:16:e2:
72:2a:ef:aa:7f:69:da:9b:42:f1:19:1b:2a:f3:72:f4:81:9d:
79:dc:89:f3:dc:b1:46:bb:f0:81:50:f8:17:ad:f0:c3:50:10:
85:6d:94:26:50:ac:82:6f:07:ec:a7:12:d2:a3:bc:f6:b2:43:
75:4f:3c:97:21:0a:ad:c1:85:b0:86:18:55:4a:7b:94:cf:61:
03:53:28:fa:ca:17:03:ef:42:2b:a2:c4:5a:b1:3f:18:44:d0:
bd:e1:ad:8b
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAVdaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTI0MTMyNzEwWhcNMjUwNjMwMTMyNzEwWjAYMRYw
FAYDVQQDEw02ODMxYzkzMy0wZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvY6BtHBwM0DzIUph3HL+FcLy8qP0mecAispvuEFL3DvNf4sqWvCKz5Je
7TS8HeXgFS3qEe1oPRaPTryFsyRl7kOX9T9c6CEqdVeTpD/JfA1KYnrLglP3KHnQ
27q59VuMZWVi76uChXfQXjT1GkZgUocBLO9RjBfWApbtoSPvi1iuzBRvL19RXrFs
e86CScumZTgyJT/ikB/J/tJvOXS7k7Ejfi0SSppP3xyaJvdve+FE0UhB6WGDaNPd
gesA8N3uMK1oEy8sg78g2HGj0Zg7u/dZApByc3WRrVaaHU77lzdv2sKgwpKSxxZS
9s7B96d5vZtI/d/lj69gvDPlVQ6z9QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFP3w
MOlFFqC9wnlIrVhTKM6w/0TYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRTY5Mzk4MDM4QTIxMUYwOUU4QkFDOTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALcRFMAwDBAEtxFIDBAAtxGQw
DQYJKoZIhvcNAQELBQADggEBACdwFu+1hHmEksp0mqCEh6Cfq6u0HFcz7b60FJhl
q+SkZ+C2s6W4vJJw94MvN1F4lRHsiPR/6NA5JhawXjcQ84trnofcUUN4aII4Akf+
CwYVvv7X4KRDJAcXsRwd6HjY4UDb9KwCBVjtRjWZ9NDGGpTuc5tBYiPrYFCkRu0a
g9JWXzv1YEzh0xGdYzw4niq+P0hzHPPQtf4Oiz4ZquXgiOEW4nIq76p/adqbQvEZ
GyrzcvSBnXncifPcsUa78IFQ+Bet8MNQEIVtlCZQrIJvB+ynEtKjvPayQ3VPPJch
Cq3BhbCGGFVKe5TPYQNTKPrKFwPvQiuixFqxPxhE0L3hrYs=
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:40:10 2025 by rpki-client