Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57550AC863411F0B44C42CADAE4EC9C.roa
File: E57550AC863411F0B44C42CADAE4EC9C.roa (raw, json)
Hash identifier: K24aWZRO7uS+W6ml/FAD6Mvaok12CiCyl1P2H9GDNwc=
Subject key identifier: 4B:6E:45:29:FE:08:EF:5D:F1:C9:B5:E0:05:92:72:AD:6E:D3:54:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017476
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57550AC863411F0B44C42CADAE4EC9C.roa
Signing time: Sun 31 Aug 2025 06:37:00 +0000
ROA not before: Sun 31 Aug 2025 06:36:55 +0000
ROA not after: Sun 07 Sep 2025 06:36:55 +0000
asID: 54801
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95350 (0x17476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 06:36:55 2025 GMT
Not After : Sep 7 06:36:55 2025 GMT
Subject: CN=68b3ed8c-d7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:b4:a3:8d:43:31:36:05:80:19:19:7a:04:
08:89:de:a4:db:31:27:37:70:b3:2f:14:ae:9d:c8:
81:0f:0d:ff:52:1b:ea:e9:70:19:31:3b:9c:36:4a:
90:73:2f:9a:c6:25:1f:46:79:77:ce:b5:37:f3:3c:
92:c8:82:6a:cd:f0:11:3f:b9:3c:f9:be:80:f1:86:
c6:62:4a:ba:90:ac:9d:15:9e:4c:e4:66:13:db:5b:
c5:cb:f7:aa:6b:38:93:3f:9b:dd:09:ee:62:0e:27:
45:74:35:ac:12:10:7e:95:ff:ad:94:73:b7:3e:35:
9b:24:94:12:a6:d5:db:66:90:c0:5a:6b:51:30:05:
8f:a9:f9:0a:28:2c:f3:37:fe:fb:44:13:db:2f:04:
ed:66:b9:6f:82:66:e9:e4:d0:7a:f8:e8:f6:3d:53:
8d:9f:bd:16:da:6e:c4:24:ec:61:35:30:55:fc:ee:
fb:4f:bc:21:2d:ec:40:49:87:5b:8c:d4:ac:2b:53:
32:fc:be:d2:0f:fe:2f:f1:ac:7f:17:da:97:2e:b1:
76:1a:5f:72:92:e7:08:9d:9c:37:0d:e6:df:f4:7e:
a9:01:c5:b6:28:00:36:ce:69:68:a0:f0:46:bb:c9:
e7:12:93:f0:2e:26:1f:cb:92:b5:a6:e5:c7:5a:ab:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:45:29:FE:08:EF:5D:F1:C9:B5:E0:05:92:72:AD:6E:D3:54:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57550AC863411F0B44C42CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.31.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b4:94:96:a7:c4:99:8e:7d:7c:12:6c:1e:d4:0d:19:1f:c3:
d5:a1:2d:fd:e2:ef:c8:29:79:53:fd:34:82:ee:39:72:ef:97:
81:bb:3f:18:bb:ea:c6:67:a7:a4:b0:15:6b:02:cc:d3:fe:51:
17:08:3c:72:2c:ad:34:c2:93:11:c9:f6:c0:9e:3f:97:bd:31:
15:dd:b7:79:85:1b:bf:1e:b1:26:f0:b0:9d:bb:f3:73:81:72:
bc:53:16:14:da:53:34:f9:f2:cf:45:b2:92:a6:b2:27:69:8a:
7b:6a:36:0f:6f:ef:90:ce:54:23:53:1f:6f:6d:d7:0f:3c:4d:
14:a3:05:09:f0:79:16:e6:29:f2:b2:18:68:58:a8:1e:16:10:
8a:81:12:c5:50:63:9c:3b:07:aa:fb:e7:cd:fe:75:eb:c4:1c:
c7:fd:94:43:37:04:33:2d:f4:d9:35:db:20:21:06:f5:51:4e:
16:db:dc:76:9a:6a:a5:4f:df:8d:f3:df:de:aa:d9:f8:e3:ae:
2f:33:3d:89:4d:82:6a:f2:1f:50:0f:51:76:0b:51:be:cb:dd:
aa:f3:b8:26:5d:ee:a5:60:2d:9e:8b:1d:91:4c:7d:1d:e1:cb:
a2:25:3e:4c:3a:f6:6e:6a:f0:f0:8e:14:87:e6:fb:b8:45:9a:
58:e5:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:12:17 2025 by rpki-client