Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE04D7BA840911F088C8E9A0DAE4EC9C.roa
File: EE04D7BA840911F088C8E9A0DAE4EC9C.roa (raw, json)
Hash identifier: rgZaB/Gx68WzZQFWKFzcfQrX+ON99QZE8XYzVOQbek4=
Subject key identifier: 88:B4:D6:36:A7:FE:C6:68:63:E7:F6:AC:40:57:8F:2C:47:F3:B8:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017293
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE04D7BA840911F088C8E9A0DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 12:24:24 +0000
ROA not before: Thu 28 Aug 2025 12:24:18 +0000
ROA not after: Wed 08 Oct 2025 12:24:18 +0000
asID: 44559
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.202.198.0/24 maxlen: 24
45.202.200.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94867 (0x17293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 12:24:18 2025 GMT
Not After : Oct 8 12:24:18 2025 GMT
Subject: CN=68b04a78-fb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:33:30:cd:e6:40:82:2f:d7:fa:90:76:f8:c1:
85:4e:bb:b5:fe:2c:37:d5:26:16:55:87:59:38:db:
47:34:b8:b8:a6:7c:d7:91:f2:3c:23:aa:0c:36:cc:
26:c4:13:17:5f:e2:df:80:db:5f:d7:12:8f:88:75:
77:0e:b9:fb:27:a0:f8:03:02:af:01:ee:b9:86:7a:
7d:7b:63:a2:c9:63:63:c6:d4:59:f5:45:49:7c:c6:
3a:ee:ad:e4:b2:bd:4e:71:06:62:aa:a1:9b:42:90:
fa:a4:d7:6e:84:eb:12:22:5c:49:4d:15:85:ad:96:
cd:5d:2d:12:99:e8:18:f5:be:57:f7:9c:a8:9a:8e:
60:de:e2:7a:34:b7:f9:db:c7:2c:c1:bb:0c:f2:b4:
d5:e7:9a:e0:df:f1:78:89:34:e2:0d:1f:45:86:a8:
0e:04:a3:58:21:3b:9d:93:d1:16:f8:db:7f:85:d1:
95:a0:14:8c:4c:c3:df:8a:da:d0:83:23:08:5b:8d:
4b:e3:1d:fd:e4:ab:08:32:a2:2e:61:04:14:f1:57:
00:a3:fb:33:35:42:ef:55:26:d7:40:b6:6f:b1:cf:
c4:98:6e:56:a9:7b:3d:84:ff:a5:a0:0a:33:ab:10:
3a:e1:09:e5:45:87:54:28:2c:93:f8:77:d7:be:94:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B4:D6:36:A7:FE:C6:68:63:E7:F6:AC:40:57:8F:2C:47:F3:B8:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE04D7BA840911F088C8E9A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.192.0/23
45.202.198.0/24
45.202.200.0/24
45.207.161.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
6c:dd:30:a4:cf:08:7b:55:27:3c:0c:5d:4f:f0:32:f0:f3:38:
64:32:0a:42:a3:40:4d:0c:fb:f2:d1:38:e8:82:fb:39:cb:05:
29:c9:4b:4f:51:a2:94:43:b3:90:9e:b2:fa:b3:12:da:77:ac:
33:06:4a:48:a2:3e:9a:e4:fd:47:2a:47:0b:5c:9c:4b:c6:2f:
c4:ee:da:a0:7c:a0:68:b3:dd:49:04:f9:ae:3a:3a:47:8a:76:
e8:34:47:7a:bd:31:1e:db:a9:88:ed:ed:93:17:89:92:68:c6:
b7:00:3c:42:82:c9:aa:b9:5d:bb:10:3d:76:38:f5:25:79:47:
b0:01:94:3a:86:14:af:aa:3d:c7:61:fd:29:29:51:5c:3c:67:
f6:d5:8d:58:c0:28:95:05:22:57:b5:91:3f:21:74:48:c0:e0:
c2:20:ba:0b:18:18:ce:d6:97:03:c7:56:86:7e:56:8d:da:e7:
b7:4e:78:c9:8f:75:e2:02:95:84:e1:ad:7d:61:31:4b:05:2f:
57:62:71:fc:6f:0e:f1:05:4c:fb:71:38:7c:58:1f:bf:9e:82:
af:72:c8:4e:09:c9:2a:aa:c5:a3:b6:0b:43:1e:53:98:52:87:
19:dd:8f:68:6f:7d:ad:1d:f4:5a:07:c1:36:9c:0e:2c:7b:21:
56:23:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:28 2025 by rpki-client