Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D4638E45CDA11F0BCE7C3CADAE4EC9C.roa
File: 7D4638E45CDA11F0BCE7C3CADAE4EC9C.roa (raw, json)
Hash identifier: AnGJ7LqDA85whznA4jqwsbi4gklWV1gDiLkVXRPbpDc=
Subject key identifier: 5E:9D:B1:55:1C:CE:AD:2B:B5:D5:F9:66:FD:B7:1E:E9:EA:06:8F:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016412
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D4638E45CDA11F0BCE7C3CADAE4EC9C.roa
Signing time: Wed 09 Jul 2025 15:36:33 +0000
ROA not before: Wed 09 Jul 2025 15:36:28 +0000
ROA not after: Sat 16 Aug 2025 15:36:28 +0000
asID: 401701
IP address blocks: 45.192.96.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91154 (0x16412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 15:36:28 2025 GMT
Not After : Aug 16 15:36:28 2025 GMT
Subject: CN=686e8c81-aa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:32:9b:3d:f8:69:13:75:83:e7:fd:ed:07:
cc:06:e9:9a:e0:a6:a0:74:45:d6:cf:bb:50:ac:00:
3e:f5:1f:20:00:4e:a4:c9:21:d8:fd:5e:7e:d3:58:
37:7a:06:7f:26:38:55:95:95:34:86:2e:7f:76:21:
65:07:54:84:ff:42:a8:d9:29:ce:05:94:71:94:72:
b5:e9:17:4e:a8:20:c0:83:3d:f6:31:a4:58:18:20:
3d:cd:15:c4:27:e3:82:75:8b:4e:c5:f8:a8:93:52:
e3:9c:ea:37:b9:79:7c:4f:c5:4f:09:57:e5:81:ee:
dc:fa:fa:cf:3c:72:e2:4d:5a:9d:d3:58:fc:56:1e:
63:64:06:21:05:8d:b9:40:7c:e1:eb:5a:98:6d:c1:
c9:9c:c1:c2:98:d7:53:c6:4b:d8:1b:9f:e4:88:05:
b0:83:3e:d3:3c:8a:4e:8e:9d:ae:43:4e:e6:26:18:
36:8e:8c:f2:5b:b6:2b:46:b2:db:a6:30:50:27:5f:
56:94:c6:f4:e8:fa:cf:52:c6:77:d2:8b:73:06:ff:
19:05:28:04:88:85:d1:1d:1e:71:db:48:25:0a:7f:
bc:bd:da:ea:f2:3c:e5:9d:64:64:c8:cf:a5:72:93:
14:0e:95:92:c1:46:f0:69:b0:c0:0b:e6:ed:00:7e:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:B1:55:1C:CE:AD:2B:B5:D5:F9:66:FD:B7:1E:E9:EA:06:8F:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D4638E45CDA11F0BCE7C3CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
59:ce:c5:e6:ec:77:bf:c8:dd:1d:9c:ca:35:fe:9f:79:dd:fd:
91:00:ca:d2:3f:b8:7f:4a:6b:ec:12:0e:a6:0d:ff:a8:a8:02:
1e:70:68:4e:27:45:d0:1c:5b:b4:2c:f6:9f:88:25:ab:b6:71:
72:51:6e:78:e6:61:4a:6a:60:e2:ec:29:c0:77:9a:14:bc:2b:
eb:68:4e:51:fd:cb:ba:33:71:23:e2:76:e8:92:69:43:7c:a4:
91:52:8e:ba:de:34:44:50:ef:54:2c:fb:e5:d4:8e:63:ff:c4:
1c:a1:ea:68:04:9c:ee:9f:15:0a:be:5c:2b:fe:70:3d:2b:0d:
29:2d:46:2e:1a:63:ac:b1:1e:8e:8e:a5:94:01:70:56:69:fe:
84:ae:20:78:c0:13:cd:ab:22:b7:62:e6:c3:d2:16:d9:3c:0b:
a2:fc:db:69:83:b6:bb:73:c4:e7:7e:88:0e:a4:83:42:c9:20:
87:2f:ec:3b:4f:81:f4:41:12:c3:25:1e:70:67:5e:45:bb:5c:
a6:7b:32:d1:27:f5:71:a7:72:1e:5f:5e:f7:79:6d:aa:cb:4a:
6b:ad:62:19:46:31:1c:e4:aa:d1:9c:03:0c:3d:50:6f:6f:fb:
88:fc:19:51:1a:9b:55:f7:ad:1c:29:a6:c6:8d:26:f0:52:8f:
04:97:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:30:23 2025 by rpki-client