Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A62754A83F311F0A8AD628EDAE4EC9C.roa
File: 1A62754A83F311F0A8AD628EDAE4EC9C.roa (raw, json)
Hash identifier: iRUk4FsE4mYaxLKRVdVCqgZgJBIBrLwls0hznYs/0J8=
Subject key identifier: E6:23:B8:E2:D6:62:03:96:90:4F:32:56:E0:60:7F:2C:12:8A:E4:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017268
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A62754A83F311F0A8AD628EDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:40:59 +0000
ROA not before: Thu 28 Aug 2025 09:40:54 +0000
ROA not after: Sun 28 Sep 2025 09:40:54 +0000
asID: 202656
IP address blocks: 45.192.48.0/24 maxlen: 24
45.192.49.0/24 maxlen: 24
45.192.50.0/24 maxlen: 24
45.192.51.0/24 maxlen: 24
45.192.54.0/24 maxlen: 24
45.192.55.0/24 maxlen: 24
45.192.56.0/24 maxlen: 24
45.192.57.0/24 maxlen: 24
45.192.58.0/24 maxlen: 24
45.192.60.0/24 maxlen: 24
45.195.182.0/24 maxlen: 24
45.195.183.0/24 maxlen: 24
45.195.184.0/24 maxlen: 24
45.195.185.0/24 maxlen: 24
45.195.187.0/24 maxlen: 24
45.195.188.0/24 maxlen: 24
45.195.191.0/24 maxlen: 24
45.199.192.0/24 maxlen: 24
45.199.193.0/24 maxlen: 24
45.199.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94824 (0x17268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 09:40:54 2025 GMT
Not After : Sep 28 09:40:54 2025 GMT
Subject: CN=68b0242b-431b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:97:89:49:41:9e:75:bc:81:01:e5:b8:82:
0b:c8:b1:cd:8f:73:8d:e8:21:2b:b4:43:ac:6b:76:
6d:0d:f9:a6:84:e2:5b:30:28:19:ca:ff:ce:90:22:
32:6e:6f:67:2a:a8:7a:7b:18:67:be:22:79:0b:20:
27:34:55:be:12:48:d5:f4:28:0a:b9:3c:1e:33:66:
ee:5b:2e:6b:4e:4f:51:71:fc:2b:4c:32:20:97:09:
72:58:33:db:7f:9b:36:48:9b:88:43:81:fd:9c:db:
19:3e:a6:ef:b9:d8:a2:93:2b:9b:15:dd:96:0c:fa:
70:29:f3:b9:13:16:d6:bb:32:84:09:26:4c:57:ca:
1c:a3:36:27:fa:f1:69:8d:46:b9:e7:c9:bf:92:97:
eb:c7:db:7d:b9:59:66:d2:92:c5:e9:e4:55:b6:f5:
17:a9:cc:49:3e:a0:2f:8b:07:09:8b:f8:35:8c:55:
e6:ab:eb:0e:d2:84:f1:df:ba:d5:66:3a:09:16:66:
97:d6:f0:31:59:69:7a:37:3d:96:1c:d0:7d:6e:d4:
69:fc:e6:7b:b9:bb:a8:d8:27:10:fc:b0:2e:37:5f:
e4:f4:b7:3c:0b:5b:fd:93:53:cb:f9:39:4d:39:a4:
61:1f:81:48:c1:72:9d:e4:28:1a:50:c5:4c:0c:1f:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:B8:E2:D6:62:03:96:90:4F:32:56:E0:60:7F:2C:12:8A:E4:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A62754A83F311F0A8AD628EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/22
45.192.54.0-45.192.58.255
45.192.60.0/24
45.195.182.0-45.195.185.255
45.195.187.0-45.195.188.255
45.195.191.0/24
45.199.192.0-45.199.194.255
Signature Algorithm: sha256WithRSAEncryption
a7:09:bd:74:c3:d9:c8:35:be:e5:e1:93:5a:2b:90:a0:28:54:
d9:17:97:5c:b8:3b:9a:57:3f:95:e6:c2:f5:9c:df:3d:7d:da:
9c:4f:6e:4d:7a:65:6a:d6:7e:75:cb:04:ff:07:74:b6:30:62:
e3:e1:bd:79:91:d1:a5:4d:01:aa:3b:0d:1e:22:83:4c:37:dc:
aa:b6:9e:4a:05:17:5c:b9:df:84:a8:3a:7e:a7:25:7a:88:7d:
09:ed:35:69:be:26:3b:9e:cb:d8:fe:22:b5:fb:c2:07:3d:10:
f9:91:e1:41:db:ab:77:ba:13:f9:45:7c:61:fd:02:27:30:fa:
b4:5c:9c:ec:03:4f:8c:21:18:27:59:cc:b6:b0:bf:76:d0:82:
f3:20:f2:65:cc:f3:8c:1c:89:b5:08:50:75:36:fa:79:3b:a0:
af:d9:3e:fa:38:83:6b:98:1f:ff:d7:6e:55:45:fe:6b:98:58:
70:64:55:a0:63:df:2d:38:c6:6d:f8:04:3f:ba:7c:ff:7d:66:
f8:9d:d2:f2:1b:6d:9e:ca:ef:c7:12:5b:a2:07:a2:74:99:b3:
f9:94:ff:48:1b:7f:50:f4:12:e4:1e:2f:ab:72:10:0f:23:d2:
ae:79:d5:07:e4:4b:8a:94:29:ba:f3:4d:d5:dc:0a:c3:da:59:
05:4c:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:01 2025 by rpki-client