Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA622406FA511F0AB538B8EDAE4EC9C.roa
File: 4AA622406FA511F0AB538B8EDAE4EC9C.roa (raw, json)
Hash identifier: HkmvA+TTwzu3HHbnU56EJFpe9Hr3XvTSyrme3bqKtsQ=
Subject key identifier: 4D:55:DF:2F:C5:E0:AD:52:0A:F2:A4:09:55:B1:63:FB:E8:15:F2:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01688C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA622406FA511F0AB538B8EDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 13:33:36 +0000
ROA not before: Sat 02 Aug 2025 13:33:29 +0000
ROA not after: Sun 07 Sep 2025 13:33:29 +0000
asID: 7029
IP address blocks: 45.196.32.0/22 maxlen: 24
45.196.40.0/22 maxlen: 24
45.196.48.0/22 maxlen: 24
45.196.52.0/22 maxlen: 24
45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92300 (0x1688c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 13:33:29 2025 GMT
Not After : Sep 7 13:33:29 2025 GMT
Subject: CN=688e13b0-c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:af:8e:39:2a:65:d3:0b:7d:93:b6:fe:cd:
ea:fb:59:f6:79:a9:ef:2b:96:78:e4:ec:cb:7b:44:
1b:70:1e:18:69:b9:12:c6:06:fa:9e:90:f6:6e:11:
70:6b:9d:15:c9:bd:8d:50:59:e6:08:f6:25:bf:ae:
1f:c8:dc:de:8e:23:24:b7:d6:81:6b:c7:c5:60:39:
b0:5a:c2:da:cb:e8:c6:1d:37:e9:ea:96:b0:c6:7d:
8e:be:34:eb:fa:ad:17:56:76:10:8b:95:53:de:4a:
3b:80:52:5c:5e:e7:1f:6e:ba:78:f4:0d:18:56:38:
a3:5d:57:85:94:12:c2:3f:63:d2:1d:5a:45:b6:53:
bc:96:4a:57:6e:b0:3f:20:f4:15:de:a6:04:7d:6a:
ed:1f:1b:c0:33:1d:5f:a7:80:0f:c6:8b:94:c4:8b:
ff:62:12:43:d0:8e:c0:33:ff:3e:f1:26:b2:a9:05:
8e:e8:32:b3:c2:6c:aa:28:68:33:20:ed:c0:f1:04:
9a:85:a4:e5:aa:fe:3c:21:6f:14:d3:94:ec:c7:58:
19:27:0b:e3:13:66:cc:8a:f3:44:2b:b9:d3:14:a7:
87:86:f8:dd:0a:77:0a:f8:e5:5d:a6:06:4f:17:22:
64:20:81:89:ae:ff:ad:a2:61:6a:23:f7:a0:44:d4:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:DF:2F:C5:E0:AD:52:0A:F2:A4:09:55:B1:63:FB:E8:15:F2:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AA622406FA511F0AB538B8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
45.196.40.0/22
45.196.48.0/21
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
18:f2:33:d1:6a:6c:b5:f5:54:d0:b6:c4:2f:43:f6:10:e3:15:
72:2e:77:cc:19:4d:d9:d5:c8:1d:16:5f:92:b0:51:66:e3:47:
11:15:97:34:cf:4a:8f:bb:67:19:a3:88:52:8c:36:f3:11:37:
92:9a:ea:e0:71:33:6c:c5:c3:26:9d:c3:09:22:e2:18:99:9c:
d6:03:cb:c8:a5:2f:ad:d8:4a:f4:40:ff:d2:bd:28:a1:4c:05:
b4:64:25:6a:be:ff:a6:67:e7:00:e2:15:f0:9c:87:ae:bf:04:
b9:24:63:e5:d4:b9:67:93:2b:91:74:8e:55:df:42:36:ee:31:
a1:84:6f:06:b6:0b:22:b5:7a:86:57:40:cf:bf:82:06:ea:45:
09:12:51:9f:cb:a0:71:2c:03:dc:1c:f1:75:2f:8d:a3:bf:3a:
64:16:2e:a9:7b:22:cc:0b:4d:0f:9a:bf:ff:99:8f:a9:0d:1d:
68:1a:7f:db:c5:67:a8:4a:d2:5c:f1:c6:23:dc:f8:c9:74:b4:
74:c8:6a:06:de:1e:fb:cd:8d:d8:4d:dd:c8:91:ac:01:b9:e6:
a5:33:12:0b:66:ac:e8:93:d0:9e:35:e0:bd:85:5e:58:e0:51:
4b:db:50:b9:98:32:e1:be:1d:89:54:5b:e8:21:7c:2e:f6:aa:
d9:fd:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:15 2025 by rpki-client