Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/576F462E664411F0A8856BF4DAE4EC9C.roa
File: 576F462E664411F0A8856BF4DAE4EC9C.roa (raw, json)
Hash identifier: spi5j7guAjUA+U1BCM+6qEq3l5KsmFzSo+WgvDjr95w=
Subject key identifier: 39:A0:33:C4:4A:8A:BA:85:11:82:78:1E:88:E9:3A:D2:68:C2:9C:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016628
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/576F462E664411F0A8856BF4DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 15:06:56 +0000
ROA not before: Mon 21 Jul 2025 15:06:52 +0000
ROA not after: Wed 27 Aug 2025 15:06:52 +0000
asID: 9304
IP address blocks: 45.196.250.0/23 maxlen: 24
45.196.252.0/23 maxlen: 24
45.196.254.0/23 maxlen: 24
45.198.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91688 (0x16628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 15:06:52 2025 GMT
Not After : Aug 27 15:06:52 2025 GMT
Subject: CN=687e5790-d2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:1a:c3:bd:06:5d:7c:aa:03:4e:2d:12:13:
e1:3e:3f:e6:68:70:22:17:91:06:f9:08:00:b9:d9:
bb:a6:c3:71:81:d2:68:cd:81:1d:ce:e1:35:3c:60:
be:f6:f2:00:1d:8f:df:cb:75:bb:a6:e1:07:78:58:
10:5e:b5:4b:64:5d:42:b1:ba:f7:07:dc:69:17:a5:
e2:47:a2:e0:c4:6a:0f:33:dc:5c:4d:fd:de:c6:e7:
b4:07:77:77:5b:17:b9:29:69:fd:64:14:5d:f1:8b:
09:f9:6d:9f:cb:36:95:97:24:8d:50:8a:c3:af:f1:
93:51:a2:f1:b5:28:92:50:9b:29:0a:14:6b:db:51:
fc:0b:ff:75:33:6f:fa:95:91:8a:06:47:ca:9d:8e:
94:f1:71:78:8f:e5:5d:aa:55:d3:5f:72:83:61:68:
9e:a3:12:6a:3b:61:bb:1c:a8:5a:b4:b1:e6:d8:57:
db:8a:7e:ab:05:e5:4e:be:0a:23:d3:5f:de:b8:85:
2d:05:8d:29:f3:32:46:c9:33:f5:7b:d9:82:be:9a:
66:61:a0:a3:08:a8:ce:46:4d:46:17:b5:c0:2f:ce:
b3:bc:c1:e7:12:e9:f4:5b:ad:3d:7e:ce:91:cb:cd:
14:57:bd:59:a0:88:0d:33:ef:c2:6a:47:fb:f1:9e:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:33:C4:4A:8A:BA:85:11:82:78:1E:88:E9:3A:D2:68:C2:9C:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/576F462E664411F0A8856BF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.250.0-45.196.255.255
45.198.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:12:7f:45:97:08:07:45:44:f0:3e:66:0e:3d:06:8d:0e:d7:
81:27:30:87:e8:e5:06:99:00:17:aa:65:2f:5c:97:c3:8d:25:
48:6c:fa:e6:8b:2f:a9:bc:aa:c8:35:42:46:92:cf:51:4e:24:
60:2e:50:f2:b7:8f:d4:4d:84:9f:72:f7:fc:57:a5:77:97:7e:
56:a9:8e:c1:24:61:f6:ea:6e:c8:8b:1d:5f:33:c7:d7:10:08:
0c:f7:87:15:ff:89:db:37:8a:89:43:f7:7b:16:89:76:5f:63:
71:7f:e0:7d:db:4b:75:f5:f4:77:ff:93:19:a8:a4:fd:59:ce:
85:31:45:28:03:57:91:16:e9:2d:e7:7f:bb:2d:ed:46:3e:a1:
b1:8a:f8:46:3b:21:a7:00:e7:db:12:a9:d4:e1:9c:67:da:87:
74:28:bb:d3:e2:16:56:bf:77:3c:78:7c:bc:a5:64:a5:19:eb:
76:09:42:63:59:20:e7:58:03:0e:c1:45:7c:79:c0:e5:e8:ce:
d4:27:92:98:e2:12:04:ce:21:73:72:7e:f3:04:9f:ed:d9:b3:
16:2a:0f:e5:96:4d:f4:ed:1f:c5:8d:6e:35:3c:a9:31:0b:d5:
0d:f3:ac:54:7c:f9:97:bd:ba:17:a5:bb:66:e9:b2:1b:19:c0:
5f:eb:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:16 2025 by rpki-client