Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7749E056736111F0B98A35E8DAE4EC9C.roa
File: 7749E056736111F0B98A35E8DAE4EC9C.roa (raw, json)
Hash identifier: Ze4Rch6gVYmch6EjvhvPQesO6lldfXK6zi3fP5muUhA=
Subject key identifier: A1:B3:82:CC:33:2E:CA:52:A2:A3:03:B2:C8:7D:15:47:D3:FF:5B:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016987
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7749E056736111F0B98A35E8DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 07:38:10 +0000
ROA not before: Thu 07 Aug 2025 07:38:05 +0000
ROA not after: Mon 18 Aug 2025 07:38:05 +0000
asID: 63787
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/24 maxlen: 24
45.192.179.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92551 (0x16987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 7 07:38:05 2025 GMT
Not After : Aug 18 07:38:05 2025 GMT
Subject: CN=689457e2-78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:7f:7d:b2:e8:3b:30:23:4c:a8:9e:84:0b:
1a:ca:72:c1:5d:67:2c:e9:31:54:9d:f8:d1:0d:24:
5a:49:d5:08:94:4b:58:1c:28:83:bc:a7:36:a7:8b:
43:76:4f:c7:94:ba:13:9f:25:64:c1:84:7a:7c:b0:
8b:08:c5:76:a2:68:1a:c5:4e:24:83:e3:b1:c4:c7:
0d:36:b5:08:66:fe:ce:38:32:c6:56:7d:74:30:a3:
a5:0b:83:66:62:66:83:95:6e:d5:cb:8e:d6:bc:33:
8a:b4:c1:21:fe:7d:14:52:b7:34:58:0a:db:f2:d8:
f6:bb:c2:b1:b1:fb:e2:a2:e0:08:e8:ef:f8:c6:bc:
c6:cc:df:76:9b:c9:91:f7:ac:5a:ad:1d:05:ea:34:
d3:60:60:48:23:31:44:33:f1:cc:f7:b8:f5:1f:60:
ae:bd:12:69:92:42:30:88:67:84:50:d1:cf:05:47:
b4:97:0e:62:21:9d:5c:67:fd:0a:da:94:48:21:5f:
8d:40:19:fa:f3:91:30:85:a7:de:b1:dd:87:90:a5:
03:91:61:14:a3:bf:0f:1c:f1:b2:83:c8:25:c5:78:
c5:2e:c2:75:c8:7e:73:84:fa:b5:b6:0c:00:14:3e:
14:00:be:4e:7b:a4:01:3d:7c:ea:58:a7:49:87:31:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:82:CC:33:2E:CA:52:A2:A3:03:B2:C8:7D:15:47:D3:FF:5B:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7749E056736111F0B98A35E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0-45.192.180.255
Signature Algorithm: sha256WithRSAEncryption
98:cc:da:b8:bf:5d:29:3d:65:4e:94:20:13:47:ee:d6:95:1c:
d0:06:3a:52:a5:6b:60:e5:64:3e:1e:a0:17:72:e9:e1:8b:73:
84:82:b0:67:20:8d:75:0e:ec:2f:15:dc:bd:34:2d:86:b3:e8:
71:25:02:14:6d:1f:d7:89:78:6f:ec:fd:72:23:50:96:f5:6a:
39:d6:ba:5d:e6:8c:c3:bd:61:01:df:4a:a1:68:23:0a:6f:30:
97:c2:97:4f:a9:ff:37:13:03:9a:01:26:06:d5:7b:d3:a9:4c:
14:7b:d5:11:c9:c2:59:de:7f:11:4b:a2:44:9a:36:dc:3a:94:
e1:98:d7:23:5f:b6:02:76:24:d3:d8:bd:99:14:96:24:12:c0:
3b:f7:ec:13:fd:65:17:8a:5d:f5:e7:6c:2a:0b:a7:7c:a8:76:
74:cf:d6:96:7e:54:71:fa:7a:37:55:6a:a1:6a:b2:26:41:a1:
1f:5f:a7:9f:9c:46:de:bf:12:a9:89:23:29:03:ac:ed:f3:47:
19:e5:59:c4:33:4e:d5:8b:cc:e3:4e:d1:b9:d3:4f:64:75:07:
3f:c4:96:38:77:6b:d9:f8:5e:d6:bf:b3:b4:ba:c5:14:a2:23:
43:69:d7:34:ca:2d:aa:65:1f:74:4e:2b:12:28:e3:de:86:0b:
bd:cd:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:31 2025 by rpki-client