Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73DC5364768F11F0A3DBE1A0DAE4EC9C.roa
File: 73DC5364768F11F0A3DBE1A0DAE4EC9C.roa (raw, json)
Hash identifier: N1MFNhBXihGfZZli6FXF171BFEn1rEPrj0JBU0Pw+7k=
Subject key identifier: 9A:2F:37:E2:40:63:BA:70:3B:06:ED:DE:B6:A2:94:36:C5:5C:7E:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73DC5364768F11F0A3DBE1A0DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 08:44:55 +0000
ROA not before: Mon 11 Aug 2025 08:44:50 +0000
ROA not after: Tue 09 Sep 2025 08:44:50 +0000
asID: 401783
IP address blocks: 45.192.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92692 (0x16a14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 08:44:50 2025 GMT
Not After : Sep 9 08:44:50 2025 GMT
Subject: CN=6899ad87-c71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:71:ba:5b:7f:9d:6d:1e:16:95:0a:02:de:ce:
b9:ab:1b:3e:8e:fe:8f:2e:3f:bc:cf:ab:64:fb:c4:
79:30:c4:63:b7:0f:0a:28:33:a0:12:39:a0:ec:bd:
ef:42:4c:52:56:77:66:26:5a:02:55:b6:b3:5c:f0:
59:c2:6e:e9:9f:2b:d0:e0:97:ca:80:36:c7:07:ac:
c6:ed:22:a5:0f:dd:78:e7:58:dc:26:c9:5f:ff:7c:
79:3f:b4:ed:86:af:e0:3b:19:33:5d:d1:07:0f:51:
ed:36:1c:b9:0a:6c:4d:fa:0b:17:61:42:05:62:56:
6c:df:cf:df:90:53:ab:74:3b:7e:1f:76:a1:b2:e0:
f1:c0:72:62:8b:b4:aa:4e:ca:cc:bb:b4:fa:35:24:
72:8f:2c:8b:79:46:5a:d6:e2:92:ee:a3:03:e0:47:
bb:66:05:15:9f:12:fd:fc:56:ed:08:a2:f7:b2:ee:
0a:30:24:3e:f9:e4:21:7a:27:9d:4a:6c:db:e0:3f:
2f:26:dc:bc:47:d6:3a:99:d5:07:1b:06:10:92:85:
e6:1d:fd:c6:63:8b:fe:e0:7e:1d:b4:96:4d:94:b8:
ec:94:14:4c:b2:f1:da:da:75:52:34:da:cb:5e:ef:
0b:5e:55:97:cc:19:0c:04:81:e0:23:62:35:d7:f4:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2F:37:E2:40:63:BA:70:3B:06:ED:DE:B6:A2:94:36:C5:5C:7E:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73DC5364768F11F0A3DBE1A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.113.0/24
Signature Algorithm: sha256WithRSAEncryption
13:06:97:5b:9b:57:ba:cd:32:ec:dc:3b:32:d7:01:a6:fb:37:
13:3e:ca:85:9e:c8:67:fb:b4:2f:d2:33:d4:5e:cd:14:6e:e9:
7d:aa:0a:3a:db:d6:03:c7:7c:89:c8:7c:19:0d:7d:c2:34:63:
ec:20:38:ab:75:b6:83:58:1d:13:7e:d9:f6:4e:7a:33:27:6f:
17:86:14:b1:fd:b6:6e:8d:11:d8:bd:a5:c6:a3:b1:b2:d1:be:
cd:99:39:42:ef:80:35:5e:84:28:d4:5a:cb:cd:b2:fc:0d:51:
75:64:14:b7:2c:91:d3:25:31:82:d4:29:26:a4:c4:75:97:4b:
d3:13:5d:79:cd:dc:60:60:84:89:ca:c8:83:27:ea:b8:fd:c6:
98:bc:35:45:1c:a1:d6:f4:43:f0:9d:00:97:e6:97:5c:f2:60:
af:64:fe:10:6d:63:e6:9a:bf:9f:3c:a2:72:de:51:dd:5c:d3:
52:eb:62:57:7b:14:3f:3f:03:e9:60:46:0d:6c:2d:02:6d:fa:
02:6d:33:17:9b:e1:84:8c:2b:39:c2:64:be:48:fd:16:3d:68:
ab:a6:17:19:20:f4:29:c0:fd:83:66:4e:d2:2c:f3:91:8c:cc:
11:71:ba:4e:bd:4f:94:1c:ce:f6:e1:53:a8:cf:0a:18:97:f9:
e8:df:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:06:21 2025 by rpki-client