Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/000963925D0C11F0B1D87789DAE4EC9C.roa
File: 000963925D0C11F0B1D87789DAE4EC9C.roa (raw, json)
Hash identifier: WLuc5mdX456/MmLVd82rQ1j2cOIjouGUKR4YehTKwZM=
Subject key identifier: CE:15:BB:80:84:47:4B:3C:07:4D:3E:DC:4B:0E:6E:CF:95:79:85:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01644C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/000963925D0C11F0B1D87789DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 21:30:58 +0000
ROA not before: Wed 09 Jul 2025 21:30:53 +0000
ROA not after: Sun 24 Aug 2025 21:30:53 +0000
asID: 137899
IP address blocks: 156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91212 (0x1644c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 21:30:53 2025 GMT
Not After : Aug 24 21:30:53 2025 GMT
Subject: CN=686edf91-7fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:76:2f:52:c9:44:cf:e3:a6:b7:7c:1a:32:
c5:d2:bf:a2:4f:65:75:3f:34:f8:eb:db:b0:a4:66:
51:1f:53:3b:87:87:9e:7a:b0:29:f2:d2:d6:67:67:
0d:a5:1f:91:47:5e:67:3c:01:f6:f7:02:84:74:d9:
58:84:2f:0b:c8:6d:f3:08:b5:36:5c:67:83:f3:03:
25:c3:08:3c:31:00:22:6f:ab:47:a8:35:7f:91:cb:
27:f0:95:88:13:f4:d6:5a:f2:b9:5b:e5:d1:10:36:
b3:d6:b3:db:6d:b3:c9:1b:e5:64:e6:db:13:9d:fe:
4c:90:39:e8:8f:7d:50:4e:88:74:80:fa:c9:7b:57:
5f:b4:b9:4e:9f:64:75:e6:b5:ff:08:5a:cf:bd:f1:
0c:cc:27:be:44:df:7a:68:2b:a3:82:65:f7:98:92:
5e:a8:85:31:a8:d0:ff:53:2f:63:3a:dd:f1:53:4f:
41:00:93:99:7e:ec:a3:db:14:e2:19:ab:75:f4:b4:
cf:63:91:d3:08:c6:c6:7c:de:d8:ea:c5:56:d5:71:
f6:90:32:59:aa:05:c0:e4:20:d0:9f:66:5c:72:a5:
46:00:3f:3d:a1:34:9b:cc:f5:e0:f0:40:56:20:9b:
8a:a0:7f:a4:43:72:50:77:36:0f:8c:e8:74:8b:24:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:BB:80:84:47:4B:3C:07:4D:3E:DC:4B:0E:6E:CF:95:79:85:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/000963925D0C11F0B1D87789DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:12:b5:c0:ac:77:1f:46:5f:61:13:67:5a:a7:3c:e4:08:48:
df:3f:a9:da:86:51:f8:de:c3:59:d3:d8:58:69:80:f3:54:bf:
ea:54:b5:8b:db:f2:7e:0e:25:7c:5b:b9:23:c1:2c:17:3e:95:
98:08:45:3c:8e:5f:64:f7:aa:2e:67:76:7f:72:69:03:db:b4:
a5:69:bc:24:13:41:71:fc:49:e3:8d:2e:ef:b8:7c:ef:cf:fb:
e2:36:ad:06:59:3d:09:c9:f7:c0:5c:35:c6:fd:83:ce:9b:2d:
eb:36:4e:0b:ce:3a:56:ed:70:99:fc:ef:73:ff:55:4e:53:0a:
e3:32:9a:68:2c:1d:54:ea:ee:34:ae:c5:87:ed:2f:38:f9:4f:
8a:ae:e4:5f:9c:49:19:cf:24:26:34:f9:b9:b8:0e:36:9e:21:
ce:2b:87:70:9b:91:ab:5b:09:b2:23:02:e4:95:55:d8:4d:dc:
14:c0:ad:62:fb:0e:19:2b:65:f6:69:6f:8b:e5:dd:3f:7a:0a:
46:32:4d:71:31:39:80:a9:36:a2:75:62:09:49:6a:af:44:11:
d1:48:92:59:8b:4a:0d:26:d5:90:71:ae:f3:0e:e4:f2:30:a7:
3d:7a:c3:2c:73:c0:a5:98:e6:a2:12:22:f9:60:3b:ef:8b:91:
2b:26:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:31 2025 by rpki-client