Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002F137C5CF211F088A8C9E2DAE4EC9C.roa
File: 002F137C5CF211F088A8C9E2DAE4EC9C.roa (raw, json)
Hash identifier: lLmPKpiQMqFfDDPpy94QDTNDLF2ZeSMthud/zK4slbI=
Subject key identifier: E0:A4:C1:48:A3:4F:72:29:D5:54:81:01:96:20:45:C3:8A:EB:D8:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016432
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002F137C5CF211F088A8C9E2DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 18:24:51 +0000
ROA not before: Wed 09 Jul 2025 18:24:45 +0000
ROA not after: Sat 16 Aug 2025 18:24:45 +0000
asID: 61112
IP address blocks: 156.224.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91186 (0x16432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 18:24:45 2025 GMT
Not After : Aug 16 18:24:45 2025 GMT
Subject: CN=686eb3f3-2c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:1f:d4:e9:7a:a1:c1:0a:f5:e7:26:b2:08:
99:7c:85:da:5f:76:da:b1:3a:93:d6:62:55:a8:03:
52:f8:54:63:08:82:54:55:c9:31:7f:5d:38:c9:f2:
a4:5c:ea:53:40:60:59:10:4c:01:b4:ee:56:bb:39:
6d:2b:23:d4:da:71:9c:ae:01:f5:e9:6a:e9:9f:20:
15:a3:44:a6:70:12:27:e3:4a:3c:8a:e5:80:43:73:
69:75:12:f3:01:07:f3:27:6a:da:ab:9b:05:8d:db:
4c:4d:cc:bf:08:62:1b:e4:4d:b9:d6:07:2a:d9:55:
87:14:67:37:4a:8f:f9:37:f8:fc:f6:9a:7e:b9:59:
e0:2b:2f:03:24:2b:88:6a:db:1d:ff:4b:cd:6a:7a:
de:80:d4:fa:30:a5:56:11:29:8f:49:9a:5d:63:d2:
8b:1b:d5:09:ab:87:4e:e5:e5:30:b2:a0:a2:d6:34:
e5:96:ec:ac:fb:7d:c0:af:26:3c:75:9c:56:51:54:
eb:f0:99:87:61:41:1c:ff:31:7a:cb:e0:e8:19:a6:
89:28:1f:51:b1:33:b3:39:98:5f:aa:35:ff:d3:c4:
e1:e3:4f:dd:fb:da:c5:cf:f5:ff:c2:1b:01:0f:04:
30:e3:e3:bc:17:41:c5:ec:a9:b8:d6:5f:b6:6f:78:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A4:C1:48:A3:4F:72:29:D5:54:81:01:96:20:45:C3:8A:EB:D8:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002F137C5CF211F088A8C9E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
31:3d:fa:6a:2f:dc:a3:e2:bb:03:34:c8:d1:da:94:7d:94:90:
20:6c:1e:da:ff:39:a0:2e:08:de:e2:e5:fd:09:20:9d:d5:01:
9b:82:bd:5a:2e:77:a5:99:6e:68:09:15:6e:fd:03:3f:9f:6e:
31:7a:86:de:b6:af:95:f4:36:2c:d6:81:bf:f2:58:28:a2:5d:
30:3b:58:ef:a7:f2:b1:20:a0:ea:f4:05:5b:bc:51:ed:1f:ef:
0b:f7:62:2f:69:26:b5:09:b0:56:f7:1f:78:e0:f4:23:fb:11:
c2:9f:4f:cc:af:2a:24:6e:8b:41:7b:42:24:e2:15:f5:98:80:
57:48:a9:e2:d6:e9:0d:fe:72:1d:98:e5:b0:fa:47:57:18:0e:
e8:d0:51:64:f4:84:cf:fc:2c:c4:6f:ff:e7:7b:bf:01:26:bb:
08:3c:0f:9b:9e:08:b1:54:c5:92:8b:b9:37:21:29:b5:53:0a:
07:9e:77:3d:31:fd:0a:d7:55:98:27:e0:eb:98:10:ea:5d:78:
b2:c1:eb:f2:3c:b6:5d:43:d6:51:75:dc:8e:4c:ed:db:bd:f2:
ff:6b:2b:a2:9e:25:4e:1f:32:cb:f9:9c:d0:67:84:d3:93:e3:
c9:61:2a:9e:41:6e:35:d6:17:6d:f2:a0:d5:32:fc:88:db:ab:
3c:6a:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:39 2025 by rpki-client