Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4995380E591C11F0979596E2DAE4EC9C.roa
File: 4995380E591C11F0979596E2DAE4EC9C.roa (raw, json)
Hash identifier: aucwMv0Exw1Q7skuppfKK947vyu8FLi80EkbMoecdoM=
Subject key identifier: 96:6A:47:F5:39:4C:79:06:F0:56:6C:7F:85:58:AD:49:72:6E:7E:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016148
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4995380E591C11F0979596E2DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 21:17:29 +0000
ROA not before: Fri 04 Jul 2025 21:17:23 +0000
ROA not after: Fri 17 Jul 2026 21:17:23 +0000
asID: 38082
IP address blocks: 156.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90440 (0x16148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 21:17:23 2025 GMT
Not After : Jul 17 21:17:23 2026 GMT
Subject: CN=686844e9-c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:ce:75:9a:19:f3:83:8a:90:e9:fe:93:20:
5e:e0:f2:0e:f7:c0:d6:2c:5f:c3:db:9b:96:36:32:
b3:43:d7:37:1a:f4:04:ca:89:d2:13:03:c5:64:a5:
85:b5:02:9a:76:d0:62:7a:44:ba:c4:2f:8f:89:b8:
4f:de:30:95:8d:f3:bd:f7:c5:e6:41:41:46:d7:8b:
f1:b5:b6:8f:24:8d:b7:ff:0c:38:66:b0:4e:31:61:
e0:92:46:10:c7:ae:7e:95:55:a8:96:91:8b:29:a8:
47:9c:52:8f:00:54:54:04:20:7d:d5:2b:ab:7e:b1:
a9:f6:73:d3:2b:27:1a:b7:14:6e:9d:ac:d5:62:d8:
89:3a:bc:8e:c4:0b:9c:28:8e:a9:44:ab:d7:17:13:
4a:a2:62:39:18:bf:c1:ec:1e:2c:b1:0c:f1:82:ff:
bb:3e:fc:d6:8e:aa:69:7f:59:0d:aa:bb:32:e8:ae:
41:c9:60:9c:b2:b7:66:30:53:e3:82:9a:f2:01:75:
c9:68:30:0b:92:e1:09:03:2e:da:16:ac:1e:01:09:
c2:9e:3f:53:4f:f3:62:59:b7:56:94:81:55:02:40:
29:d7:10:7b:99:c2:09:fd:f0:ef:af:5a:4a:3a:7a:
0d:1e:73:98:3a:35:81:c5:2c:0d:9d:44:9f:71:9a:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:47:F5:39:4C:79:06:F0:56:6C:7F:85:58:AD:49:72:6E:7E:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4995380E591C11F0979596E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ed:bf:d1:ca:18:ad:b5:3e:54:ac:4b:2b:c1:e7:cd:9a:26:
a0:be:3b:e9:8f:d1:b7:0e:87:16:f2:a2:87:1a:61:9b:98:a2:
6a:a6:c1:d8:9e:1f:81:08:77:a3:06:89:31:ef:47:42:f3:0d:
fc:de:dc:77:68:3e:81:73:42:f4:ec:5a:9e:bd:d8:29:74:d8:
e1:b3:64:c1:77:e4:81:26:f6:dd:24:46:0b:d8:64:fa:5e:d4:
d6:12:ad:49:92:7b:97:f2:63:0b:86:ad:18:f7:9f:45:5e:28:
26:3e:25:c1:ce:07:b1:26:35:ed:de:9a:20:8c:7c:d9:3b:a7:
95:bd:c1:7d:7d:ca:fc:23:ab:f3:73:1d:68:da:c4:7b:b6:9d:
41:32:17:3d:75:d1:bd:94:97:f1:04:7d:0c:e8:c0:de:ae:3b:
ed:7a:04:70:20:9f:70:d4:71:23:3b:27:7b:19:df:ea:32:28:
ee:6b:48:a1:b2:8a:7f:24:f7:45:c0:f6:7f:75:14:b0:65:01:
0f:8a:05:07:b9:fc:84:c1:ac:ff:76:94:36:4c:94:6a:fa:26:
60:b9:91:fc:be:45:65:a1:12:5c:62:82:45:3b:06:b4:88:c9:
d2:f0:f7:65:95:1c:48:9f:46:0b:c4:1a:62:93:93:26:27:2c:
49:15:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:33:41 2025 by rpki-client