Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B90E46E5B4011F08318D9DBDAE4EC9C.roa
File: 6B90E46E5B4011F08318D9DBDAE4EC9C.roa (raw, json)
Hash identifier: 7LkEwnm66Qz9RSBRtMMVOL+BUxgdrHGw5LoA/v3D62Y=
Subject key identifier: 1A:CF:5B:89:97:37:D7:1C:FD:EC:2D:FE:0F:C6:FE:4A:69:5F:42:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01631A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B90E46E5B4011F08318D9DBDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 14:41:09 +0000
ROA not before: Mon 07 Jul 2025 14:41:04 +0000
ROA not after: Wed 13 Aug 2025 14:41:04 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90906 (0x1631a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 14:41:04 2025 GMT
Not After : Aug 13 14:41:04 2025 GMT
Subject: CN=686bdc85-a0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:a6:38:7b:fe:76:36:12:8c:62:fb:7f:ec:
7e:07:0b:f7:3d:1f:f7:a2:a7:c3:02:85:75:86:89:
b5:c1:bc:2d:ec:3b:fa:c3:47:83:a0:92:ae:48:6d:
aa:8a:ee:39:b5:c8:8f:2a:f7:65:7e:35:cf:d9:b0:
41:04:45:bf:b2:bf:27:77:05:39:c2:d7:0f:e4:a8:
87:00:3f:39:34:5c:6d:93:64:86:0f:8e:68:10:47:
37:40:e4:b1:21:14:2d:ee:91:95:b3:27:08:b6:58:
00:01:ac:02:8c:07:44:41:97:9e:1e:7a:77:ba:a1:
ae:bc:58:98:58:52:50:fe:d6:0b:47:97:60:25:53:
38:30:88:04:66:12:b4:25:55:6c:38:11:63:7e:99:
3f:a9:14:21:55:42:30:82:b6:9d:ab:6f:71:67:14:
ca:29:1d:89:de:d2:71:67:fd:bc:f9:81:c6:d5:71:
a0:27:30:1f:f0:46:e7:ed:a6:58:89:0b:77:49:53:
e0:ef:22:7a:49:eb:03:97:40:19:60:b5:76:96:4a:
3b:ba:7c:b4:0d:ef:2f:5d:2d:4d:36:25:da:72:97:
49:1c:05:b9:0e:60:d8:f9:db:bb:da:52:e5:45:aa:
df:93:34:dd:63:6a:1c:8c:6f:48:6d:82:20:c5:b9:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:5B:89:97:37:D7:1C:FD:EC:2D:FE:0F:C6:FE:4A:69:5F:42:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B90E46E5B4011F08318D9DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:40:3d:71:6f:c1:3e:31:ed:36:f5:65:b5:54:2e:43:d5:68:
21:1a:21:37:9b:06:76:73:88:75:73:8e:bc:4e:fa:7a:50:0b:
07:90:65:08:27:6e:26:35:31:70:8d:68:a5:23:e6:52:93:e6:
61:92:ef:b4:dd:3a:63:82:48:3c:7f:20:7f:c3:bd:10:e4:e3:
42:09:a1:dc:74:95:4a:2d:44:06:bc:fd:d1:c3:60:c9:14:de:
0e:98:c4:d5:e0:bf:6c:e8:f7:ef:79:3a:a1:e7:f0:a1:26:42:
12:4c:3e:13:34:29:98:c3:52:d3:7c:3c:99:20:14:f0:44:6c:
45:bd:38:4c:da:d1:0f:6b:57:14:fd:17:68:45:c9:45:f1:ec:
b2:be:4f:a7:12:d8:5e:08:40:07:37:f6:79:bf:ed:33:8a:40:
1c:37:6c:c9:96:ce:08:02:be:e5:16:c6:32:7a:d2:bf:99:2d:
f8:a9:ec:c1:7a:cf:eb:a0:67:f9:2e:55:21:c1:8a:f8:68:9c:
bf:c0:e9:bf:6a:0b:54:4b:2f:71:c9:d6:5d:13:eb:db:5f:b8:
36:50:39:8d:b0:d6:7b:26:24:74:78:2e:c1:63:60:41:82:dd:
f3:a9:4d:61:df:22:e8:71:80:64:9a:58:0a:0d:8e:d0:f4:0c:
b3:4a:5b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:25:34 2025 by rpki-client