Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C13F3525E5D11F0A371ABF0DAE4EC9C.roa
File: 6C13F3525E5D11F0A371ABF0DAE4EC9C.roa (raw, json)
Hash identifier: cdmRx7BfkRwq8WqJxp+Q8kuoYPKo0IstjxFAQnwkoyk=
Subject key identifier: 57:13:22:A3:ED:CB:28:9E:4C:BC:C4:95:0A:F7:41:92:53:B5:A1:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C13F3525E5D11F0A371ABF0DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 13:46:19 +0000
ROA not before: Fri 11 Jul 2025 13:46:15 +0000
ROA not after: Mon 04 May 2026 13:46:15 +0000
asID: 23764
IP address blocks: 156.238.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91317 (0x164b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 13:46:15 2025 GMT
Not After : May 4 13:46:15 2026 GMT
Subject: CN=687115ab-ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:7d:d0:9d:3b:45:3e:2c:25:c3:58:89:8c:
34:75:5e:66:76:cd:6a:d2:3e:7b:81:9d:a3:d0:fa:
87:ae:7e:37:92:88:7e:6a:cb:ea:8c:4d:02:86:9e:
ae:c7:99:2e:2c:14:94:04:fb:dd:35:c6:60:d5:e2:
d5:90:3d:3c:a8:78:e6:1e:ef:69:6c:11:25:0b:a1:
7c:00:09:fc:11:17:17:c3:a8:b2:91:91:09:f3:44:
ba:fa:35:f5:d9:0c:22:56:8f:d3:32:a6:44:eb:82:
fd:8e:b2:ad:b3:cd:3b:6f:5a:6d:df:a2:0c:30:80:
a7:41:09:33:ba:a4:93:78:fd:8d:31:67:58:ba:2d:
60:36:b1:f3:72:2f:c4:ee:22:b3:8f:e9:d3:7a:a7:
dd:8f:c7:30:5e:63:24:b7:bd:60:28:2f:62:b2:d3:
53:78:c3:fd:85:90:ce:fd:90:e6:ff:8e:20:7d:52:
21:f2:d6:ac:95:93:ac:fb:24:72:35:18:8f:86:78:
a6:6a:c1:52:f7:0b:da:95:c5:2d:27:7e:09:6f:68:
79:45:80:84:e6:ab:99:44:2f:61:29:d1:3d:f9:33:
83:62:99:06:49:0d:08:a4:b2:23:6e:f8:69:6b:f1:
f3:69:54:de:ae:e3:de:ba:42:7b:e9:6e:cc:bb:07:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:22:A3:ED:CB:28:9E:4C:BC:C4:95:0A:F7:41:92:53:B5:A1:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C13F3525E5D11F0A371ABF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.20.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0d:51:02:82:95:36:39:28:cb:c5:d3:c0:b0:a7:97:d3:88:
76:47:fa:e7:9d:17:29:3a:98:13:49:26:89:6f:8e:22:1d:d3:
ca:54:2d:56:01:fb:b4:48:c2:a3:41:b3:2e:04:13:4b:35:65:
e7:3b:2e:3d:b0:e4:e3:76:ec:31:89:de:9d:d7:90:89:1b:74:
22:fd:f9:78:10:c1:06:94:e1:00:cf:96:c8:23:d9:e1:e4:ae:
be:e2:62:f3:ef:94:a7:e1:c3:c0:54:13:44:f5:29:dc:41:98:
3e:f3:31:7b:83:b5:58:8e:cb:de:cd:67:1d:64:23:82:14:a7:
02:ce:11:c5:f7:f9:d3:a2:3a:f1:1d:b2:5f:32:d3:54:49:2d:
90:3c:9a:32:d2:1c:43:9c:3f:b2:c7:bd:03:ac:0f:29:b5:e9:
45:be:64:de:68:f4:64:5b:1a:c3:5c:60:a1:81:6b:ff:e4:70:
3a:be:7d:ba:16:ab:7e:80:f7:36:12:cb:d3:98:30:93:0e:9a:
aa:e8:2d:ab:16:7b:29:72:2c:1e:32:8e:b8:cc:c1:47:55:eb:
2a:93:be:17:02:34:1d:c1:ac:9d:2c:7c:4a:2f:b0:1f:d5:e2:
41:46:b4:6e:de:47:38:ae:11:b1:1a:02:28:41:c9:40:60:b5:
50:90:0c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:59 2025 by rpki-client