Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D21494C4CFC11F0934BC190DAE4EC9C.roa
File: 6D21494C4CFC11F0934BC190DAE4EC9C.roa (raw, json)
Hash identifier: +8DSm5dU67SLIdn4UMAMFrDBhgCL0EAJ8S6QDhb8YYQ=
Subject key identifier: 9C:2E:1D:72:36:81:AB:65:E0:17:FA:69:65:5F:2B:50:60:93:13:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015D34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D21494C4CFC11F0934BC190DAE4EC9C.roa
Signing time: Thu 19 Jun 2025 10:59:10 +0000
ROA not before: Thu 19 Jun 2025 10:59:05 +0000
ROA not after: Wed 24 Jun 2026 10:59:05 +0000
asID: 142132
IP address blocks: 156.231.136.0/24 maxlen: 24
156.231.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89396 (0x15d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 19 10:59:05 2025 GMT
Not After : Jun 24 10:59:05 2026 GMT
Subject: CN=6853ed7e-3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:fa:1f:89:3b:15:8f:06:64:78:46:7e:51:
25:00:e4:36:21:12:03:fd:5f:0d:b4:77:83:a0:e6:
a8:88:ed:58:d7:5e:26:f7:9d:bb:46:8f:41:fd:e6:
4f:8e:e7:da:4d:1b:5f:dc:0c:94:3e:18:0c:b2:a5:
fd:2a:bd:fc:0c:92:ca:14:dd:e7:fe:5f:5f:04:82:
86:61:ab:0c:64:61:68:d3:5d:d4:21:c6:76:e7:b6:
87:94:8b:db:28:fa:cb:df:87:97:b0:78:db:92:82:
a6:cc:92:72:63:f3:95:05:91:76:00:f1:4b:b4:e0:
13:02:7e:f0:6e:1f:78:b0:63:e9:b5:45:22:32:75:
89:62:ab:f8:79:06:ac:4a:fd:e4:fa:0d:43:ce:11:
c4:0c:4a:2d:3b:cd:24:55:b1:2a:d0:37:a7:c5:63:
fd:47:f7:5a:a6:48:34:2f:8d:f9:12:ef:4b:94:96:
7b:ee:71:3e:93:1d:2f:2c:8a:2c:b3:c1:ff:95:db:
07:50:d3:7b:42:ec:ab:b8:94:75:96:23:87:a9:e9:
c8:d9:83:a2:0e:5b:41:92:c8:90:cc:98:a6:b6:c6:
d1:77:8c:b2:2b:82:66:4a:46:0e:bb:85:2e:65:35:
c8:26:31:7a:88:98:91:45:9a:28:68:8a:16:45:8c:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:1D:72:36:81:AB:65:E0:17:FA:69:65:5F:2B:50:60:93:13:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D21494C4CFC11F0934BC190DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.136.0/23
Signature Algorithm: sha256WithRSAEncryption
69:bc:5b:07:b7:ee:33:09:6d:f2:68:5e:11:00:08:66:0e:b4:
50:d8:1e:5c:4f:7c:15:06:40:87:55:0e:ce:1e:58:de:a0:0b:
60:3a:d0:7a:16:be:27:5d:86:cd:09:9d:6d:82:b2:ca:38:43:
6e:cc:15:3b:fb:bb:40:f8:f7:46:56:ec:ce:45:21:15:90:55:
ec:a7:d5:df:37:0d:53:74:a6:f5:c7:8a:d2:88:74:b5:ea:d1:
c1:eb:d7:05:63:fe:43:7b:30:3c:5c:d8:23:14:31:20:55:e8:
f2:7d:7b:69:07:d0:87:9d:f6:f3:79:66:69:7e:25:9b:7e:0e:
e3:ef:77:ac:fd:ab:f0:66:75:7a:aa:59:cd:a4:d5:52:b9:77:
fc:37:00:8b:80:01:a7:d9:17:b7:6c:f0:ea:c8:5b:43:11:6d:
f0:53:31:a3:05:46:12:52:51:af:da:1d:4e:96:fc:be:d5:ce:
96:64:dc:6b:7f:33:f5:27:e9:15:ad:c9:11:31:fb:0f:94:d3:
d0:03:f4:85:57:9a:52:1c:07:f4:42:f1:31:33:ed:4d:b4:3c:
2b:da:9f:64:20:3e:98:91:c7:bc:6b:3c:0a:e2:51:15:48:7f:
90:73:f7:bc:7c:ad:c9:10:ab:5a:a7:44:c6:4b:b6:cb:1a:fb:
a3:48:1f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:41:54 2025 by rpki-client