Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E72B38A609C11F094F02197DAE4EC9C.roa
File: 7E72B38A609C11F094F02197DAE4EC9C.roa (raw, json)
Hash identifier: S7kax+gwjbfZC7lW6LiALDYpUHEr2ygvGEe1tSe2r70=
Subject key identifier: 7D:44:3C:9E:F5:B6:0E:15:D4:F6:57:F5:A0:0F:8D:B4:24:24:70:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01650A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E72B38A609C11F094F02197DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:22:50 +0000
ROA not before: Mon 14 Jul 2025 10:22:46 +0000
ROA not after: Wed 20 Aug 2025 10:22:46 +0000
asID: 20326
IP address blocks: 156.233.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91402 (0x1650a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:22:46 2025 GMT
Not After : Aug 20 10:22:46 2025 GMT
Subject: CN=6874da7a-f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:d4:dc:8a:bb:f4:9a:e3:46:e1:29:a5:a4:
87:91:b0:38:4d:7f:02:d9:9c:f3:f8:1d:b3:35:54:
da:03:ea:97:2d:c0:dd:24:69:a6:87:24:de:fe:5d:
6e:de:cd:5b:f9:6b:0b:9d:a0:53:87:d1:88:3a:00:
eb:c1:db:d9:bf:11:6e:09:ea:74:ae:42:26:9e:44:
de:93:b1:47:15:ff:0e:b6:ff:10:a6:a0:94:f8:7e:
57:a2:69:20:66:40:be:3c:7f:20:b6:48:9f:2d:1f:
89:35:77:19:c5:c6:f9:e3:17:27:91:c7:1e:94:7e:
0a:e8:65:35:22:41:e0:8e:91:8d:eb:fb:a4:1e:65:
82:9e:fb:71:60:3d:cc:c5:8f:c2:57:2f:1c:e0:77:
2a:3d:59:3c:1c:9d:45:f2:c6:2b:8c:f4:60:8f:e1:
b3:98:c1:0d:fc:40:e2:69:40:4d:c1:e5:8d:1e:7e:
3b:15:47:c7:ca:20:2e:00:25:6f:fd:8f:0d:0c:fd:
87:52:e7:1d:84:e4:b2:83:4c:4d:f5:db:f6:90:28:
2c:41:d4:79:b8:75:ea:77:7a:9a:e8:fc:2d:07:49:
47:a2:3a:9a:7f:bd:da:79:93:2d:26:8a:a4:80:e5:
17:ec:f6:50:96:2f:2c:87:78:e9:20:b7:43:41:f0:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:3C:9E:F5:B6:0E:15:D4:F6:57:F5:A0:0F:8D:B4:24:24:70:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E72B38A609C11F094F02197DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.10.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:11:85:26:fa:ea:51:32:af:12:f0:1d:7f:e7:dc:43:9c:2a:
44:c1:e6:de:31:ef:1f:73:a0:f6:af:7a:64:42:75:33:29:27:
9f:30:61:b1:7f:c7:c4:29:0a:5c:65:65:e1:fe:96:b9:fb:ee:
d8:2b:7b:d7:77:4f:5d:84:25:9d:11:dd:4d:69:49:d8:8b:54:
ea:d9:b6:1b:67:4d:ab:d2:90:d6:ea:4a:d0:67:93:50:7d:c2:
a4:af:b4:72:94:dd:1d:df:58:e7:84:c7:e6:9f:c9:67:5c:55:
2f:d6:73:be:ce:33:3f:89:5e:8f:4e:8d:ba:71:ef:68:2e:a8:
9c:f4:33:8f:87:a6:63:15:96:26:b5:b6:ad:45:4a:19:29:a2:
0b:d1:14:fe:ed:51:c2:8e:13:fa:b2:52:f5:a7:33:d3:47:32:
75:36:8b:5a:e3:4f:fb:6a:67:a4:26:f1:66:d7:1c:92:6f:0c:
31:b4:ed:cc:c1:c8:cd:82:d7:92:de:44:c3:08:78:f3:4f:2b:
89:c8:ee:33:e9:a3:5b:c4:b1:07:96:8b:40:c0:e0:fe:35:05:
ce:e0:8b:2e:0e:ca:92:4e:b8:e7:6c:3d:15:a2:6b:2b:8d:c2:
02:d7:9e:fc:34:25:62:ad:16:5e:02:15:2b:ef:d9:41:88:85:
cc:16:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:33:02 2025 by rpki-client