Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3C63758566811F0A38BEDD5DAE4EC9C.roa
File: A3C63758566811F0A38BEDD5DAE4EC9C.roa (raw, json)
Hash identifier: cY1XMgfVkxYnIQi+PHew7rtwEpzQIqBApEVjMTsPkv0=
Subject key identifier: 51:16:59:1D:90:D5:6C:A6:6D:1E:48:2A:A5:E2:80:BA:FD:F9:6C:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3C63758566811F0A38BEDD5DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 10:46:29 +0000
ROA not before: Tue 01 Jul 2025 10:46:21 +0000
ROA not after: Thu 07 Aug 2025 10:46:21 +0000
asID: 200373
IP address blocks: 156.253.170.0/24 maxlen: 24
156.253.171.0/24 maxlen: 24
156.253.172.0/24 maxlen: 24
156.253.173.0/24 maxlen: 24
156.253.174.0/24 maxlen: 24
156.253.175.0/24 maxlen: 24
156.253.176.0/24 maxlen: 24
156.253.177.0/24 maxlen: 24
156.253.178.0/24 maxlen: 24
156.253.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90056 (0x15fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 10:46:21 2025 GMT
Not After : Aug 7 10:46:21 2025 GMT
Subject: CN=6863bc85-2341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:dc:05:70:68:8f:fc:46:e8:80:f0:77:a1:16:
87:2d:cf:1f:c8:d7:4b:10:00:3f:d6:9d:01:6f:fb:
c0:26:65:5d:31:ea:fe:1e:9c:a3:0a:58:81:0a:7b:
5a:93:f3:5d:da:14:bb:d4:d1:e5:5b:98:8d:d7:a8:
d1:c8:ec:4b:e3:e5:9a:85:9c:24:92:5e:43:a7:ed:
e0:3f:12:cc:9f:81:0f:5e:93:26:2e:b3:2c:e1:26:
b5:68:50:08:54:83:4a:f6:ed:32:31:50:60:ad:d3:
c5:e8:06:e2:c4:5d:94:e2:d5:87:4e:de:1c:99:31:
cb:95:73:06:c4:c9:89:6e:c9:0c:a5:82:4c:29:4c:
bc:5d:59:89:26:0d:9c:9b:dc:4c:b8:a7:f7:25:ca:
e6:87:df:70:1b:84:9d:b2:57:3a:fc:44:46:f4:9d:
e8:d4:99:67:8b:af:7c:5c:0b:a9:ea:c4:9e:15:60:
9c:f6:7e:ca:26:73:1a:de:5e:96:a7:30:9e:59:b7:
d5:48:3d:1d:74:6e:3c:0f:60:e6:49:40:df:20:0e:
ce:cf:81:91:51:97:6e:1d:fd:74:1c:95:ef:fc:db:
56:0e:d5:3a:64:f1:cd:f0:6d:26:dc:44:c3:24:af:
c9:ff:a5:56:1f:ab:a9:9c:b5:96:08:90:df:b7:ab:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:59:1D:90:D5:6C:A6:6D:1E:48:2A:A5:E2:80:BA:FD:F9:6C:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3C63758566811F0A38BEDD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.170.0-156.253.179.255
Signature Algorithm: sha256WithRSAEncryption
76:e4:2c:22:62:95:aa:0f:94:98:c9:91:fa:aa:59:21:a9:41:
44:32:40:90:4a:29:ff:1d:7a:89:ef:71:c7:b9:89:fa:7a:d3:
ae:d4:51:19:b6:4b:15:08:f8:44:20:6b:f1:82:52:4c:c5:41:
81:92:ca:f6:7c:f7:8d:32:d5:11:9c:ec:90:e5:ab:02:8c:63:
45:b6:3a:99:37:ff:af:3d:e1:f5:66:7a:d7:90:c0:78:19:d5:
7f:5f:11:40:64:f6:42:57:0e:0d:11:ba:a5:bf:2d:aa:5b:cb:
f1:cb:04:3a:39:ce:36:fb:3b:51:23:e2:16:55:81:5d:10:cf:
dd:2c:6c:b6:10:07:c2:86:9f:fb:66:12:7d:66:f1:1e:68:f2:
b1:75:b8:28:1e:a1:6e:d8:0e:fd:c7:fa:09:b7:68:dd:09:43:
07:fa:10:a1:e6:3a:fa:2a:07:e6:b2:d5:af:54:3a:4d:2a:2b:
9b:e7:c8:5a:2d:aa:d9:34:f5:c6:00:0c:ef:ab:1f:90:85:79:
83:12:82:69:c6:ef:90:04:9a:5f:e2:21:df:8b:78:e5:53:57:
15:42:1f:26:31:18:2d:df:e8:f5:43:4a:12:eb:1d:d2:50:23:
64:0e:39:39:8d:5c:39:f1:83:99:1f:89:e7:f8:f0:36:3f:05:
87:2e:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:38:12 2025 by rpki-client