Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A69AFB5C5B2311F0AEF2DBA4DAE4EC9C.roa
File: A69AFB5C5B2311F0AEF2DBA4DAE4EC9C.roa (raw, json)
Hash identifier: /OeW64Umlg1CV2lh0tXGb/4cGt/J2osxWNHlwvONcm8=
Subject key identifier: 54:CA:8C:08:45:58:10:AD:C4:58:03:12:F1:64:01:4E:25:C1:9D:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016300
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A69AFB5C5B2311F0AEF2DBA4DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 11:15:13 +0000
ROA not before: Mon 07 Jul 2025 11:15:08 +0000
ROA not after: Sun 10 Aug 2025 11:15:08 +0000
asID: 8796
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90880 (0x16300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 11:15:08 2025 GMT
Not After : Aug 10 11:15:08 2025 GMT
Subject: CN=686bac41-50d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:11:52:1c:0d:09:b7:07:7b:9e:44:27:74:
5a:f4:12:f5:f0:0d:ad:bb:36:11:1b:07:35:58:39:
9a:09:06:dd:cc:9f:26:b5:83:53:79:fc:f9:c1:33:
ff:2c:d0:99:26:5a:3e:0d:7f:6d:f3:ba:24:4d:97:
10:7d:6f:ea:81:d3:d2:85:63:84:0c:07:ba:bc:08:
07:9f:d4:d4:48:9c:fb:ae:a1:c8:7d:4c:e8:16:d8:
8a:07:a9:35:b5:f9:69:de:f7:94:40:20:e1:db:56:
b3:db:08:b9:e0:24:49:2a:7e:b8:d8:c5:5f:2f:85:
f3:22:a1:9c:c2:7e:cf:42:89:dd:79:72:b2:5a:91:
2a:33:54:0b:64:d4:37:ef:6c:be:9b:8f:7f:50:3c:
03:6a:e1:f9:37:79:a2:d1:25:6f:13:e5:d4:fb:8d:
63:0e:a7:8f:15:76:b3:3f:0a:4c:1a:da:ba:13:06:
23:51:21:f6:de:d5:84:80:ff:4b:df:5d:29:30:6d:
5d:ae:78:9d:93:6e:cf:4c:be:54:87:d3:ef:e6:ef:
4b:3c:85:ac:1f:94:8d:be:07:9f:e4:5d:c1:86:9c:
37:3c:4d:ca:04:c1:56:72:0b:a9:a0:c4:27:dc:f2:
77:84:62:a6:12:84:43:b3:24:f8:8f:cf:c7:25:50:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:8C:08:45:58:10:AD:C4:58:03:12:F1:64:01:4E:25:C1:9D:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A69AFB5C5B2311F0AEF2DBA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:d8:64:e8:7f:e5:48:a7:e8:fd:b9:b0:42:e7:22:8b:10:ce:
43:25:fe:4e:16:ab:af:1b:13:20:20:1b:de:7a:37:2a:ff:30:
f1:19:bd:07:f0:aa:86:01:a1:fc:0b:b0:68:e1:de:ed:7e:01:
50:86:08:f2:82:bc:23:58:ef:e8:06:07:4f:91:f8:64:b5:7a:
9b:a5:13:54:b7:56:3e:b3:13:54:59:e3:41:03:c1:3f:af:6a:
09:6e:72:58:ef:f2:14:f9:2a:c2:35:c2:94:ba:31:86:a4:37:
1c:05:52:67:f4:ad:07:03:80:8a:56:30:8a:10:36:7b:08:99:
a9:f7:9d:a9:fe:e4:32:6f:b2:3b:21:3b:d4:35:3e:19:09:c8:
93:c2:8f:fe:53:1d:46:b3:0e:df:a7:52:49:d3:79:b1:6b:2b:
20:dc:a2:06:63:1e:b1:41:4c:61:bf:b7:1c:ed:42:b7:3a:04:
d6:3d:78:09:53:75:a2:6d:61:3f:65:0c:d6:97:67:a2:5f:21:
23:53:38:80:ca:b8:41:d0:74:3a:56:76:fe:9e:70:40:ff:2e:
52:c3:93:5e:17:81:dc:33:8d:0f:20:d2:a0:c8:3a:c3:b5:15:
0a:0b:24:e0:1f:90:ad:73:8a:5d:4e:59:a2:9b:e5:bf:62:26:
7d:e0:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:36 2025 by rpki-client