Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF5683E5CAF11F0940E64B9DAE4EC9C.roa
File: ABF5683E5CAF11F0940E64B9DAE4EC9C.roa (raw, json)
Hash identifier: Za4lKK67LGsxM5BW/WJNcqvDL1GtKshagYsH0pc7fhA=
Subject key identifier: 29:29:2A:DC:78:CB:80:BE:16:C0:12:18:AC:62:6C:B6:16:62:DF:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01639B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF5683E5CAF11F0940E64B9DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 10:30:03 +0000
ROA not before: Wed 09 Jul 2025 10:29:57 +0000
ROA not after: Sun 12 Jul 2026 10:29:57 +0000
asID: 150150
IP address blocks: 156.230.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91035 (0x1639b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 10:29:57 2025 GMT
Not After : Jul 12 10:29:57 2026 GMT
Subject: CN=686e44ab-9abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:0a:46:2d:a1:0f:33:f7:b8:c4:62:63:39:
83:4f:75:ef:a0:d9:16:35:55:f2:51:a5:47:48:af:
f6:89:12:c1:1d:c9:41:1e:d0:fb:db:f1:18:0d:09:
0f:80:59:d6:16:8b:c4:9e:d6:c8:82:2b:a5:77:93:
10:37:0f:ec:52:72:b8:b5:21:b3:33:98:59:ee:6b:
6e:80:4e:ee:fc:03:b8:67:bd:a3:88:1a:00:bd:d2:
ca:21:83:c3:80:7e:5c:46:10:d0:d4:f9:d7:a0:46:
aa:e1:6d:91:c4:fc:d9:b0:cd:66:16:59:0a:d4:4d:
c9:dc:c1:c4:eb:e3:44:87:72:bf:78:f0:d6:49:4b:
c1:e9:81:08:2a:67:2b:c2:73:9b:0f:e6:6d:0b:e0:
67:a8:88:a6:ae:9e:bb:c9:54:c8:52:3d:43:1e:06:
53:97:8d:0d:7b:07:28:27:be:7f:07:c7:4c:55:83:
3e:9c:f0:19:63:9d:9f:ef:4b:48:cc:91:f5:de:c6:
20:24:86:b1:c3:6f:3d:f5:c7:e1:b1:0f:86:bb:86:
3a:27:32:5a:96:38:10:0a:aa:00:92:4f:a8:e4:32:
fa:82:ab:bf:55:6a:7d:0d:10:18:32:6e:04:79:b0:
0e:40:7f:4c:eb:32:98:49:3e:b6:00:fa:ec:4b:af:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:2A:DC:78:CB:80:BE:16:C0:12:18:AC:62:6C:B6:16:62:DF:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF5683E5CAF11F0940E64B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.62.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e0:cd:bf:d6:67:5a:02:c4:8a:f5:08:50:37:ed:01:42:d7:
c3:95:b6:da:d9:7c:ca:ca:4e:47:e4:e7:a1:33:fb:bc:3c:c2:
e4:7e:72:fb:f3:d2:9f:f9:6c:6e:30:c5:d9:1e:6d:41:f2:26:
fa:b1:27:ea:8f:96:2f:13:03:1a:d4:2e:0e:89:60:6a:fe:6a:
e5:98:6b:ac:ee:86:1f:26:05:ec:3f:a6:3a:41:10:4a:08:a1:
89:c5:cf:96:13:b1:ff:a3:c5:93:42:49:e3:06:22:bd:bf:1f:
ba:23:df:c5:41:9f:48:f8:12:54:52:95:44:93:1e:9f:84:6a:
7a:f0:84:55:ff:19:ab:e6:7b:b7:bc:dd:fa:6a:fd:52:31:48:
ae:c4:bd:c6:3b:18:ae:53:81:26:f7:64:69:e2:d8:eb:76:aa:
33:93:5b:fd:24:4a:62:84:96:58:20:87:c8:37:80:4a:4b:30:
b5:f2:0e:4f:2b:75:cf:32:a8:fb:fc:f8:71:33:15:78:ec:2c:
2e:d7:09:12:77:8a:02:ee:df:68:ee:f9:fd:f4:65:3f:19:c6:
ce:c0:b8:24:51:13:f8:ae:2c:97:4f:69:17:ba:07:2b:38:c6:
68:a3:48:43:ba:b5:03:ea:19:e1:92:44:30:bb:6e:e9:72:90:
72:81:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:20:16 2025 by rpki-client