Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B45419A660A811F0AD868EE5DAE4EC9C.roa
File: B45419A660A811F0AD868EE5DAE4EC9C.roa (raw, json)
Hash identifier: RbzKTRRbj2mxs8LTPeRpFZimkzHiWiGk+8+1vzF4lJI=
Subject key identifier: F0:A6:7C:30:E1:5B:1D:6A:7C:4B:47:0F:19:93:11:A2:6B:63:80:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016530
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B45419A660A811F0AD868EE5DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:50:15 +0000
ROA not before: Mon 14 Jul 2025 11:50:10 +0000
ROA not after: Wed 03 Sep 2025 11:50:10 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 04:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91440 (0x16530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:50:10 2025 GMT
Not After : Sep 3 11:50:10 2025 GMT
Subject: CN=6874eef7-3671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:59:27:f1:5e:03:a8:11:f8:18:d6:3f:7a:
c4:f7:ef:2d:24:f6:7b:37:c1:0f:00:8a:72:10:56:
3a:4d:a8:86:9c:b4:e5:1c:98:3e:af:62:2f:f9:66:
bb:f6:d1:bd:49:81:98:72:3f:79:9b:b0:46:40:74:
d8:b2:76:11:78:df:3c:ba:05:4b:1d:e5:99:7d:54:
14:d1:4b:17:ef:73:5c:f7:49:7a:73:d4:71:c2:e5:
30:0a:81:10:93:4d:af:13:88:1f:56:7e:18:1b:0c:
78:c7:1b:e3:33:f7:c0:ca:a1:1a:ff:fc:80:22:02:
30:97:57:ba:ce:18:62:d3:52:9a:c1:28:02:8e:46:
35:72:d0:46:2f:e2:e9:12:f4:d5:17:39:fa:ab:2d:
6d:9f:a7:5e:17:aa:b3:6e:53:ef:d2:80:7e:7e:a1:
eb:8d:23:df:3f:92:0d:40:9c:19:77:53:83:53:7a:
ab:6d:c8:b0:25:15:62:75:0b:b2:85:cf:36:a7:e4:
eb:7b:c1:4f:fe:5f:23:20:ac:21:1d:03:8a:dd:1f:
1f:37:f0:34:94:4e:40:0b:1b:5d:d7:5c:92:a1:9a:
c5:51:16:8e:f5:0f:8d:03:ae:a4:de:2f:0f:82:6b:
eb:3e:fd:c8:f1:34:bb:7c:a6:95:a6:7d:ff:c6:89:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:7C:30:E1:5B:1D:6A:7C:4B:47:0F:19:93:11:A2:6B:63:80:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B45419A660A811F0AD868EE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
af:43:65:e0:38:d9:56:d2:b1:3a:dd:4f:2a:fa:01:a6:99:8b:
8f:ea:f6:b9:f0:4f:91:20:3e:79:51:24:a4:f5:b7:de:fa:96:
ab:36:54:f8:2f:34:ce:d3:93:4e:8d:37:04:0d:51:78:29:72:
ce:5e:a8:91:26:be:70:d9:d2:df:aa:1e:c2:d0:e7:55:32:41:
02:c7:b0:be:83:20:5b:a0:da:a2:2e:07:2b:67:6d:5f:a6:85:
56:35:89:9a:33:a8:de:35:f8:0b:7e:0d:ba:06:26:9f:c7:73:
32:47:c7:2a:95:cc:c2:38:cd:a0:21:ca:bf:b0:ca:91:28:91:
0c:15:da:e1:32:1a:e8:e5:a7:b3:10:09:cd:84:d5:29:e2:8c:
59:76:81:0e:b2:62:21:01:ee:55:59:0b:21:88:93:18:42:a8:
2e:f8:76:07:82:f6:3a:78:f4:f1:10:78:21:8e:39:5e:0a:25:
5b:96:81:ce:48:98:45:d4:12:b9:d9:2c:d6:7c:38:d1:d3:df:
bc:5b:f4:be:65:c5:65:99:92:64:f8:a5:5d:a9:b8:a2:e1:f4:
e6:ca:6e:98:c4:b7:b6:01:98:a0:08:70:34:f5:0c:0a:7e:3e:
48:70:6e:be:e8:0b:94:e5:31:c0:95:04:ae:c7:b4:f7:28:3a:
da:0d:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:13:03 2025 by rpki-client