Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA79FD325B7F11F0A2D197F1DAE4EC9C.roa
File: CA79FD325B7F11F0A2D197F1DAE4EC9C.roa (raw, json)
Hash identifier: +49eYF536qM+24088DwNM2OQHZIjlXXqZ8Db94ef2X8=
Subject key identifier: 0F:15:10:D0:68:7C:50:F1:D2:DC:9B:6B:B0:D6:52:20:61:D0:43:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016356
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA79FD325B7F11F0A2D197F1DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 22:14:47 +0000
ROA not before: Mon 07 Jul 2025 22:14:41 +0000
ROA not after: Sat 06 Sep 2025 22:14:41 +0000
asID: 44901
IP address blocks: 156.229.125.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90966 (0x16356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 22:14:41 2025 GMT
Not After : Sep 6 22:14:41 2025 GMT
Subject: CN=686c46d7-6682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:37:ee:4e:c5:75:95:9e:57:1c:ae:14:2b:
02:60:82:ea:ec:d8:e9:db:b5:de:5d:d8:99:60:0f:
86:0e:8a:55:d3:49:50:6b:30:e5:ed:f2:90:3f:e7:
34:52:45:06:cd:bd:4c:42:cf:25:21:d0:af:6a:2d:
ec:d8:84:6e:01:4f:b3:12:65:56:f6:a4:2a:d5:ec:
e2:05:c4:d1:6d:6c:91:0e:df:0f:d1:0b:dd:99:dc:
cd:a8:db:0b:7a:3d:36:9b:5f:f2:14:85:2a:d6:87:
79:93:3e:5f:b5:5f:1b:19:6f:c9:78:0f:35:24:8d:
74:2a:b6:4d:06:0e:f6:74:24:27:68:eb:b9:a3:89:
d2:75:ff:9c:55:d5:e6:ed:85:84:6d:f4:91:3c:4f:
01:25:33:68:83:48:cd:36:7d:24:78:70:25:cc:3b:
a2:bf:d3:73:7b:f4:14:b4:41:2e:6e:e7:ad:d0:96:
6b:34:87:a9:13:a6:fc:ea:47:15:f5:0a:09:04:4f:
f2:48:be:e6:59:eb:a4:65:e1:75:fb:09:5b:f4:a8:
7e:c8:9d:fe:4e:0a:4e:0a:b8:a6:81:53:ec:02:9b:
cc:58:b3:7a:31:f0:1a:06:19:8a:76:e1:f7:97:bc:
f0:c0:2b:52:b9:66:5f:ee:60:0e:54:0f:5a:0e:a5:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:10:D0:68:7C:50:F1:D2:DC:9B:6B:B0:D6:52:20:61:D0:43:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA79FD325B7F11F0A2D197F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.125.0/24
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:92:07:69:70:ee:d4:9a:79:76:36:52:df:fd:aa:97:5b:
a3:02:85:23:a7:e4:65:66:85:f4:90:78:dc:fd:f7:be:d9:95:
4f:11:8a:cc:e6:5c:45:61:db:fd:fc:08:bd:a5:cb:f1:fd:60:
67:ce:d3:02:49:ae:2c:14:84:81:9e:d6:5d:92:05:84:80:f7:
3a:4e:17:16:d9:56:ac:5a:0c:1d:67:d8:02:33:9f:c1:f3:6c:
51:67:65:40:2c:1d:79:e7:f8:89:11:df:1c:4a:35:d0:3a:e8:
c4:86:19:5a:d4:1e:eb:d0:87:b3:b9:4d:32:ca:cc:bb:6c:5c:
77:17:1c:e7:00:69:02:88:94:e0:8d:f7:24:69:38:95:66:39:
db:6d:82:d1:82:1d:9e:31:2b:e9:8f:82:8d:ce:74:79:17:95:
57:19:af:c5:be:64:fe:45:84:8d:3d:89:77:c9:38:3f:17:33:
d4:d9:7a:ef:de:bf:38:15:59:5b:90:0b:7c:e2:bf:09:99:ac:
51:24:af:23:b0:6c:20:cb:ea:3b:eb:6f:bd:b9:a9:c2:ee:ee:
45:06:35:25:cf:60:6b:e1:ef:74:e8:8c:27:10:67:55:54:d5:
ea:28:3b:ab:cf:00:bc:e5:c8:73:bb:e2:62:dc:28:c5:dc:65:
b4:cd:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:18:43 2025 by rpki-client