Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2013B08608011F09C2930E6DAE4EC9C.roa
File: F2013B08608011F09C2930E6DAE4EC9C.roa (raw, json)
Hash identifier: 3iS69/EewetjDEIfvgHPG1PG9sUF9KIKybtzPQnW6os=
Subject key identifier: 8C:4B:75:0A:F4:3F:9E:8C:91:81:1A:6B:D0:47:B7:3E:25:02:31:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2013B08608011F09C2930E6DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:05:38 +0000
ROA not before: Mon 14 Jul 2025 07:05:34 +0000
ROA not after: Tue 12 Aug 2025 07:05:34 +0000
asID: 135391
IP address blocks: 156.254.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91364 (0x164e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 07:05:34 2025 GMT
Not After : Aug 12 07:05:34 2025 GMT
Subject: CN=6874ac42-4582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:18:af:41:1c:85:c3:4c:3d:cf:37:e2:ef:
a6:23:91:6d:92:36:d7:98:b2:46:cf:7a:78:85:ad:
78:a8:e1:9a:e7:09:92:32:a5:e2:db:d1:0a:b7:56:
c9:41:15:2d:d3:d9:4d:51:c4:b7:4a:a4:bb:a1:09:
70:bf:46:4f:ef:d2:ee:3f:40:c2:4b:92:8b:58:94:
75:4a:70:6a:0a:43:14:9f:22:c6:09:dc:bf:0b:65:
0f:a9:88:ec:9c:ea:a1:5b:b3:34:1a:dc:1d:48:42:
25:d3:4f:88:8e:d9:9a:82:df:6b:67:98:f9:8d:2f:
54:c5:06:43:65:56:d8:4a:af:c9:9c:6a:bd:f1:96:
fc:f5:25:0b:2a:a6:53:72:ff:69:c5:20:be:ba:04:
1e:11:66:82:54:e0:00:cb:64:ba:5d:db:48:eb:18:
ba:4b:24:fd:83:d0:99:09:ad:83:85:d5:e3:a1:8f:
3c:40:5d:0f:99:d0:8d:b9:50:f5:26:c9:41:95:2a:
e2:88:c4:c1:9c:98:56:fc:44:98:3e:40:11:e6:5c:
18:f3:d9:d2:3a:61:d6:8f:d9:d2:5e:49:f7:ce:11:
aa:7f:5f:e5:6c:99:e4:59:3d:66:62:c6:b1:c4:ee:
d0:3a:88:ee:fb:c3:f7:df:d2:86:32:f0:a1:01:c1:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4B:75:0A:F4:3F:9E:8C:91:81:1A:6B:D0:47:B7:3E:25:02:31:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2013B08608011F09C2930E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:64:8f:bb:10:e1:da:ed:7d:9d:5f:59:50:4f:24:8e:63:d9:
93:6c:56:cd:a1:32:84:d0:bf:be:50:28:ca:45:e6:f4:7e:8a:
a9:15:1f:2f:53:27:3a:0a:57:9d:19:5f:95:5c:2f:87:d4:66:
6b:4e:19:3f:49:64:f9:9b:02:f2:c4:15:05:4b:87:3b:26:34:
1b:b5:fd:11:7e:6f:13:25:99:8a:3b:3d:b2:1f:95:27:ec:4e:
28:44:d5:cc:0b:a4:ac:4d:67:e2:54:fd:87:81:9b:12:c6:9a:
c7:fe:a2:c2:d1:d8:fc:96:ab:0c:4d:2b:9b:7a:0f:b5:b1:c1:
bf:6d:df:a2:02:06:8a:04:7e:83:7f:d5:04:f2:89:ab:46:41:
8b:0d:95:24:cb:a7:9f:df:c1:8f:2e:e6:64:f5:01:c1:fb:14:
04:46:c2:58:6d:ec:b1:72:a0:62:84:75:a4:0d:9d:76:db:03:
7f:ca:49:6d:82:ad:a2:85:09:13:a9:72:5c:0c:50:e5:4c:16:
64:fe:f8:00:94:2e:ef:35:a7:17:34:b2:6f:52:20:af:6a:71:
7f:da:88:56:4c:58:4b:ba:da:eb:85:98:b1:01:4a:a6:d9:c3:
8d:19:de:0e:5b:2f:31:e5:a3:1f:b2:15:b6:8c:00:a4:68:eb:
2e:91:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:32:15 2025 by rpki-client