Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F351C472567711F08DE1EBB7DAE4EC9C.roa
File: F351C472567711F08DE1EBB7DAE4EC9C.roa (raw, json)
Hash identifier: nV/XNvGsAJmiyi84ZD6zCreLECdC01+SdGbTmn8/lOQ=
Subject key identifier: 98:87:E9:A5:84:98:69:92:51:83:81:DC:29:A5:31:59:89:EE:80:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F351C472567711F08DE1EBB7DAE4EC9C.roa
Signing time: Tue 01 Jul 2025 12:36:07 +0000
ROA not before: Tue 01 Jul 2025 12:35:57 +0000
ROA not after: Sat 23 Aug 2025 12:35:57 +0000
asID: 401739
IP address blocks: 156.247.40.0/24 maxlen: 24
156.247.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90095 (0x15fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 12:35:57 2025 GMT
Not After : Aug 23 12:35:57 2025 GMT
Subject: CN=6863d637-05ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:f9:02:74:62:6b:b1:dd:f9:f5:1a:9d:0a:
e5:17:78:9d:de:09:6e:c3:e9:47:02:93:5f:cf:d6:
d9:06:36:ef:d2:6e:d2:56:fe:38:5c:73:60:dd:26:
0a:17:62:52:26:7a:37:e1:7f:0c:90:ba:55:2c:0a:
51:f5:18:ee:5b:58:8e:75:de:a1:10:0e:d6:77:92:
27:d4:47:b9:d7:82:49:bc:64:e7:5f:a0:a5:c5:fd:
28:f1:d2:47:6b:a6:90:fc:fe:00:e2:12:0d:39:a5:
b6:f0:c3:84:1a:78:16:2a:18:c2:6a:45:b7:0e:55:
01:c0:7b:5d:9d:8d:a3:06:43:b4:13:f8:03:4b:5c:
96:e0:c2:2f:65:4f:9f:56:46:a5:7f:79:e1:4e:8e:
db:e1:42:80:f0:92:80:b2:fd:ab:c6:bb:92:28:08:
bc:10:21:7e:84:f9:7f:d9:5f:fa:f1:22:63:57:97:
99:4b:be:f0:42:75:0b:d2:c0:f4:40:15:0d:3d:f9:
b4:f0:11:9a:13:75:78:5d:69:d1:0e:8d:c0:76:81:
28:88:11:f2:55:e4:da:85:64:18:b7:de:2b:e4:db:
4e:97:e1:88:e7:c1:3a:7c:52:eb:ac:d5:a9:6b:98:
20:c2:dd:1a:23:6e:9a:b8:12:07:d9:f2:aa:0b:0b:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:E9:A5:84:98:69:92:51:83:81:DC:29:A5:31:59:89:EE:80:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F351C472567711F08DE1EBB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/23
Signature Algorithm: sha256WithRSAEncryption
54:55:6f:99:f2:84:30:0f:7e:e4:45:63:ea:f1:f2:fe:65:09:
5f:49:c3:d4:c1:f5:25:0f:37:8b:7c:ca:91:e7:11:5d:cc:47:
ca:4d:38:05:39:eb:55:2d:5e:50:7a:83:3d:38:df:c9:6d:81:
4e:9e:4f:63:7c:44:fa:ad:54:ca:5f:ca:d4:be:79:f9:0c:da:
d2:70:02:1f:1c:52:31:47:f5:dd:8d:64:85:dd:a3:27:a5:28:
c3:51:55:0a:e7:88:b5:15:95:95:25:aa:cb:c4:14:97:ae:cb:
f9:50:55:b8:35:ee:e7:2a:ff:07:86:31:b6:c0:76:6d:d0:9e:
42:82:c2:38:14:db:0a:06:70:23:a1:5d:1b:9b:ed:ee:d3:9e:
f1:c6:40:44:77:3e:c8:f3:89:1e:d7:93:c1:25:f6:f1:ab:4b:
9f:40:88:e4:88:4b:ad:60:e5:ea:ee:2a:de:8c:fe:e9:d1:09:
cb:86:6c:b8:68:6c:c7:10:f5:8f:52:6b:19:2f:b9:0b:b4:66:
44:33:66:f7:1f:bf:39:28:a4:f2:47:10:0f:a6:29:d0:b2:40:
36:04:49:cb:cf:4b:18:3e:73:0f:8a:3d:b1:64:ac:cd:d6:42:
81:03:cd:2a:06:45:01:5e:cc:ca:e7:f4:d0:51:49:f0:85:26:
4f:bc:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:53 2025 by rpki-client