Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/35DD7C2C2B1811F083161FCDDAE4EC9C.roa
File: 35DD7C2C2B1811F083161FCDDAE4EC9C.roa (raw, json)
Hash identifier: /bDQW/wHykjkSvWIlh/iq/vNJ2juKHvWAYIE0dDSEz0=
Subject key identifier: C8:3A:85:45:12:C4:D0:86:82:45:CA:45:A0:3C:1C:DA:51:32:76:10
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 0525
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/35DD7C2C2B1811F083161FCDDAE4EC9C.roa
Signing time: Wed 07 May 2025 07:52:24 +0000
ROA not before: Wed 07 May 2025 07:52:19 +0000
ROA not after: Tue 13 Jan 2026 07:52:19 +0000
asID: 213659
IP address blocks: 45.221.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1317 (0x525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: May 7 07:52:19 2025 GMT
Not After : Jan 13 07:52:19 2026 GMT
Subject: CN=681b1137-02ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:84:5f:a1:7e:a4:a3:61:36:9a:21:86:b8:
3a:01:bc:d5:30:26:ff:bc:42:d6:63:58:aa:eb:0e:
ed:bd:c9:2b:3a:b3:c5:d9:66:a1:2d:9e:ce:64:54:
8e:82:ab:f8:44:5e:9d:05:88:26:3f:ed:f0:53:e8:
4d:bd:aa:16:6e:88:01:61:50:45:a2:86:8b:6a:82:
3c:65:a8:01:a2:02:ab:45:ee:c9:3a:52:70:9d:b4:
13:ec:55:1e:a8:9e:04:3b:b0:32:31:e6:11:d2:7e:
c0:b2:29:1c:0e:70:d7:09:47:22:99:0b:27:4c:bd:
d8:2c:e7:81:b5:0a:49:39:e4:31:23:a5:00:aa:5a:
ed:61:e0:fa:4d:ae:30:28:c1:30:a1:6b:2f:ac:87:
c1:03:7b:55:0f:61:54:32:b8:8f:f6:ea:aa:16:1d:
03:56:49:48:8a:6e:48:28:ad:ed:62:18:a4:65:fa:
e8:10:6a:b4:c8:83:51:df:17:47:b9:28:8f:e2:1a:
b8:2e:de:12:bb:b8:64:13:06:c9:b3:eb:b0:b5:eb:
16:bc:9f:d5:c4:8f:e9:93:de:11:11:a6:57:12:e6:
b4:e7:23:31:d6:7f:ab:30:03:b1:43:0a:e5:d2:15:
0e:5c:cc:92:d7:e3:8f:05:14:f8:c0:89:03:b9:74:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3A:85:45:12:C4:D0:86:82:45:CA:45:A0:3C:1C:DA:51:32:76:10
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/35DD7C2C2B1811F083161FCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
72:85:ca:6f:9e:99:31:e2:f8:5a:69:07:98:75:9c:0d:15:22:
5e:86:67:17:36:5e:7e:37:52:63:a4:2b:e9:d4:a1:0b:e2:70:
dc:b9:7f:4a:30:2f:f4:2e:c4:93:33:f6:a4:a7:1a:4b:e6:17:
b5:03:08:b4:4c:47:11:27:aa:54:40:69:26:73:c0:09:9e:eb:
5c:bc:eb:8f:8e:29:ec:4a:b7:b9:45:3a:77:da:9f:1a:18:e1:
56:45:d9:0d:b6:db:e6:a1:43:7d:cd:50:ab:2b:89:e8:c6:71:
02:45:e7:69:7e:a2:05:c5:02:43:81:71:b3:21:d2:46:0b:12:
09:dd:f2:fb:2f:a1:f2:6c:8e:e5:d6:8c:70:7f:6d:de:f8:e3:
1b:82:8c:1e:ef:5e:b5:5e:bd:28:ba:b3:a7:14:8c:bf:6b:de:
ba:0a:f1:cc:8e:4b:f7:4c:bf:c1:6e:05:91:d2:4e:de:30:f3:
ee:7d:6a:20:1d:76:54:13:2e:d7:8f:19:23:81:37:a9:37:78:
16:61:c2:44:64:6d:fb:35:ab:89:db:d3:cd:d0:b3:fb:6b:a8:
84:43:6e:3d:c6:d2:1f:56:a0:2e:b4:a8:1c:48:9a:88:c7:1c:
73:5e:6b:8e:73:32:da:bc:25:99:bc:57:f0:5d:86:4a:52:66:
7d:8d:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:30 2025 by rpki-client