Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/53C0740A37C111F0825C52D7DAE4EC9C.roa
File: 53C0740A37C111F0825C52D7DAE4EC9C.roa (raw, json)
Hash identifier: zhnqExdl/sII2qvE5e97youLKbgAugOftNHpKUlDjdw=
Subject key identifier: 80:F1:AF:4D:3C:92:11:0D:16:F6:C6:5A:CA:19:65:D5:5E:6B:E5:A2
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 053C
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/53C0740A37C111F0825C52D7DAE4EC9C.roa
Signing time: Fri 23 May 2025 10:33:13 +0000
ROA not before: Fri 23 May 2025 10:33:08 +0000
ROA not after: Sat 23 May 2026 10:33:08 +0000
asID: 9009
IP address blocks: 45.221.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: May 23 10:33:08 2025 GMT
Not After : May 23 10:33:08 2026 GMT
Subject: CN=68304ee8-3886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:b2:1a:62:02:26:77:6b:31:d3:78:42:81:
7e:3f:e9:63:7f:e6:58:f5:9a:13:cf:53:00:63:3a:
ca:52:19:50:0a:69:57:4f:0f:3b:1a:9b:78:2e:1f:
b3:60:d8:eb:f3:6f:a8:19:bb:f5:fe:42:a4:e1:bf:
95:24:cf:a3:1d:bd:e0:ed:b6:52:d0:3b:03:42:6e:
73:f0:f7:41:ef:c2:cb:3b:15:d0:f9:b8:8b:ad:4b:
64:41:2d:1b:97:2d:ca:18:87:a1:06:95:5a:36:2e:
5e:84:e5:49:f6:7e:a3:32:08:4d:a4:8f:7c:e6:7d:
2f:75:f4:09:96:16:7b:5f:58:fa:d8:aa:4e:ff:8f:
c9:f7:70:80:2b:56:11:d5:40:d5:f9:45:50:b5:c5:
9b:a9:af:eb:43:2f:eb:ed:a6:8e:b4:fd:86:c2:e3:
56:19:d5:6d:e1:c7:0c:fe:37:d9:10:4f:89:2f:15:
7c:2c:ee:08:d7:da:98:dc:00:36:70:4e:c3:fa:90:
d2:4d:86:26:56:67:84:d1:fa:1d:80:8a:96:73:60:
01:12:05:0f:7f:43:d5:e9:de:1d:c7:b5:a1:05:1c:
38:60:46:83:5b:93:8b:50:40:7a:53:17:7b:65:29:
23:84:35:e7:b1:9e:c4:a6:f5:c9:d4:03:b5:9f:c2:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F1:AF:4D:3C:92:11:0D:16:F6:C6:5A:CA:19:65:D5:5E:6B:E5:A2
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/53C0740A37C111F0825C52D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.70.0/24
Signature Algorithm: sha256WithRSAEncryption
43:66:34:ac:f1:f0:36:cf:ff:29:3d:ca:b1:7f:ee:7c:c7:de:
cb:b2:f7:67:69:1d:5b:1a:60:2e:50:5d:73:9b:14:e3:b9:08:
b4:76:45:08:84:a7:01:34:47:23:51:19:2a:f8:38:f8:08:f8:
1c:7e:7a:a4:20:88:d4:7f:e4:a6:66:69:74:2f:76:16:d6:92:
f8:28:b1:2e:22:39:33:4a:87:5b:bc:09:e5:9c:7b:6b:7e:19:
44:25:c6:6f:8a:62:da:8d:da:44:cd:27:44:6a:eb:f3:99:a9:
7b:f6:3d:91:4d:10:91:49:47:a4:05:c9:d2:95:2d:f2:03:25:
c3:32:78:9f:f4:3c:13:aa:b6:7c:09:7a:aa:0e:85:c3:b5:1b:
cf:cd:ad:64:f4:7b:2c:97:5c:79:c1:26:06:9b:b7:06:34:3c:
d0:ef:c9:fd:87:91:6f:01:69:e5:17:de:dd:ad:c1:4d:80:1d:
09:95:19:eb:1a:3f:ea:dd:91:f8:56:e7:d3:7b:7a:ec:b1:35:
7a:39:c5:c0:9f:0f:03:eb:22:95:e4:f8:4a:bd:21:e8:de:38:
35:93:75:90:52:8b:82:ca:d5:9a:56:07:38:41:33:8d:93:9d:
a7:34:92:e3:4a:40:00:be:b4:34:88:d4:88:b4:5c:ed:b6:f8:
86:99:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:11:42 2025 by rpki-client