Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/A696AAEC46CA11F0B0F691A0DAE4EC9C.roa
File: A696AAEC46CA11F0B0F691A0DAE4EC9C.roa (raw, json)
Hash identifier: xB7HU00jvjBw/6JgiS40uDAO/7+ErDQc10oiyq65hjE=
Subject key identifier: 1B:C4:F4:56:88:41:9C:D7:7C:8F:DB:35:E7:E4:2F:0F:8D:1B:86:43
Certificate issuer: /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial: 0358
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Authority info access: rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/A696AAEC46CA11F0B0F691A0DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:47:44 +0000
ROA not before: Wed 11 Jun 2025 13:47:39 +0000
ROA not after: Sat 17 Mar 2035 13:47:39 +0000
asID: 37014
IP address blocks: 156.38.4.0/22 maxlen: 22
156.38.4.0/24 maxlen: 24
156.38.5.0/24 maxlen: 24
156.38.6.0/24 maxlen: 24
156.38.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Jul 2025 03:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Validity
Not Before: Jun 11 13:47:39 2025 GMT
Not After : Mar 17 13:47:39 2035 GMT
Subject: CN=68498900-5f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:5d:2c:ac:d4:63:16:bf:0b:af:7e:7c:1c:
92:e8:49:44:d8:2a:41:2e:6c:f4:1d:a0:52:87:2c:
89:cf:53:38:9b:9c:a1:c7:d6:8d:39:75:50:49:1f:
35:de:58:d1:ce:0f:2b:68:80:14:fa:28:9e:73:d6:
c0:26:b0:ab:f5:1f:e0:7f:65:09:34:2d:a5:8c:ce:
f9:c8:3d:72:2c:e4:ae:80:6f:d0:8f:7e:13:c4:4f:
94:f6:08:8a:ad:56:21:61:91:d9:77:53:d0:af:86:
36:1f:20:d0:51:11:67:71:f5:ef:5f:14:b8:fd:87:
f0:ea:f4:81:50:ad:8b:84:36:cc:e7:8c:06:e7:ec:
a8:f3:ea:04:87:69:61:a8:64:62:48:9d:fa:9c:bc:
9a:a7:31:69:0c:c6:07:ac:dd:44:61:34:31:b0:8b:
fe:96:b6:3e:b6:0a:6f:32:53:68:6c:77:33:25:19:
04:02:38:ce:63:d0:44:2a:1d:14:e6:61:9f:1d:a2:
e9:52:e3:6b:3d:17:05:40:d2:68:46:61:1a:eb:ba:
66:01:fa:52:37:e6:09:6e:6d:cd:e5:f4:c6:aa:10:
37:78:7b:32:70:f5:00:00:41:28:89:28:70:c9:89:
89:e6:49:0c:1e:70:59:a2:3d:ad:18:a5:38:60:74:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C4:F4:56:88:41:9C:D7:7C:8F:DB:35:E7:E4:2F:0F:8D:1B:86:43
X509v3 Authority Key Identifier:
keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/A696AAEC46CA11F0B0F691A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.38.4.0/22
Signature Algorithm: sha256WithRSAEncryption
22:de:69:aa:94:06:55:a1:a6:4f:39:26:ab:44:70:c7:5b:a8:
f9:41:bd:26:51:4e:c0:c5:4c:74:84:2f:57:4f:db:ec:7f:b9:
9b:d2:80:da:78:e7:2b:41:71:a0:b6:b8:25:e9:e3:10:ff:c9:
46:39:45:ab:e7:3e:46:eb:4a:da:d9:45:40:5e:e4:77:2e:59:
ea:c9:6c:9d:f2:e5:db:4d:76:58:13:ab:49:2f:90:4d:93:73:
90:e9:41:54:8d:e7:13:a1:10:ba:82:dd:db:d9:21:a8:aa:e9:
5b:30:70:ab:2a:4b:9f:3f:fc:fd:e5:48:be:95:94:4a:63:88:
c3:d9:ac:25:a7:0c:05:88:ab:ad:ad:32:4d:70:7c:57:b7:b7:
dd:b2:72:22:f4:5c:dd:cc:9d:23:6e:7a:76:d1:3a:27:6e:c2:
ed:4f:24:e3:8e:6f:c4:e1:a2:a6:82:8b:e6:e1:6b:1c:de:2f:
7a:d8:36:77:d0:31:f3:65:4a:49:14:39:a7:6b:45:cf:95:7d:
e7:58:4b:02:1a:e2:f7:1e:9e:8f:30:f1:0f:d8:e3:90:26:7c:
18:3b:76:b7:a8:60:36:1b:81:b1:0f:63:73:1d:89:30:3a:ab:
12:fc:02:6e:3e:3d:97:8d:84:31:82:8d:64:7d:fd:a4:b9:de:
69:08:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:14 2025 by rpki-client