Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D1446978323411F0B09CDBDFDAE4EC9C.roa
File: D1446978323411F0B09CDBDFDAE4EC9C.roa (raw, json)
Hash identifier: V9STZ2iN3A4YvCSe2InFeGSAeofT1Ntv88qeOmRvgT8=
Subject key identifier: 16:64:A2:E0:81:FF:54:53:F8:01:92:2C:E1:83:D5:12:40:3F:94:3F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0CBB
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D1446978323411F0B09CDBDFDAE4EC9C.roa
Signing time: Fri 16 May 2025 09:04:48 +0000
ROA not before: Fri 16 May 2025 09:04:43 +0000
ROA not after: Wed 16 May 2035 09:04:43 +0000
asID: 36916
IP address blocks: 192.142.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3259 (0xcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 16 09:04:43 2025 GMT
Not After : May 16 09:04:43 2035 GMT
Subject: CN=6826ffb0-53f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:5d:8b:4e:14:71:56:a2:e8:76:24:a7:3e:
e1:4e:01:b2:da:78:2d:90:04:5a:77:f8:b4:bf:65:
ad:c7:9e:34:c6:b6:60:44:89:8b:77:b0:67:d0:f6:
00:f6:c1:cf:80:8e:b9:db:3c:5a:aa:ac:39:b8:5f:
5b:d3:51:fe:df:5f:72:9e:29:22:10:99:55:b4:57:
af:b1:b4:d1:6c:a3:99:b0:32:ee:06:ff:36:b9:d1:
e9:6a:cc:3e:7d:f7:13:00:8b:c5:a5:a4:68:fa:94:
04:a4:28:1d:6a:10:5f:4c:26:1f:fc:54:1d:84:7b:
a5:77:75:97:0b:a2:51:5b:58:00:42:27:c4:35:d6:
40:6b:df:e3:a1:3d:71:f4:a9:14:5a:e9:67:5c:0b:
6a:e1:ca:e9:0b:90:6f:4b:47:94:b9:ba:74:7a:d3:
3c:85:4b:bb:4e:76:11:31:cc:18:3a:ee:f1:5c:44:
b9:ee:17:5e:e0:6f:99:b2:3d:b4:13:77:0c:d7:7b:
6f:50:7c:97:3c:6b:3b:35:40:d8:99:40:39:05:fc:
19:1b:75:ee:94:12:0d:36:5f:b2:b7:f2:b4:fc:e9:
ce:62:9a:2d:57:68:df:1c:c2:a8:3e:e6:1e:ac:23:
45:59:79:3c:90:7f:1b:1b:a3:17:88:9c:75:33:f6:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:A2:E0:81:FF:54:53:F8:01:92:2C:E1:83:D5:12:40:3F:94:3F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D1446978323411F0B09CDBDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:4e:10:6d:94:a2:1f:6c:07:21:c8:71:ef:61:0f:4e:e5:25:
3d:97:f3:12:cf:6c:0f:19:57:22:1b:5e:77:91:31:58:88:ba:
02:06:2c:19:cc:51:af:ec:1d:63:e2:28:9e:a7:ec:e1:72:3d:
46:97:41:ba:ea:b1:64:4a:fc:98:03:4e:12:30:63:8f:29:62:
7b:fa:95:9e:5d:e1:08:d8:be:21:18:ba:1b:87:50:ab:57:42:
f4:47:b1:f0:6d:bd:64:69:ea:8e:e8:bb:1a:d4:c5:5f:a0:9c:
88:87:3f:3c:75:1d:a6:6d:58:fe:b1:61:eb:04:3a:62:81:5d:
63:c1:0c:ca:0a:cf:a6:07:a5:2e:e0:73:a1:f4:72:46:67:6c:
53:b8:7e:29:e5:fa:87:ca:8d:2c:5b:5f:9d:81:6b:a6:0a:bf:
d3:be:e9:da:f9:85:d0:6b:f1:9d:ac:01:ad:66:3d:84:47:fb:
0b:68:87:de:a9:68:9e:1a:b5:af:63:be:79:42:d1:69:a9:38:
ea:b6:6d:5f:68:eb:f9:ba:6c:82:79:73:61:40:bd:5f:15:fe:
38:4a:ef:5c:fa:c0:e5:0b:95:e4:20:84:e5:a2:7b:ff:62:0d:
ce:94:c8:38:0f:7f:68:42:2f:b5:38:e0:4b:e2:d5:d6:07:31:
f7:15:1a:08
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDLswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNTA1MTYwOTA0NDNaFw0zNTA1MTYwOTA0NDNaMBgxFjAU
BgNVBAMTDTY4MjZmZmIwLTUzZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAX12LThRxVqLodiSnPuFOAbLaeC2QBFp3+LS/Za3HnjTGtmBEiYt3sGfQ
9gD2wc+AjrnbPFqqrDm4X1vTUf7fX3KeKSIQmVW0V6+xtNFso5mwMu4G/za50elq
zD599xMAi8WlpGj6lASkKB1qEF9MJh/8VB2Ee6V3dZcLolFbWABCJ8Q11kBr3+Oh
PXH0qRRa6WdcC2rhyukLkG9LR5S5unR60zyFS7tOdhExzBg67vFcRLnuF17gb5my
PbQTdwzXe29QfJc8azs1QNiZQDkF/Bkbde6UEg02X7K38rT86c5imi1XaN8cwqg+
5h6sI0VZeTyQfxsboxeInHUz9urXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUFmSi
4IH/VFP4AZIs4YPVEkA/lD8wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0QxNDQ2OTc4MzIzNDExRjBCMDlDREJERkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATAjoAwDQYJKoZIhvcNAQELBQAD
ggEBAK5OEG2Uoh9sByHIce9hD07lJT2X8xLPbA8ZVyIbXneRMViIugIGLBnMUa/s
HWPiKJ6n7OFyPUaXQbrqsWRK/JgDThIwY48pYnv6lZ5d4QjYviEYuhuHUKtXQvRH
sfBtvWRp6o7ouxrUxV+gnIiHPzx1HaZtWP6xYesEOmKBXWPBDMoKz6YHpS7gc6H0
ckZnbFO4finl+ofKjSxbX52Ba6YKv9O+6dr5hdBr8Z2sAa1mPYRH+wtoh96paJ4a
ta9jvnlC0WmpOOq2bV9o6/m6bIJ5c2FAvV8V/jhK71z6wOULleQghOWie/9iDc6U
yDgPf2hCL7U44Evi1dYHMfcVGgg=
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:20 2025 by rpki-client