Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DE1F70889011F0910F679CDAE4EC9C.roa
File: 13DE1F70889011F0910F679CDAE4EC9C.roa (raw, json)
Hash identifier: ocKCw2tnP71/FcMNXWG6KHtsPK73IkRjGyXOE0fHW/U=
Subject key identifier: 89:60:D8:26:38:E0:D5:25:83:15:96:18:4F:ED:EE:D3:14:1F:43:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017729
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DE1F70889011F0910F679CDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 06:34:44 +0000
ROA not before: Wed 03 Sep 2025 06:34:37 +0000
ROA not after: Sat 04 Oct 2025 06:34:37 +0000
asID: 136800
IP address blocks: 156.234.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96041 (0x17729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 06:34:37 2025 GMT
Not After : Oct 4 06:34:37 2025 GMT
Subject: CN=68b7e184-3789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:b3:73:b9:99:03:6c:ed:4f:01:01:95:89:
57:f0:11:45:68:ee:2b:03:8c:24:51:83:d2:10:4f:
a0:a4:5f:5f:41:3a:b3:19:a6:34:b7:b2:de:64:eb:
98:4c:79:86:22:02:f7:46:e7:79:b2:bc:3c:af:36:
3f:51:ae:ac:08:e8:70:29:6d:36:3f:21:d1:07:1b:
94:22:87:36:4f:97:5e:ae:9b:1f:38:39:53:d8:ae:
b7:84:7f:30:95:fb:a7:47:ec:bd:b3:12:75:9b:3e:
21:72:14:cf:17:ae:63:81:22:ab:15:10:cd:c5:de:
f9:fa:f7:54:26:19:61:ea:86:57:20:ad:3a:42:ee:
f7:d8:00:46:93:95:db:6b:ee:67:20:5b:e5:e9:99:
c3:66:6c:4f:87:4b:c2:f0:d4:c6:b1:6b:16:78:b9:
5a:1d:0c:0d:2a:71:e5:b2:91:d9:cd:75:22:8f:71:
70:78:2b:c3:22:0f:16:ba:06:12:5e:42:21:7e:55:
6a:11:af:67:3f:17:b0:87:82:0e:ef:7b:88:43:b5:
10:06:22:27:19:08:0c:33:60:b2:b0:a2:ef:95:bb:
28:1e:65:97:e2:19:ea:82:13:02:1e:b1:23:fc:55:
01:5a:74:08:fe:98:fe:14:1c:c3:b6:4b:e7:b1:40:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:D8:26:38:E0:D5:25:83:15:96:18:4F:ED:EE:D3:14:1F:43:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DE1F70889011F0910F679CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6e:cf:0a:45:39:4e:c0:ec:c6:4b:ff:2b:01:45:16:a5:9c:
84:6d:0f:14:e4:df:85:03:0a:b3:87:1c:c3:ea:84:4a:43:c1:
62:0d:08:15:4b:1a:a5:14:71:f0:58:7f:49:7f:ed:89:d8:23:
44:94:d0:c8:a3:dc:4b:95:e2:0d:ff:6c:05:32:33:5d:d9:f5:
a1:35:11:09:d4:1b:2f:4e:0b:ae:e5:98:0d:f0:40:0e:c1:17:
60:50:6e:92:9c:9e:5f:b6:01:74:ed:3e:7a:c1:9f:89:99:b5:
c6:2f:70:0a:e8:f2:86:39:bc:2d:21:e1:d9:3e:cf:70:a6:19:
09:b4:3e:a9:3c:3c:ba:98:ea:6f:14:83:d9:01:fc:22:61:52:
e3:7c:10:42:d5:1b:f0:dd:24:1d:9d:09:51:98:42:47:b7:89:
67:99:11:6a:63:66:98:3b:82:93:34:c3:e3:09:74:48:20:0e:
a2:61:1d:08:0f:de:f1:80:58:cc:c7:71:b7:44:7d:63:60:5d:
55:33:61:72:bd:98:c9:8f:04:ff:f4:9a:b8:5a:22:27:52:09:
83:c5:c7:5c:fa:51:fd:7b:bd:df:81:19:81:29:60:8e:0c:38:
5e:39:1d:17:7c:75:9f:33:db:ec:76:b9:28:36:0a:79:c2:c0:
38:6e:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:25:31 2025 by rpki-client