Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13EA72822FD711F0A9DF3E8BDAE4EC9C.roa
File: 13EA72822FD711F0A9DF3E8BDAE4EC9C.roa (raw, json)
Hash identifier: v6pDrWsKpgGHJOaF+bu55DacRO7T+8kdSLiH2UL4LKQ=
Subject key identifier: 9C:45:7A:99:09:58:66:DC:02:91:55:BF:DE:AC:04:D2:1E:CD:AD:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0153D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13EA72822FD711F0A9DF3E8BDAE4EC9C.roa
Signing time: Tue 13 May 2025 08:48:45 +0000
ROA not before: Tue 13 May 2025 08:48:40 +0000
ROA not after: Wed 13 May 2026 08:48:40 +0000
asID: 41095
IP address blocks: 156.233.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87000 (0x153d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 08:48:40 2025 GMT
Not After : May 13 08:48:40 2026 GMT
Subject: CN=6823076d-25a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:c7:13:ff:14:d8:a0:7a:d3:2b:bb:fb:63:
58:31:14:29:8a:da:fb:b7:b3:5d:20:1e:95:ce:74:
ec:a3:db:dc:4f:36:34:76:c7:0f:c3:5d:1d:a8:3d:
37:df:4f:c5:0d:fb:8c:c4:44:27:f0:90:25:5b:7b:
e7:4a:0d:8d:d4:f5:e9:bd:2f:a1:b9:73:77:f8:f9:
92:d1:74:d7:39:ba:21:f3:da:2a:53:d2:64:d3:7e:
aa:0c:2b:2c:ae:0b:c4:9f:de:35:c3:45:10:51:16:
82:1f:24:fc:50:43:b4:20:8c:6c:59:f9:b3:c6:3c:
e5:30:76:2d:2e:2f:e6:f0:9b:8f:f8:45:eb:b4:c4:
2f:73:aa:8e:0d:d5:8a:4a:4d:4a:09:97:3c:5f:94:
d4:fe:9b:64:1a:70:89:9b:1d:b4:65:9b:a2:9c:ae:
be:57:5f:cb:47:d1:6d:7a:8f:6e:a0:93:63:3e:de:
11:74:bd:3d:50:a8:02:53:b8:0e:71:fc:e4:e4:62:
07:cf:cd:61:83:3b:99:b3:72:e5:6f:63:a8:92:01:
43:ca:33:21:51:57:71:b4:2f:ed:5e:3e:f5:21:ee:
6c:04:92:4d:e7:2b:d6:8f:c8:d9:9f:68:a0:c2:b9:
86:ba:72:33:7c:c2:b1:88:6c:f2:66:2a:a1:aa:e5:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:7A:99:09:58:66:DC:02:91:55:BF:DE:AC:04:D2:1E:CD:AD:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13EA72822FD711F0A9DF3E8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.110.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:6d:0a:fd:dc:01:02:63:d6:08:7f:43:4b:cc:e8:4b:b3:84:
2c:40:2d:cb:d9:3e:32:04:4e:2f:3a:0c:89:98:61:bc:f6:59:
4b:98:72:38:7f:15:ca:5f:66:41:37:76:fc:3e:cc:c7:7f:a7:
44:04:08:32:eb:67:82:a4:98:d6:8b:77:66:b9:8a:f5:2b:da:
93:90:bd:9c:06:ce:9f:6e:f8:7c:b0:3c:a1:ba:ed:40:da:28:
be:be:9a:77:ab:c5:6e:b5:8b:ca:36:f1:35:06:80:9b:77:7f:
26:79:f6:0b:7d:c7:ef:2f:2b:24:75:30:11:e9:e9:4e:ef:f1:
d1:be:68:f0:7a:94:ed:54:42:15:da:5a:51:51:be:65:8d:de:
4a:4c:d9:02:d7:40:d5:f5:0a:9a:75:7c:f3:5c:69:51:d5:c4:
d5:69:89:5f:d3:f4:35:1b:e5:a0:18:44:1e:b4:34:a1:6b:92:
26:25:f0:f6:94:63:d3:62:23:22:2f:db:dd:d1:42:b0:22:57:
a8:fd:39:2f:e1:aa:72:f3:40:08:d0:c0:02:5f:c6:bd:77:06:
7e:4a:b4:23:48:5f:ec:b8:23:dd:00:74:f8:6a:8f:c1:d9:79:
90:a1:2b:2c:7a:b3:ab:4e:a5:c3:02:56:71:e5:84:d3:40:98:
04:bf:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 02:05:43 2025 by rpki-client