Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D021D9A5A6711F0809D88D3DAE4EC9C.roa
File: 3D021D9A5A6711F0809D88D3DAE4EC9C.roa (raw, json)
Hash identifier: zru0Oep9x661BgnW/9+r02X9KFqMSLu9zrirc9gYpcE=
Subject key identifier: 1F:3B:3B:A8:6B:C0:CF:CA:1B:73:DB:3C:19:BC:A8:CF:AC:37:A2:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D021D9A5A6711F0809D88D3DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 12:46:30 +0000
ROA not before: Sun 06 Jul 2025 12:46:26 +0000
ROA not after: Tue 29 Jul 2025 12:46:26 +0000
asID: 20473
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90618 (0x161fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:46:26 2025 GMT
Not After : Jul 29 12:46:26 2025 GMT
Subject: CN=686a7026-88e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:2b:5e:98:ff:c4:39:10:1c:a2:c6:c0:3e:
fa:4e:f7:6b:09:8b:5b:d3:09:9e:7b:21:de:dc:65:
59:0a:2a:58:96:b2:94:9c:2e:54:a9:45:6a:fd:2c:
19:45:11:c8:db:02:48:6e:f4:0d:31:65:86:c0:bb:
f5:6b:37:db:e5:f2:ab:18:89:da:18:59:c1:ee:62:
86:24:bd:67:af:8f:7c:7b:85:02:04:55:a9:2d:dd:
c9:18:6b:8d:81:71:fa:7d:b4:e3:de:f5:bb:d8:c0:
7b:3d:2a:48:ad:a4:64:2f:b9:c9:0f:e5:d6:2c:6f:
7f:21:c0:e6:f2:f9:8d:5c:49:8c:9c:d0:37:47:dc:
11:df:2b:1f:62:a9:c0:78:79:23:79:cb:f2:55:73:
5b:94:d8:b0:5f:bc:73:a8:0f:cc:97:c5:92:0d:1c:
e1:4b:e9:76:06:e8:84:7a:a8:e5:86:c7:93:ec:8a:
1b:17:71:d9:b6:9a:e3:cd:98:90:1b:20:31:94:ae:
ee:c8:5e:6d:bb:6f:ed:87:60:bc:a8:65:94:de:97:
bd:e7:78:0d:b9:04:a0:84:a0:06:9a:15:ea:8a:2b:
8d:c6:2c:b3:17:dc:dd:40:ba:b7:05:8e:d7:59:d7:
31:0d:4c:40:d2:f3:20:a7:0b:1e:82:7b:a2:5b:e1:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:3B:A8:6B:C0:CF:CA:1B:73:DB:3C:19:BC:A8:CF:AC:37:A2:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D021D9A5A6711F0809D88D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
79:03:ad:5b:0c:c1:05:1d:91:ea:50:8b:63:af:ac:11:02:d0:
7d:99:3d:87:eb:b1:28:92:ab:55:ac:b8:12:d8:f5:40:b6:e1:
9c:71:21:84:a4:42:72:bc:b3:2a:c3:d1:8a:b0:6f:e3:75:06:
62:e3:00:3c:6c:19:79:55:f8:35:52:d8:24:0c:60:a9:90:a9:
79:b1:4d:8a:ae:56:ad:ad:63:a9:ce:55:79:11:08:35:b5:c2:
ee:1a:7a:b3:94:de:bc:5c:82:38:b1:9e:a6:7d:8e:a2:37:57:
0c:39:2c:dd:2d:df:7d:20:21:c9:f6:17:3b:d0:56:1e:05:54:
f4:48:ea:88:b5:b0:e9:6e:0e:7d:aa:a6:45:75:31:12:f8:97:
26:d8:45:82:d1:7f:32:52:ad:3b:6c:af:f2:5f:4e:1b:b5:e5:
48:76:75:3f:3f:0d:07:b7:e4:be:5b:e8:fe:61:15:cc:ae:f3:
8b:3a:31:4b:37:11:f7:03:74:05:2e:6f:52:41:cb:44:46:e4:
a2:c6:3b:22:31:99:a5:d4:22:48:61:31:d6:42:10:5f:da:b1:
d4:3f:05:c4:c6:58:70:bb:31:50:9a:f9:32:34:bd:0e:bb:63:
71:75:ab:af:e6:4e:a7:fd:e5:d9:80:dd:cb:77:45:98:02:4e:
a0:35:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:32:07 2025 by rpki-client