Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/401E8D46235911F0AEAAF9EFDAE4EC9C.roa
File: 401E8D46235911F0AEAAF9EFDAE4EC9C.roa (raw, json)
Hash identifier: SzoaQnXDB19UG46eSL69MxeJswf4c52nT3U/uA84OWs=
Subject key identifier: 37:03:F2:0B:68:04:EE:66:FB:FE:92:BE:64:14:83:90:7C:12:20:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014ECC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/401E8D46235911F0AEAAF9EFDAE4EC9C.roa
Signing time: Sun 27 Apr 2025 11:17:49 +0000
ROA not before: Sun 27 Apr 2025 11:17:44 +0000
ROA not after: Wed 27 May 2026 11:17:44 +0000
asID: 984
IP address blocks: 156.243.36.0/24 maxlen: 24
156.243.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85708 (0x14ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 27 11:17:44 2025 GMT
Not After : May 27 11:17:44 2026 GMT
Subject: CN=680e125d-2044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:88:9b:72:97:01:b7:70:0b:4c:f0:39:6c:
f6:7a:50:38:59:5a:68:c8:ed:68:63:e6:fc:7a:40:
46:4c:4c:42:55:ca:0d:05:42:97:7b:68:35:71:8e:
75:91:69:47:33:26:b5:53:07:ba:76:0c:46:2b:43:
97:fd:a8:3e:e6:22:4d:37:60:17:37:bd:17:c5:ba:
1f:25:1c:d8:11:c3:2e:99:be:6d:87:5f:77:66:68:
36:79:b9:7c:ad:ef:89:58:3e:d2:c6:ed:5d:8a:4e:
22:25:9a:b0:28:30:4f:76:12:0e:4b:2c:d1:61:66:
6c:4f:8f:27:23:54:27:72:8d:4f:66:71:27:94:6f:
ad:34:bd:e5:0b:55:bb:4d:41:06:d0:f7:77:e5:52:
40:e1:2d:10:72:ea:b1:29:17:da:d3:ed:81:4f:f3:
c7:8d:a7:f7:a3:84:68:d3:67:3c:21:9f:31:fd:64:
7a:02:f8:fb:b5:a7:a2:de:76:c6:11:6a:e5:20:1b:
d1:b3:56:1d:fe:bd:1b:09:92:45:94:dc:de:53:f1:
e6:b0:00:24:0d:25:9f:92:51:c0:97:84:0f:d9:e7:
d7:4d:b6:4d:65:15:b7:6f:75:ae:1b:e9:a6:db:f0:
13:96:31:68:d5:d1:1e:ee:2d:be:b8:82:5c:64:a2:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:F2:0B:68:04:EE:66:FB:FE:92:BE:64:14:83:90:7C:12:20:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/401E8D46235911F0AEAAF9EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.36.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:b2:cd:6e:44:94:b0:ed:f7:dc:80:e5:03:2b:b1:53:84:1e:
27:17:aa:fc:a6:72:a7:d7:9f:64:68:55:22:04:d9:7f:41:1b:
c8:ba:f2:cc:22:30:36:9d:a7:d7:8d:dc:d5:48:5a:9e:b2:fc:
c6:fd:a6:a0:1e:eb:13:67:6b:63:42:c6:28:97:49:67:aa:29:
e5:44:04:53:5a:fa:73:ff:16:1f:72:9e:10:45:0c:b1:d7:ba:
4e:a5:bf:02:51:20:dc:11:ce:75:7b:e4:21:3e:80:f4:2f:da:
9c:3d:7f:c9:5e:f4:32:2a:99:0a:37:68:3d:da:50:f4:ec:cf:
ce:2c:dd:5e:1c:21:98:38:25:fa:0b:6a:4a:ba:a6:05:a0:c3:
75:de:ab:ec:50:11:68:b7:d2:19:2a:3f:56:87:c1:cf:68:c1:
ed:00:a7:48:f3:02:62:db:f1:22:a4:c9:22:a4:a1:6c:a4:80:
c4:76:02:8c:9a:e9:6a:fc:83:8e:2a:82:09:67:04:61:25:c9:
61:eb:3e:f7:4f:f5:1d:3b:fe:7c:b7:ba:74:f3:2c:68:66:d4:
20:10:ab:4c:8e:09:71:d1:c4:d4:16:8f:13:16:c0:94:4e:a6:
d9:c4:1b:1e:52:fb:b3:67:d8:cf:ef:24:67:5a:cb:d7:20:3e:
55:80:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:46:47 2025 by rpki-client