Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658F8EC059B611F0A3FEC4D3DAE4EC9C.roa
File: 658F8EC059B611F0A3FEC4D3DAE4EC9C.roa (raw, json)
Hash identifier: V1FW/BNaXDGoq71larMtoUWqtbHQuvHW1xMNB1IHjXA=
Subject key identifier: 36:09:7D:94:44:2D:C3:7C:5E:96:E2:0D:5E:8D:89:91:31:18:2F:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658F8EC059B611F0A3FEC4D3DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 15:40:37 +0000
ROA not before: Sat 05 Jul 2025 15:40:32 +0000
ROA not after: Fri 17 Jul 2026 15:40:32 +0000
asID: 54600
IP address blocks: 156.245.64.0/18 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 23:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90563 (0x161c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 15:40:32 2025 GMT
Not After : Jul 17 15:40:32 2026 GMT
Subject: CN=68694775-aa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:e8:5c:f0:e8:7b:ce:8d:9c:d1:01:01:0c:
30:df:2d:12:91:ee:6b:37:a9:6b:52:b8:90:d8:ff:
ee:61:3a:e7:64:35:41:c5:4c:0b:5a:b9:12:25:f8:
26:28:4d:cb:31:3c:2b:81:33:35:50:13:4b:64:2f:
32:e0:cd:d5:78:ec:5c:68:99:c1:b4:49:af:d0:bc:
f3:67:7a:ce:bb:8c:42:35:18:3d:07:0b:01:02:cd:
63:7d:e3:ba:22:5c:9e:f6:ca:5f:dd:ea:6a:9f:3c:
8f:aa:cc:bf:e8:55:99:d0:b8:d7:4b:36:f8:51:71:
3d:b4:cd:5b:fe:57:f1:1f:cd:94:00:55:9f:c2:53:
51:71:7c:8f:cc:2b:72:4a:24:11:4b:53:bf:3d:09:
5b:f4:79:72:cf:8f:b2:71:ab:8e:cc:62:55:8e:8f:
02:7a:7c:ec:83:e6:86:5d:e5:99:77:3a:0d:24:fd:
70:e2:9c:02:76:fc:86:38:c8:1f:97:e2:5e:4b:72:
23:52:75:8c:17:54:c0:f6:4a:f7:f8:b3:f2:1c:64:
3f:55:91:8c:c5:e4:88:fb:26:5e:81:ac:d6:8e:97:
f1:36:43:c1:13:b8:52:fb:42:47:c3:57:e5:00:ca:
49:75:f4:0f:25:ee:ca:1a:c8:8e:83:05:11:6a:f1:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:7D:94:44:2D:C3:7C:5E:96:E2:0D:5E:8D:89:91:31:18:2F:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658F8EC059B611F0A3FEC4D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
156.252.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:21:d2:39:77:56:f1:7b:33:9f:c0:40:f6:2e:f2:af:76:73:
0d:04:ec:ed:38:92:34:48:11:91:27:58:6a:96:c1:58:d9:99:
c4:d6:83:15:9f:a8:9e:6f:44:cc:3c:56:e0:9c:d6:0c:89:b9:
83:a3:4c:95:e3:84:48:88:4d:cb:cc:3d:d0:11:03:00:16:fb:
af:7b:7a:0b:85:e7:33:80:78:8b:eb:3b:4f:a8:3c:5b:bc:eb:
8e:4c:9f:09:4c:11:46:0a:ad:91:10:a2:1e:5f:0a:b8:ab:b9:
bf:7c:35:b5:34:71:da:4e:2d:ee:ef:01:a2:a2:39:a3:0f:50:
1c:c7:4f:ff:6c:b9:98:a1:d7:1e:64:9e:dd:fc:e2:a2:76:86:
0e:6c:21:b7:a1:38:08:44:60:ea:85:3f:4c:ef:71:dd:56:b2:
21:e8:fa:03:9f:c7:41:17:90:05:cd:da:4f:0b:e5:e0:18:1e:
89:9d:f2:77:d3:8b:07:17:7d:52:11:f1:1f:c7:6c:cf:c0:7c:
b8:3b:d5:e5:44:f4:8d:5a:67:d2:b5:6e:3f:a1:d7:26:c4:f8:
03:77:2d:17:23:fb:67:39:14:36:00:f1:f6:76:14:58:6d:26:
42:8c:ee:1b:7a:bc:a5:cb:f2:1e:3f:f3:e1:8f:9b:b6:3e:54:
88:be:1d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 02:05:12 2025 by rpki-client