Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65FA99462F3F11F08691E18EDAE4EC9C.roa
File: 65FA99462F3F11F08691E18EDAE4EC9C.roa (raw, json)
Hash identifier: aOcNeNudUAvlfY5Iv/kwWdcoypV4WvzWp5/0447qW40=
Subject key identifier: 0C:9F:F1:B7:DB:92:E4:D0:E3:F9:D6:A7:D8:EF:34:8F:E1:97:B9:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0153A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65FA99462F3F11F08691E18EDAE4EC9C.roa
Signing time: Mon 12 May 2025 14:42:59 +0000
ROA not before: Mon 12 May 2025 14:42:54 +0000
ROA not after: Sun 22 Jun 2025 14:42:54 +0000
asID: 141718
IP address blocks: 156.225.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86947 (0x153a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 14:42:54 2025 GMT
Not After : Jun 22 14:42:54 2025 GMT
Subject: CN=682208f3-aeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:40:77:1c:c0:a1:67:51:7b:6b:f2:d5:bf:
84:c3:6c:72:02:80:0f:cd:92:45:ce:58:47:d1:64:
a8:f5:83:ad:b3:ff:dd:63:89:81:fe:a8:23:02:1d:
3c:d5:ee:45:8b:e3:fb:b9:a3:d3:23:67:04:11:72:
25:77:f7:e6:95:a1:59:e8:5f:79:3c:6c:51:8e:67:
f2:ab:a7:7c:75:fc:cb:1b:85:d7:b1:48:1f:0f:c9:
ba:93:12:0d:7a:bc:33:4c:3e:93:95:66:5a:40:75:
95:9d:7d:c9:68:bc:cc:13:36:4e:62:58:45:3f:97:
48:b1:9d:17:ef:78:d1:f1:60:b2:ff:c5:8c:91:19:
bb:78:80:53:92:00:54:cd:c1:47:ad:45:21:ae:db:
4c:98:7b:bd:39:e6:e8:92:5e:bb:63:37:5a:ce:24:
23:cc:16:5c:3a:51:bc:51:6c:ee:0f:e8:84:d1:c9:
ba:bf:65:bb:8a:b1:25:ad:bc:ff:b7:00:37:45:3d:
e6:c5:87:34:22:95:cb:cf:1c:77:7e:8d:cd:4d:3a:
15:bb:e2:83:52:c8:05:91:ad:f0:14:49:7a:62:48:
53:29:67:88:0f:b8:b1:4b:9e:d9:bb:31:97:5c:e2:
d1:40:df:51:8a:10:96:ba:36:f9:7b:d9:64:70:84:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:F1:B7:DB:92:E4:D0:E3:F9:D6:A7:D8:EF:34:8F:E1:97:B9:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65FA99462F3F11F08691E18EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/24
Signature Algorithm: sha256WithRSAEncryption
40:96:46:af:88:fc:87:11:42:91:29:66:c4:9a:05:5c:a1:74:
62:02:86:9d:09:49:fe:aa:dd:7b:f2:00:bc:8e:6f:a5:b8:ce:
d1:13:bc:9c:e6:53:d1:14:d7:42:fe:b0:25:b9:17:03:d7:65:
6c:13:18:b3:b5:21:88:5f:46:97:71:3f:35:12:e3:6e:b3:f1:
17:63:dd:04:c0:f9:f9:7d:8c:6d:99:99:f3:87:c9:75:43:26:
34:91:da:17:1c:3d:ad:6a:e9:99:b9:db:59:33:ee:02:a0:d3:
84:67:cd:ac:45:32:ba:31:fe:18:ea:19:50:ac:ee:13:cf:5b:
9f:c7:d3:7e:75:ac:06:e5:96:99:5c:8e:60:91:ab:da:9a:d4:
18:ad:72:43:c9:82:75:3f:2e:a5:48:cd:8f:f3:15:11:25:4b:
45:db:c3:5e:6f:89:05:f5:b9:75:f2:81:37:9b:3f:81:f1:2c:
02:e3:eb:b3:c9:fb:83:c7:fb:a1:77:37:63:ba:9d:b6:d2:09:
34:93:0c:16:8f:59:7c:26:60:0b:dc:22:22:b8:31:1c:60:4e:
28:72:7a:4d:8d:6a:d9:30:9a:dd:ef:31:36:59:b2:fc:e5:82:
33:d9:5a:81:11:36:28:8c:a6:9e:04:62:4e:55:bb:13:fc:a8:
f7:e5:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:49:56 2025 by rpki-client