Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F04BC83E2011F0A71244CEDAE4EC9C.roa
File: 96F04BC83E2011F0A71244CEDAE4EC9C.roa (raw, json)
Hash identifier: Ev91n8kaU0Ya/fY9xahHVmc1thiR8G8NXJIf9C4x+4A=
Subject key identifier: A7:72:08:2C:23:AD:D1:FB:B2:87:5E:F9:85:89:86:D2:2E:9A:F4:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015910
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F04BC83E2011F0A71244CEDAE4EC9C.roa
Signing time: Sat 31 May 2025 13:10:14 +0000
ROA not before: Sat 31 May 2025 13:10:10 +0000
ROA not after: Sun 22 Jun 2025 13:10:10 +0000
asID: 401701
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88336 (0x15910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 13:10:10 2025 GMT
Not After : Jun 22 13:10:10 2025 GMT
Subject: CN=683affb6-5e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:b2:9b:dc:5c:8d:5e:40:25:2f:bc:61:b0:
7f:ee:a0:e6:62:90:2e:23:a6:77:fe:30:a6:ec:e8:
b1:45:e7:6c:0c:6a:cb:a9:73:74:64:96:5b:32:3e:
36:cf:a9:97:32:a1:72:3d:74:06:74:65:35:b9:71:
d6:6e:c3:4a:00:f2:c0:c4:1e:c8:3b:f6:a6:f4:31:
9c:4e:9a:95:87:2f:5f:fe:9d:37:87:9e:c9:0f:f3:
df:d4:8e:92:54:72:38:00:cf:4b:a8:42:1c:34:d9:
dd:55:da:b1:5f:c7:41:c4:6b:9d:cb:0d:7c:ee:b7:
d1:36:27:6d:ea:b7:00:b3:3a:4d:ce:db:81:b0:ed:
69:d7:a8:5c:c8:25:a6:12:0d:3f:0f:3e:7a:3f:f8:
61:db:c2:57:25:c8:01:a3:a8:21:45:f0:72:8a:36:
61:8f:f2:b3:cf:77:c1:8a:7e:f4:3c:f3:79:73:3e:
20:76:d6:2a:62:49:53:65:05:d1:b3:52:75:74:ad:
71:dc:22:2c:2a:77:e4:6c:bc:e8:94:b4:9b:14:84:
bf:56:ff:47:a7:c5:b5:3a:9f:36:cc:de:b5:ef:c3:
0c:c4:53:5a:dd:0b:82:a4:b2:d8:24:58:f6:1f:26:
f7:0b:bb:7a:26:45:c6:33:e5:04:83:ab:5d:be:8e:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:08:2C:23:AD:D1:FB:B2:87:5E:F9:85:89:86:D2:2E:9A:F4:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F04BC83E2011F0A71244CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
af:f6:9e:f4:1b:c3:fa:78:6c:c0:0b:3f:09:5f:46:d9:53:2b:
1c:89:3b:06:35:8d:33:41:1c:63:11:0a:26:0f:bb:a7:73:4c:
a9:b1:a9:36:0b:7c:f4:f1:39:ec:db:42:ca:b9:9d:02:44:db:
44:12:d0:5e:14:da:be:5a:5b:57:25:9f:8f:83:75:0d:f1:b2:
97:f4:75:93:11:b5:01:77:bc:d9:f1:ce:9c:41:6f:78:01:66:
8d:7d:28:10:63:27:96:19:da:b5:e1:ba:27:aa:9f:3b:6a:65:
89:ed:90:62:8c:f0:97:30:ff:36:2c:77:97:a9:6a:e7:8c:7e:
98:01:6a:88:f7:94:f9:a9:65:d7:14:ca:22:a3:1a:bb:0e:ff:
21:2b:15:52:c1:1e:2d:ed:22:98:e8:48:80:9f:d8:60:7c:d1:
1a:bf:30:9d:78:ab:39:72:0a:3a:6c:36:22:ef:ec:f0:af:3c:
2e:36:a3:71:fd:57:cb:9b:7a:ad:9d:72:a5:ea:45:3f:10:48:
15:e9:4f:06:29:f1:fa:bf:cb:bd:d0:a9:a3:35:56:26:d7:0f:
a7:d0:60:ab:1c:8d:ee:a7:7a:e0:87:7b:3e:41:fa:a5:3e:be:
66:d9:05:33:61:ed:45:63:8a:de:3b:6c:4c:48:28:68:96:79:
00:31:6e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:31:14 2025 by rpki-client