Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3AE91F8381211F09FCA76E1DAE4EC9C.roa
File: F3AE91F8381211F09FCA76E1DAE4EC9C.roa (raw, json)
Hash identifier: yzM964F0067zOKq5CPm8jbahgb7cksL9dWkTG5yHhLc=
Subject key identifier: FD:EB:9C:EB:2F:70:E9:82:49:42:40:77:84:F3:8B:99:98:2F:15:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015725
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3AE91F8381211F09FCA76E1DAE4EC9C.roa
Signing time: Fri 23 May 2025 20:17:30 +0000
ROA not before: Fri 23 May 2025 20:17:25 +0000
ROA not after: Wed 17 Jun 2026 20:17:25 +0000
asID: 398478
IP address blocks: 156.245.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87845 (0x15725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 20:17:25 2025 GMT
Not After : Jun 17 20:17:25 2026 GMT
Subject: CN=6830d7da-f527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:df:dc:36:15:ea:a2:c4:e5:e0:c0:68:b2:
7c:7c:28:af:0b:bc:bc:28:bc:ac:e6:8d:bd:4b:d0:
12:80:e0:7e:08:d4:54:7f:cc:72:8d:3e:b0:7b:13:
21:b6:38:c9:02:e0:58:38:82:c8:67:56:f4:f3:59:
e0:3c:64:cd:90:e5:d8:82:43:e7:e0:9f:bb:90:29:
c9:94:1a:2a:38:c6:1c:5f:91:65:01:8c:d2:34:52:
ea:b6:28:c6:88:73:43:1f:2e:71:d1:a3:de:e7:1b:
80:f2:48:05:9e:99:ff:85:87:7a:61:37:44:3d:4a:
08:45:5c:fc:46:39:ba:b4:5f:58:f5:4c:11:a5:6c:
61:2b:e0:b0:7b:27:de:14:6e:d5:c4:8a:ad:e8:33:
48:00:7e:a8:25:30:6b:32:66:79:bf:06:46:58:a4:
0f:8d:17:11:b9:8e:d1:d6:cd:78:83:e8:7f:cb:93:
6a:8a:09:35:fc:50:78:72:8d:00:63:0c:f6:82:d6:
63:4b:79:00:f0:6b:78:7b:d9:53:ed:24:d9:28:2e:
8f:9a:8f:39:f2:0f:dd:ae:04:1d:71:3a:5d:83:63:
46:03:11:aa:5e:a1:d8:c1:b3:c4:35:0c:97:02:a7:
85:21:83:8a:00:3e:ad:c2:52:54:c7:4f:32:82:7b:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:9C:EB:2F:70:E9:82:49:42:40:77:84:F3:8B:99:98:2F:15:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3AE91F8381211F09FCA76E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
15:c3:39:e6:02:bf:5d:90:91:c9:cf:aa:60:6d:66:61:14:78:
d8:15:46:54:87:2b:0d:07:b8:60:e2:f1:e6:dc:9e:de:0b:e6:
e0:e7:56:8a:ae:88:50:cd:39:ff:62:20:3b:73:ba:31:d0:fa:
d3:e6:38:c0:17:32:0f:ba:03:38:2b:00:6d:d5:8f:5e:4f:b7:
22:6e:65:f5:66:bc:32:da:55:01:70:9b:d1:4f:d2:bb:89:59:
d1:f4:74:e0:09:68:3e:87:06:06:94:6f:3b:29:02:22:67:1f:
c5:4b:59:34:5d:1d:f2:b2:48:50:1b:ae:68:c9:f1:f5:93:8f:
f8:a0:d3:1c:ad:35:32:b8:f2:fc:b8:79:81:86:11:2d:2f:40:
fe:33:13:0e:7e:3d:a3:fb:44:1e:34:7a:3c:16:8a:2b:6b:98:
b1:1d:0f:e0:db:16:37:24:50:30:18:f5:91:a3:cb:61:1a:a4:
fe:f1:09:74:d6:58:5b:d8:70:a3:30:63:e2:b8:eb:ee:6b:19:
11:b3:4a:c3:3a:92:f2:71:89:04:52:75:8e:62:31:0d:2f:93:
b6:5a:88:74:75:8b:80:e2:33:c1:f7:07:36:d4:f3:6f:ca:ee:
8a:cf:fb:bc:26:de:86:6c:fc:7d:44:af:82:98:1a:77:dc:54:
8c:c0:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:42:30 2025 by rpki-client