Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/911D6C3850C911F0841897CADAE4EC9C.roa
File: 911D6C3850C911F0841897CADAE4EC9C.roa (raw, json)
Hash identifier: Y0sX53euZXMvul8nNcmZWozPPLaqBsd7N8WulkA0abM=
Subject key identifier: 2E:C2:C8:0E:7E:E7:31:1E:C2:2A:47:AE:0C:17:F8:E4:A3:8E:B4:C2
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 057B
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/911D6C3850C911F0841897CADAE4EC9C.roa
Signing time: Tue 24 Jun 2025 07:05:11 +0000
ROA not before: Tue 24 Jun 2025 07:05:05 +0000
ROA not after: Sat 20 Jun 2026 07:05:05 +0000
asID: 329007
IP address blocks: 45.221.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 24 07:05:05 2025 GMT
Not After : Jun 20 07:05:05 2026 GMT
Subject: CN=685a4e26-ea43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:b8:be:7b:b2:85:54:37:77:bf:a7:c7:df:
6e:24:fa:de:0d:37:5c:2f:b6:2f:57:14:dd:a1:c0:
9c:1d:8c:1d:2d:57:65:31:38:c9:f0:54:72:ef:f1:
43:cc:dc:4e:56:fa:b5:12:ea:e6:60:ca:c0:5e:a2:
42:af:99:44:c4:7e:af:d4:7c:d7:cf:aa:8c:ba:4a:
9b:e2:aa:e8:67:90:28:35:b3:42:0b:eb:d5:c2:2f:
a6:66:98:91:30:37:ee:6e:eb:e1:b9:da:50:bb:89:
f4:55:ec:5a:e7:6c:82:04:85:0b:a9:e0:27:9d:97:
ea:28:ce:dc:f3:56:f2:77:95:f5:1b:d5:77:6a:57:
d2:75:3c:26:8e:f2:f1:fa:c7:91:37:50:eb:74:ad:
e2:d4:92:cc:c5:94:92:42:ed:1e:df:ef:8a:f1:30:
a0:e7:fa:19:53:51:6c:e5:bb:3f:71:40:cf:7f:c2:
e3:61:0e:e4:08:39:ad:2f:b0:9f:50:b8:60:26:c3:
e0:68:2b:ff:85:8a:87:43:db:6f:e7:cd:c1:56:18:
7b:e7:5c:2d:d0:7f:30:4e:f4:46:ba:d1:4b:dc:f5:
a4:3b:aa:95:41:40:d6:56:93:19:8b:ed:e7:ca:7f:
cf:36:b6:61:69:29:60:65:43:b5:cd:ff:15:51:8b:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:C8:0E:7E:E7:31:1E:C2:2A:47:AE:0C:17:F8:E4:A3:8E:B4:C2
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/911D6C3850C911F0841897CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.71.0/24
Signature Algorithm: sha256WithRSAEncryption
98:75:3d:c6:75:3c:71:1b:6e:6b:42:52:22:f9:d0:b4:64:93:
d3:8c:12:8f:46:4d:f8:2d:4d:bc:e8:47:fd:26:19:bc:a8:7f:
4e:be:1f:f1:46:23:14:a0:ed:d0:60:1b:00:3a:12:19:bb:39:
0d:4a:5a:ca:98:22:3b:7c:59:0d:9a:fa:34:49:0e:df:e8:40:
92:9d:e9:49:0b:ce:9c:86:36:14:85:9d:b7:e4:d1:21:d8:20:
37:57:b4:1f:69:2e:75:48:07:9a:7a:7a:44:04:0d:29:b6:b9:
be:8c:3f:91:ff:e2:2d:52:c3:31:5d:28:b9:62:2d:9d:81:28:
17:26:21:e1:c6:9d:19:4c:56:d3:0a:5c:99:b6:10:e4:e0:4d:
ce:8f:b9:fc:33:f2:75:f0:94:fb:47:9b:72:bc:3c:a2:5f:7b:
68:99:92:5a:d5:8d:f6:77:a9:ff:34:f6:e3:78:c2:5a:68:80:
60:2b:5a:37:24:a7:69:08:a5:3e:0a:b9:2a:38:de:f5:0e:4d:
d0:d0:b9:bf:90:0f:83:e9:82:45:a0:58:ac:6d:8e:76:d0:12:
f8:43:a4:a4:3d:35:59:cf:c6:73:39:c4:5f:5e:fa:6a:c4:b8:
b3:db:33:eb:c1:61:d3:df:2a:71:43:b6:46:e8:c4:c9:04:fe:
14:b7:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:13:47 2025 by rpki-client