Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FCDACE904C3F11F0B9705EC4DAE4EC9C.roa
File: FCDACE904C3F11F0B9705EC4DAE4EC9C.roa (raw, json)
Hash identifier: xSOvpA/qT6CliZXnDYCK9w574VRSG6VJk7HtghtjZes=
Subject key identifier: 5D:9C:37:78:FC:7B:69:91:4B:DA:CC:CC:A0:E2:72:F0:E7:4A:CA:D6
Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial: 056C
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FCDACE904C3F11F0B9705EC4DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 12:30:16 +0000
ROA not before: Wed 18 Jun 2025 12:30:11 +0000
ROA not after: Tue 16 Jun 2026 12:30:11 +0000
asID: 29802
IP address blocks: 45.221.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Validity
Not Before: Jun 18 12:30:11 2025 GMT
Not After : Jun 16 12:30:11 2026 GMT
Subject: CN=6852b158-1f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:0f:e0:4b:ce:11:81:eb:d3:49:6a:af:58:
3e:be:83:70:9a:42:d7:0e:23:4f:e2:66:9b:bc:00:
34:2e:61:04:85:5b:ba:59:cf:7c:2b:89:cb:a0:03:
6c:1e:22:ad:12:20:4b:24:c9:25:e6:4d:ec:4d:70:
55:c2:9e:40:7f:22:82:41:a9:f1:ea:91:fb:33:05:
e6:27:5d:eb:8d:19:3d:b5:93:e7:26:a1:08:c8:4f:
2d:33:54:ec:15:8c:5e:28:7a:af:62:75:da:5d:5a:
ed:aa:81:88:07:b5:ad:4f:c9:85:71:1b:93:bb:74:
5f:95:fd:8a:37:68:3c:3e:7f:b7:93:0c:f4:a8:90:
4f:67:4a:82:ce:be:c8:f8:e5:ac:40:48:73:7d:55:
fa:ed:0a:ca:17:5c:84:44:95:3b:ad:d9:a0:51:48:
e4:c0:27:4a:65:bd:29:7d:46:43:79:12:cc:75:55:
11:8e:fb:cc:d5:d5:0b:00:be:a9:03:d9:64:c7:71:
ad:46:e1:4c:8f:20:74:6a:61:13:63:2f:0d:2f:de:
82:50:17:f7:65:87:32:52:7c:5e:94:47:3b:78:74:
ea:1a:bd:cc:9f:17:9b:32:da:ad:f4:0d:45:39:46:
b1:7b:3a:0f:dd:d4:62:df:d4:d0:b4:d5:9d:f6:d1:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:37:78:FC:7B:69:91:4B:DA:CC:CC:A0:E2:72:F0:E7:4A:CA:D6
X509v3 Authority Key Identifier:
keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FCDACE904C3F11F0B9705EC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:5f:1c:35:6f:eb:99:7a:7b:57:e4:e7:a3:e3:6d:ef:fb:ba:
70:f2:f2:29:24:df:0a:6e:ce:99:fd:09:23:b7:25:8b:7f:9c:
9f:b3:65:dc:9b:44:e2:24:97:62:1a:c8:67:c2:19:77:81:d4:
aa:8b:1a:ff:95:8f:5c:37:b5:bc:41:d8:87:75:7a:23:e2:b7:
4f:41:44:78:40:2a:94:78:33:b2:39:1a:5a:13:fe:b1:74:2e:
b2:92:d9:22:df:fd:cd:72:c5:4b:e5:e0:d3:52:d8:8e:74:25:
d4:6d:4b:12:9a:16:86:dd:00:40:46:35:cb:a2:70:9c:39:86:
db:ac:55:be:49:6c:cd:a0:73:89:64:5c:1f:30:18:03:08:15:
d4:ff:11:05:95:49:de:be:ef:fe:a0:b7:5b:10:db:91:76:36:
86:89:02:e1:dd:16:ff:62:12:0e:e4:54:97:d8:13:10:eb:c1:
47:26:81:a8:e8:8a:f7:ee:ae:87:cb:06:f1:04:cb:ce:31:ab:
de:ed:1f:aa:c3:5b:94:74:6d:bd:aa:ab:10:58:59:c6:e3:fa:
47:00:5b:8f:6a:40:bf:d6:99:74:fc:cb:5f:4e:36:a2:eb:9b:
42:eb:73:de:f5:43:fe:83:b5:8b:4e:64:ca:f3:73:30:fa:8e:
bd:f8:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:28:52 2025 by rpki-client