Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0404078C565311F09391F4CBDAE4EC9C.roa
File: 0404078C565311F09391F4CBDAE4EC9C.roa (raw, json)
Hash identifier: 98CFEDHLBtVmrzIh7QUKtqUDp6LxLvJM7lx2eWh0hN4=
Subject key identifier: 79:7D:A7:6C:65:FA:6C:87:1A:D1:5E:F5:FD:AD:99:7A:C0:77:BD:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015FA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0404078C565311F09391F4CBDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 08:11:40 +0000
ROA not before: Tue 01 Jul 2025 08:11:35 +0000
ROA not after: Mon 04 Aug 2025 08:11:35 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90019 (0x15fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 08:11:35 2025 GMT
Not After : Aug 4 08:11:35 2025 GMT
Subject: CN=6863983c-88f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:87:16:dd:b8:79:17:45:2f:2d:92:0e:bf:
3d:27:2d:2f:e1:64:56:d7:67:97:21:c3:af:b9:a9:
52:86:4a:60:3e:e7:b6:d8:f5:f9:d2:e2:a0:fb:27:
b1:02:ee:3d:1b:61:f7:48:a5:e2:0b:34:6b:54:4f:
d6:04:fb:7a:11:96:53:5f:0a:04:bb:08:75:f5:60:
7b:14:dd:02:b7:ea:49:c2:0d:76:31:98:d8:e7:6a:
37:db:f5:80:11:27:06:03:3f:15:f3:bf:20:3c:bf:
ac:4d:0f:ed:1e:f3:19:17:e0:50:2d:da:1b:55:71:
f4:5e:35:9e:7a:2d:fa:3e:ca:a1:90:a1:17:69:00:
f0:d7:2c:50:da:82:66:10:44:cb:1b:99:dc:7e:99:
ba:99:5f:d7:00:36:9f:74:16:f7:5c:40:10:10:27:
23:d0:52:fc:e7:f3:6d:2d:b8:2f:e8:98:11:15:76:
83:c5:f1:7b:05:e9:2d:73:b6:15:98:d1:bb:ca:ec:
4b:2c:48:e9:d9:12:c4:ad:37:60:13:dd:b6:61:4c:
b6:2a:84:ba:59:be:47:2f:9f:ae:91:0b:98:ca:f3:
74:3f:75:0b:73:fd:69:bc:de:7b:5c:01:bf:73:1a:
f0:39:33:8f:19:1e:9b:de:55:91:39:ff:b9:fe:60:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:A7:6C:65:FA:6C:87:1A:D1:5E:F5:FD:AD:99:7A:C0:77:BD:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0404078C565311F09391F4CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2e:09:11:35:24:80:b9:ba:ab:55:5c:ec:fc:49:b6:39:2a:ec:
ca:34:99:54:fc:8f:e1:5e:76:03:42:26:05:ce:d9:57:70:9e:
f2:01:89:81:c0:af:10:ab:44:a1:c1:dc:43:33:65:95:3d:72:
8d:62:6a:17:92:5c:36:0c:f7:9e:b5:43:c7:1e:ab:75:03:5b:
f7:14:67:bd:ef:80:7c:0d:d2:8c:d2:38:7b:d9:3b:b8:77:67:
8e:ad:55:f6:a7:81:34:bf:22:06:7a:bf:07:18:dd:fb:c1:e1:
f3:9e:ac:6a:6a:be:36:b4:87:c8:e9:5f:0b:e1:29:fe:ab:e8:
fb:16:f2:06:4a:6a:66:98:a4:50:0d:73:4b:4c:21:60:27:ca:
39:8a:8e:be:50:77:d0:cf:8f:eb:0a:0c:57:6e:60:6e:6b:65:
4e:14:33:06:7a:80:09:38:11:e6:47:1a:fc:77:d8:51:fd:11:
1a:0a:6d:a9:66:96:3a:d8:11:bb:b7:74:4b:47:c4:df:23:aa:
dc:08:2d:18:c0:5a:c4:8f:70:27:db:46:12:c0:41:29:46:99:
88:9a:b2:6d:6c:73:94:83:f6:7a:f6:67:d6:a6:88:87:2c:d4:
71:b4:1a:24:2a:a8:ef:d4:13:b9:ba:c3:be:5a:bd:fb:e8:ec:
68:4e:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:54:04 2025 by rpki-client