Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F88E45C580A11F0806155EEDAE4EC9C.roa
File: 0F88E45C580A11F0806155EEDAE4EC9C.roa (raw, json)
Hash identifier: 8aT5i4QKZPnOPjjcieKHfjErj8BWvAGEI8lUWQ0q8S8=
Subject key identifier: 6D:C7:7E:F8:37:94:A1:DA:34:62:5B:37:7C:01:10:39:67:61:24:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01607C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F88E45C580A11F0806155EEDAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:34:29 +0000
ROA not before: Thu 03 Jul 2025 12:34:23 +0000
ROA not after: Sun 03 Aug 2025 12:34:23 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90236 (0x1607c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:34:23 2025 GMT
Not After : Aug 3 12:34:23 2025 GMT
Subject: CN=686678d4-986d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:87:24:13:a9:88:7c:96:8d:e1:fa:30:51:f7:
13:b7:b0:a8:f7:0d:c3:0c:b4:99:47:36:e7:a5:b9:
1c:c7:79:b7:cc:d4:08:5e:64:92:de:15:0c:13:c5:
b6:cc:a2:a2:92:b6:21:15:b6:fa:b4:5e:3f:d9:d3:
84:a5:63:39:61:2b:b5:0e:33:54:c7:b2:7a:a7:ee:
7d:5a:68:7b:a6:3e:8f:2c:38:3d:2b:1d:20:3c:d5:
ef:7e:74:bd:92:8a:38:73:51:dd:5d:6f:5b:c3:ca:
b8:d7:dd:e8:ab:d3:dc:3b:ca:57:92:6c:cd:98:54:
76:7d:1e:01:04:2f:8e:82:24:60:44:12:35:31:f5:
ee:0b:6f:72:b6:ad:89:84:70:bd:ac:81:f4:85:32:
db:95:d3:f9:40:c8:21:1d:46:8d:c2:18:78:c6:26:
bc:31:3b:19:99:e6:88:a5:5a:ae:f8:d8:9e:3c:f4:
9c:20:c5:80:9b:bc:d8:5d:3b:f5:90:79:90:ba:cb:
b3:80:7f:f9:11:69:91:c9:f5:e7:17:97:05:cf:38:
40:79:11:a9:63:43:81:56:24:26:0e:32:15:b0:ec:
b9:30:db:eb:dd:55:9c:ad:41:33:53:c6:0c:89:8f:
d0:a2:4c:64:70:c1:4b:d8:0d:e0:88:f2:18:fb:15:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:7E:F8:37:94:A1:DA:34:62:5B:37:7C:01:10:39:67:61:24:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F88E45C580A11F0806155EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:58:a8:1a:e9:be:fb:ef:43:47:18:15:6d:60:15:6f:cd:d2:
29:48:82:ae:37:7d:1a:83:4f:cd:34:84:de:80:af:ed:bb:ae:
b2:c9:ac:3d:e5:01:8b:2e:b2:6a:60:b1:cc:b4:3a:2e:4e:f0:
09:d4:75:e1:5f:e8:81:17:b6:60:87:40:f7:ac:10:e8:17:a5:
38:7d:f6:54:6c:49:9b:7d:28:4a:cf:01:35:c1:42:ff:ee:29:
01:c0:44:4a:40:8b:f8:84:da:01:61:9a:a6:1e:a2:27:53:2b:
dc:cf:4a:ae:32:ad:85:93:04:58:84:1f:b2:96:6b:65:09:84:
b8:36:c7:90:93:f8:2e:03:b1:d0:ba:a7:20:68:53:f0:3a:da:
63:ce:7d:53:c2:93:b7:14:9e:38:89:66:7c:10:33:fa:1e:d2:
60:08:3f:d4:90:2d:a8:79:6c:b0:c7:32:06:27:1c:e0:49:61:
df:41:0d:c7:1a:86:9c:bc:8a:37:e2:85:03:24:3e:be:1b:1a:
ad:a6:e2:3e:93:79:89:ff:de:cc:9b:26:41:54:1c:16:8d:86:
b7:fc:c8:52:25:49:1d:d6:99:52:38:77:5a:39:15:f1:8d:70:
af:da:06:04:ea:5b:d6:df:0f:07:c4:38:03:29:6d:54:82:6e:
f8:35:e4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:44:20 2025 by rpki-client