Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9746AC79D411F0B78A13EFDAE4EC9C.roa
File: 3A9746AC79D411F0B78A13EFDAE4EC9C.roa (raw, json)
Hash identifier: OCqlsHsFbUVPIcI4r4WkIoG00l9rG5Mips9tWbr9Qac=
Subject key identifier: DA:76:CA:46:A7:0A:DD:2D:D6:D7:B8:AB:97:77:3E:A7:28:33:BC:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9746AC79D411F0B78A13EFDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 12:34:47 +0000
ROA not before: Fri 15 Aug 2025 12:34:42 +0000
ROA not after: Sun 05 Oct 2025 12:34:42 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93008 (0x16b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 12:34:42 2025 GMT
Not After : Oct 5 12:34:42 2025 GMT
Subject: CN=689f2967-ad13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:19:a4:74:6a:1f:08:9e:0f:76:bb:49:6b:
34:14:33:1d:9c:0e:ec:00:55:53:46:09:15:ba:ff:
6b:f6:a3:ef:dc:e5:12:0c:1a:15:01:92:68:8f:8d:
72:83:db:91:11:7f:8f:d4:70:d1:c6:ae:2c:e2:1b:
82:cb:57:15:bf:8f:4a:f6:7c:55:be:35:a1:68:96:
40:b4:46:54:b5:c3:ec:6e:71:21:e8:98:d0:7e:d5:
62:24:9b:2d:66:5b:ec:54:c5:59:aa:29:3e:f0:57:
17:2d:48:ef:cc:60:97:05:a4:f3:8d:f6:94:a9:a7:
9f:7a:9f:d3:2a:ea:f0:f3:03:78:32:1d:2a:47:26:
53:a3:a9:1e:c7:9e:92:44:bf:91:96:58:75:9d:83:
70:12:f4:16:9d:c9:ee:c2:a2:3d:c4:50:db:07:1d:
ad:26:b9:69:54:73:6f:29:43:a7:33:5b:d0:81:12:
2d:08:b4:6a:b2:a5:c9:89:cc:45:ce:d8:00:bc:85:
48:d8:42:34:15:1c:f4:ff:07:4b:02:68:0c:3b:7c:
b0:fc:fa:8f:f4:1c:7f:57:66:3f:67:04:88:53:fe:
be:f5:c3:3a:4c:2e:90:89:f8:51:5c:f8:d9:d1:dc:
6e:39:fb:4d:e5:db:d3:fa:ab:73:03:f4:3d:51:0a:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:CA:46:A7:0A:DD:2D:D6:D7:B8:AB:97:77:3E:A7:28:33:BC:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9746AC79D411F0B78A13EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
63:be:cc:0f:46:c6:b4:7e:df:70:eb:a4:5b:37:ef:5f:0b:9b:
b7:87:9f:81:27:f7:53:01:b3:fc:57:fe:61:2b:35:91:e5:b5:
f6:3d:a1:46:11:f7:c5:54:d0:d9:04:be:fd:84:90:f8:61:18:
ac:d7:58:cc:cf:7b:8d:c1:1b:75:87:25:98:7a:49:35:25:87:
c8:62:f7:53:17:31:69:d7:e3:3b:2a:b5:88:5d:42:16:d2:51:
70:34:af:b2:23:48:25:56:de:a2:7f:db:9a:53:7f:16:bf:05:
41:f3:83:45:0c:44:ba:f0:77:00:3a:7f:79:72:ef:7b:39:4c:
9f:31:8d:63:c1:22:21:70:8d:15:32:b4:24:f1:e9:b9:0b:91:
aa:f2:1a:51:a1:48:46:99:5d:ef:2d:e1:d1:ad:55:86:85:e2:
07:b5:7b:2f:6d:07:3d:ad:94:91:84:38:c8:83:e5:4e:b9:77:
5f:cf:d4:f7:df:d7:f1:d9:bb:b6:34:9a:b9:fd:db:59:e9:4c:
9d:f3:de:f2:8d:1d:e6:b0:5d:28:b2:c3:cb:13:94:e5:17:1b:
1b:ed:4e:e7:7c:51:5e:8d:fe:78:0b:81:07:db:35:41:b3:4c:
aa:91:07:fe:fe:7f:29:5b:65:dc:bc:65:3f:d2:67:ac:27:6b:
b1:03:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:05 2025 by rpki-client