Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DC3A06C485311F091EFC4ACDAE4EC9C.roa
File: 3DC3A06C485311F091EFC4ACDAE4EC9C.roa (raw, json)
Hash identifier: kcjOL5FY4FHe33xJdYULXZfje8Pgq+ggz4oO6igt/QM=
Subject key identifier: 7E:EE:74:06:62:31:4A:8D:1B:63:3C:43:B7:EF:99:28:E4:35:E1:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DC3A06C485311F091EFC4ACDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 12:38:01 +0000
ROA not before: Fri 13 Jun 2025 12:37:53 +0000
ROA not after: Sun 03 Aug 2025 12:37:53 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89032 (0x15bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 12:37:53 2025 GMT
Not After : Aug 3 12:37:53 2025 GMT
Subject: CN=684c1ba9-3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:6e:df:1c:c5:c0:20:f1:33:c7:cc:67:44:
61:ff:24:2e:a4:10:61:fb:54:50:57:2a:a5:1c:8a:
2d:73:6c:58:32:f8:02:de:15:2f:f4:a3:0b:5a:7b:
7f:57:d9:87:d8:0d:a2:96:9d:26:c5:b7:cf:e2:9f:
de:45:5a:51:65:ce:41:2e:cd:dd:20:e7:2c:ce:a0:
c8:69:60:c4:f5:15:e0:46:ae:1f:25:57:c8:9b:46:
fb:95:e2:6d:20:52:83:a2:fa:d1:27:ca:fa:ae:24:
6a:e7:00:7d:5e:97:99:7b:65:19:c1:35:69:9d:c7:
57:2f:44:23:b7:cd:b4:88:26:d8:5c:3b:8c:7d:f8:
7f:5c:00:f5:e4:a4:da:5d:0a:8b:97:49:59:e3:d0:
bb:3e:9c:f9:63:bc:b2:c7:e1:7e:a5:d0:75:2c:8c:
ff:b6:de:00:fa:bd:a6:ba:dc:39:b5:32:b9:ff:b1:
4f:5a:5c:16:b7:13:bc:d8:fd:a9:a0:b9:41:19:a8:
a4:ec:84:5b:71:55:d4:88:eb:9c:d5:49:9e:bd:30:
aa:30:98:35:44:0d:f0:fa:4a:1f:04:cb:1d:be:52:
a4:9b:c4:6f:8d:e5:8d:2b:40:b1:af:94:8e:0f:02:
dd:56:f9:1e:f2:2c:84:f3:86:ed:9e:00:16:c7:15:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:74:06:62:31:4A:8D:1B:63:3C:43:B7:EF:99:28:E4:35:E1:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DC3A06C485311F091EFC4ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:96:7d:86:19:00:bd:98:a5:32:42:3d:c3:07:7c:9b:c1:68:
5a:42:9a:38:87:63:e7:b6:7d:4d:11:ad:9d:1b:a8:74:25:53:
79:c4:d2:0a:38:86:55:1d:29:71:23:b1:36:41:39:e3:0b:f2:
bc:43:5d:65:ac:42:34:c7:57:b3:55:87:32:71:23:da:86:3b:
9f:c3:9d:40:2b:46:48:8a:df:68:c1:80:66:4a:ef:57:d5:b4:
6d:3a:07:38:83:f1:5e:5d:5f:60:88:f5:d7:a6:6b:ff:f3:19:
e5:38:a4:44:ac:61:c6:4d:60:47:0a:3e:0c:83:9f:d5:b7:32:
47:ff:00:ae:f9:e4:78:6e:61:b5:fa:c5:89:ec:d8:44:d8:75:
da:32:e8:fd:9c:ec:de:b5:05:74:24:14:a9:7e:3c:01:89:89:
3a:ae:a2:9c:84:9c:13:27:56:c0:58:11:27:25:2a:e9:00:60:
fd:51:e3:b3:dd:e5:e0:6f:de:32:94:a5:fb:9f:39:e1:47:d3:
c7:65:b0:86:aa:80:32:19:95:c1:5c:d9:55:77:26:52:dd:af:
3a:8c:40:aa:9e:c2:18:fa:72:6a:d6:b2:bd:96:2e:9b:83:17:
61:03:31:37:17:df:20:b6:7c:34:01:e6:b8:8d:62:62:05:4f:
cc:ce:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:44:55 2025 by rpki-client