Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D0A6088503E11F08E788DBADAE4EC9C.roa
File: 7D0A6088503E11F08E788DBADAE4EC9C.roa (raw, json)
Hash identifier: 5mf6NmxlJGvtzePUQCzessgKV5glsMVJh+XiPPOMEYM=
Subject key identifier: 4C:5D:2C:9C:4F:39:02:B0:7D:8F:6B:AD:9F:91:84:76:63:79:D5:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D0A6088503E11F08E788DBADAE4EC9C.roa
Signing time: Mon 23 Jun 2025 14:29:36 +0000
ROA not before: Mon 23 Jun 2025 14:29:32 +0000
ROA not after: Wed 30 Jul 2025 14:29:32 +0000
asID: 134365
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89601 (0x15e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 14:29:32 2025 GMT
Not After : Jul 30 14:29:32 2025 GMT
Subject: CN=685964d0-c1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:45:8d:1c:03:57:be:61:80:cc:4b:ba:6d:
b5:15:c2:9d:29:70:52:2f:ce:f6:ee:d0:3a:3d:00:
de:2c:f1:89:08:73:f9:fa:7c:1c:0b:88:9f:f8:61:
80:aa:1f:9a:fa:82:17:06:6c:cf:46:17:11:aa:59:
15:07:ff:70:5e:fa:69:d5:f3:95:bb:b5:58:05:30:
67:03:a2:d0:02:2b:55:8b:43:e6:09:54:a8:1f:95:
4c:92:3d:4f:fa:10:a5:71:ba:0b:c2:13:02:c4:54:
4c:84:ea:fe:6c:92:67:c5:21:53:e8:e9:9f:fb:67:
47:c7:0c:18:5c:cc:b7:12:32:25:a3:ba:b9:ff:c9:
2b:58:6a:73:e0:b5:f0:b3:c8:e1:98:a4:37:96:2a:
22:de:a6:4d:d9:04:e9:7c:6d:bf:b3:50:0d:4b:83:
1e:4f:56:60:0a:a4:be:da:fe:82:9e:95:65:d0:96:
7a:4a:d9:8b:4e:85:68:e2:d5:48:07:5b:e5:32:42:
8b:b6:02:13:c1:8f:5b:98:97:7c:28:62:81:6c:8f:
60:c3:93:93:0c:16:50:a4:5c:bf:57:b1:f4:68:64:
ba:4a:f3:41:92:b2:dd:cb:3c:7d:a1:a6:9d:0d:17:
59:a7:57:f7:70:fd:86:73:c9:a5:32:40:b4:70:e7:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5D:2C:9C:4F:39:02:B0:7D:8F:6B:AD:9F:91:84:76:63:79:D5:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D0A6088503E11F08E788DBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
14:32:8f:f7:75:42:9c:20:41:d5:e7:11:02:c3:50:a7:b0:4c:
b8:7a:26:c3:da:8c:f6:d1:f5:e7:41:15:60:c2:37:75:84:3e:
f6:75:04:ea:28:11:c1:4a:51:05:77:86:f7:ef:ae:38:93:b3:
00:e8:52:d6:12:db:cc:71:e3:70:24:01:87:61:87:5d:c0:7b:
79:b1:e1:c3:36:2b:81:a8:5b:36:0a:52:5a:28:fc:ea:e4:3f:
ab:04:5c:dc:f2:c6:5b:bc:ba:c5:fa:1c:1a:a1:46:16:fe:aa:
bb:d2:1e:d7:2d:0c:34:b6:ca:c4:32:14:d9:92:12:e1:19:52:
70:bc:03:2b:5d:a0:f4:4f:08:94:12:93:2f:cb:f2:58:84:4e:
1c:41:ec:de:25:87:f6:ac:03:a1:73:52:a1:b1:97:ee:29:0b:
1e:b9:bb:16:4f:a3:0e:48:6d:c6:b2:f0:6b:1f:c0:1c:d1:77:
47:11:1b:91:23:18:7b:6d:cd:aa:1f:c3:33:eb:cb:2b:fe:b0:
25:eb:0b:32:35:6a:aa:b3:37:11:51:14:76:b1:16:49:f4:e6:
f1:c0:ae:5e:be:74:a2:b7:c0:d2:07:1e:a0:0f:60:5f:95:51:
1e:59:d5:e3:2a:a0:28:a1:94:3d:a5:e0:4f:15:53:47:83:4c:
3b:f4:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:46:17 2025 by rpki-client