Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF76386483411F0A66434E7DAE4EC9C.roa
File: 7DF76386483411F0A66434E7DAE4EC9C.roa (raw, json)
Hash identifier: 8ZFGG3TdELRoHyTC6VYrPkcqlsZgzvI38RmnewNDI1U=
Subject key identifier: E8:0B:0D:A9:A2:22:3F:9C:32:1A:A9:37:24:FC:56:BE:2B:D2:39:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF76386483411F0A66434E7DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:57:54 +0000
ROA not before: Fri 13 Jun 2025 08:57:48 +0000
ROA not after: Sat 20 Dec 2025 08:57:48 +0000
asID: 138678
IP address blocks: 156.243.1.0/24 maxlen: 24
156.249.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89000 (0x15ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 08:57:48 2025 GMT
Not After : Dec 20 08:57:48 2025 GMT
Subject: CN=684be812-85ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:36:fd:5d:8c:45:5e:3e:cb:bf:4c:a2:2b:
ea:ba:11:2f:b8:2f:e0:65:0a:ce:21:91:6d:2c:4b:
ca:36:38:09:70:bc:12:07:59:14:fe:0f:63:09:71:
33:01:e1:b3:3d:45:70:95:40:ed:41:f3:33:f0:38:
2c:c3:7d:77:90:d5:91:1d:df:db:48:88:81:07:fb:
de:66:1f:e8:43:f5:31:16:16:28:3c:c9:62:35:58:
9a:8a:f1:60:82:c3:fa:1a:01:d6:75:2a:e2:5d:20:
cd:7d:8d:69:c8:36:d0:33:59:41:91:36:f5:2c:9b:
2e:47:9d:18:6d:3d:fc:06:78:f9:bd:85:73:c2:54:
09:d2:95:da:ca:71:b5:90:9e:23:36:36:af:b2:60:
e0:f5:43:ef:e5:4d:6e:53:e4:b0:52:b0:87:18:4f:
c4:c5:82:a2:64:89:4c:21:b9:a9:08:3e:2f:6c:74:
cc:31:c4:23:dc:02:52:27:b3:7b:f8:98:92:bc:b2:
49:da:62:ee:40:a8:3b:93:ea:4c:10:2e:71:f4:b4:
d0:7f:97:be:52:8b:d1:53:1b:81:93:93:c3:16:49:
a7:42:ec:ea:87:22:fc:a5:40:64:f6:5d:0a:ad:12:
69:08:89:30:a8:ed:ee:04:eb:62:8d:b7:7d:0a:5d:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:0D:A9:A2:22:3F:9C:32:1A:A9:37:24:FC:56:BE:2B:D2:39:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF76386483411F0A66434E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.1.0/24
156.249.1.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4f:51:93:5b:3a:b2:3b:1d:af:94:cc:55:73:c0:80:ae:a8:
29:4a:08:c6:67:9d:53:c9:80:b5:46:40:aa:05:f6:44:fa:d9:
15:9d:b4:cc:75:4b:c3:10:fe:d9:3c:a1:11:2e:80:13:d8:00:
ac:72:a4:cc:8d:1e:ee:f5:98:df:c4:12:69:af:1d:76:1b:47:
af:f4:6f:3c:60:18:fb:fd:41:25:09:15:1e:3c:01:c6:c4:35:
25:a0:90:72:dc:ab:4f:0a:b7:98:a1:cc:fa:e6:26:a3:fa:33:
d2:e6:cc:a6:c2:d6:b9:db:05:e5:76:a8:2c:16:87:46:7e:5b:
56:db:b1:3d:31:1c:86:79:83:0f:dd:13:20:91:6e:c8:33:76:
fb:8f:a7:19:03:ca:2e:26:ac:63:63:88:e9:bf:03:c6:14:86:
7e:2f:10:c5:7b:32:f9:df:58:0f:4a:0b:69:11:81:86:d3:fa:
bf:50:cf:79:53:db:84:a1:d9:39:b0:40:93:8a:4e:52:d5:3d:
71:27:29:f5:cb:c8:b4:13:75:78:80:06:08:6b:7f:b5:26:ac:
85:6c:c8:c8:12:16:f0:62:8e:14:41:10:0f:2e:d0:0c:6d:98:
b1:be:6b:20:0a:d9:88:08:cd:a4:df:82:71:27:7f:cc:50:45:
7c:df:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:06:27 2025 by rpki-client