Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D18CC144527A11F081128DCADAE4EC9C.roa
File: D18CC144527A11F081128DCADAE4EC9C.roa (raw, json)
Hash identifier: h/LVlmR6uMLU8mAhQl8Q8KFcmw7nj9zSObuOzYVE7F4=
Subject key identifier: E5:A1:B9:ED:50:5A:0F:A8:A9:34:B5:36:56:FD:62:79:45:6F:9E:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015EEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D18CC144527A11F081128DCADAE4EC9C.roa
Signing time: Thu 26 Jun 2025 10:46:31 +0000
ROA not before: Thu 26 Jun 2025 10:46:26 +0000
ROA not after: Thu 03 Jul 2025 10:46:26 +0000
asID: 133929
IP address blocks: 156.224.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 10:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89835 (0x15eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 10:46:26 2025 GMT
Not After : Jul 3 10:46:26 2025 GMT
Subject: CN=685d2507-d438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:a3:8f:e5:71:7f:c2:d0:0a:bf:bf:e1:51:
c0:80:87:12:ee:c7:57:82:69:10:5a:9c:05:c7:8b:
3f:df:14:6f:ef:82:f7:b8:c5:22:53:13:f6:6a:90:
3c:7b:33:6d:23:93:b7:e2:07:bf:59:d3:6d:1e:7c:
41:e6:ea:b8:c3:d1:1d:5e:04:46:d6:cf:1f:e3:d4:
ee:4f:fd:7f:45:9a:45:9d:92:6b:3e:88:2f:5e:31:
ce:e1:38:5c:e4:b3:45:9a:bd:77:6b:be:cb:fa:c8:
01:7c:9d:e7:38:4f:9b:ce:c1:6c:23:95:49:9f:9b:
26:cf:73:29:3a:7c:fa:a5:d9:4f:89:60:0f:dc:48:
d3:33:6a:ec:86:7d:e5:76:7f:93:bc:c6:f8:94:73:
bd:32:7a:bf:7c:7f:08:b6:62:95:94:91:cb:1e:ed:
8c:54:5c:0f:19:bb:5f:d9:7d:e6:e9:a0:5d:6c:ba:
0c:ea:2f:88:dd:8c:a2:a9:b1:ab:65:a1:c3:0d:a0:
fd:65:25:f8:1d:14:4e:54:af:05:bc:f7:e2:88:06:
46:f8:69:e1:f1:53:3e:57:3c:b5:0b:40:b4:18:62:
0f:28:6c:88:37:0a:36:d1:b5:1b:b7:d6:bf:f1:86:
6d:81:f6:9d:22:ff:3b:de:11:29:9b:ed:04:6b:76:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:B9:ED:50:5A:0F:A8:A9:34:B5:36:56:FD:62:79:45:6F:9E:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D18CC144527A11F081128DCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:42:03:3a:c6:ff:bd:87:62:ac:77:e4:53:e7:55:9a:18:75:
f0:3c:2a:a4:d9:72:ef:fa:72:f2:00:e5:46:da:dd:02:69:29:
c9:53:dc:49:f0:1a:2d:57:2f:3c:15:53:46:c6:4b:a7:d8:d4:
6c:47:3e:c3:4d:39:4f:75:b6:34:26:10:0d:86:35:53:a4:a8:
46:70:95:2f:ed:d6:69:e7:04:bf:ba:b1:b2:6c:a6:86:1d:fa:
23:7a:62:12:ea:46:4f:76:1c:c5:02:2e:7d:8d:bb:77:53:2e:
77:34:59:34:a7:f4:13:e1:00:50:9c:1a:5c:b5:0c:b7:03:7a:
8c:4a:ba:0f:68:44:4a:80:ae:8b:de:32:20:95:94:61:ad:3b:
1d:fa:ab:0a:86:90:e1:ea:d5:57:c0:69:b6:48:c2:73:2e:84:
e1:72:db:a7:7d:60:18:30:15:66:32:d4:d8:0f:ea:6d:2c:c5:
a1:d8:18:c3:88:4d:dd:de:67:92:29:82:81:84:c4:6e:13:eb:
0b:0b:16:76:92:ba:bb:bf:09:28:87:46:22:8a:54:a5:64:3f:
b4:b8:7f:b0:61:6b:f5:c6:ff:91:87:55:a0:db:c3:e8:c5:48:
94:f0:c8:ff:bc:c2:7c:fa:e2:2c:d5:e4:90:66:a0:1a:8a:61:
bb:70:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:26:45 2025 by rpki-client