Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/3A1D58C44D6011F093A9B58CDAE4EC9C.roa
File: 3A1D58C44D6011F093A9B58CDAE4EC9C.roa (raw, json)
Hash identifier: R1suNQZf1mKtdv/mgrGQzmzP42VGw/+PJeTA6yPQF0w=
Subject key identifier: 15:FF:9F:2A:8B:77:B2:D7:E6:E9:0D:7A:DC:F1:4A:08:AB:0A:D1:FA
Certificate issuer: /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial: 08E1
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Authority info access: rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/3A1D58C44D6011F093A9B58CDAE4EC9C.roa
Signing time: Thu 19 Jun 2025 22:53:34 +0000
ROA not before: Fri 20 Jun 2025 22:53:29 +0000
ROA not after: Wed 20 Jun 2035 22:53:29 +0000
asID: 37049
IP address blocks: 165.16.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Validity
Not Before: Jun 20 22:53:29 2025 GMT
Not After : Jun 20 22:53:29 2035 GMT
Subject: CN=685494ee-b6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:bb:3a:9b:9e:b8:d1:19:fa:28:79:4f:0a:
84:b8:ca:c0:b3:07:2d:c6:ba:13:13:f0:04:19:1f:
3c:8a:76:1c:be:26:6d:b4:4e:c8:3e:38:0a:b2:1f:
67:84:ae:f4:99:c8:42:ef:bc:91:75:2c:67:f6:24:
c8:9c:b9:25:18:e0:1e:93:f8:af:da:b6:94:dd:c8:
15:b5:72:b6:e1:27:d4:c1:01:b2:c6:9e:fd:b7:03:
90:1a:39:97:f9:4c:94:15:40:a1:bf:44:87:6c:80:
35:66:12:3c:ad:07:03:9c:f6:e8:d7:3b:9f:4f:f4:
92:a3:1d:b0:66:70:22:da:4c:e6:79:d3:0f:02:8b:
47:1e:22:ed:a5:b6:09:6a:81:99:89:44:ae:14:a7:
f6:23:50:c4:56:b5:d1:8c:f3:df:5b:3c:61:8b:c6:
bf:8b:c9:3c:df:a6:47:bd:eb:36:25:cf:bd:f9:b4:
82:b3:bf:f6:e3:d2:a8:f3:e1:0b:3e:b7:79:8e:27:
40:3a:c1:e1:e5:06:b4:9c:23:fc:eb:71:c7:f9:8f:
41:f8:04:c5:ad:e7:cf:db:94:ce:62:1d:bd:7a:28:
9e:f2:40:af:6b:03:8a:a5:fd:f4:8b:5a:6d:3a:9f:
77:07:3f:f5:14:67:b2:43:10:a3:7f:d6:8e:5a:54:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FF:9F:2A:8B:77:B2:D7:E6:E9:0D:7A:DC:F1:4A:08:AB:0A:D1:FA
X509v3 Authority Key Identifier:
keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/3A1D58C44D6011F093A9B58CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d5:c2:0e:eb:b6:83:dc:a0:34:f8:37:37:66:55:37:27:d6:
8b:2b:72:f8:34:36:34:99:ea:68:a3:5a:e4:48:1e:7d:bf:74:
03:48:a6:bc:f2:f3:6f:c3:aa:f6:45:8b:35:0f:55:96:33:c2:
67:90:a7:4a:5b:f7:3f:bc:b9:20:29:20:e3:88:05:d2:86:c5:
16:a5:7d:77:24:f6:4e:33:a4:5a:05:7c:f6:11:be:33:1e:b1:
98:95:23:23:4d:91:97:d8:b7:03:0f:37:97:c3:89:b1:c9:32:
7c:b2:b3:92:ef:56:dd:7a:4d:05:ea:b2:bc:59:3c:c5:1d:d0:
72:cf:6e:93:3d:ef:54:29:5f:e3:7b:77:3e:0c:09:5e:11:61:
01:08:95:a8:a1:8f:6a:b2:0c:5b:de:60:f2:4a:b4:ac:80:ab:
39:f2:76:73:81:70:0d:a2:35:f9:59:8a:52:b2:0e:14:f0:9a:
fe:06:02:a2:f5:1d:09:c9:9a:ba:a9:1b:42:f5:fb:7a:d0:93:
7d:d2:c0:42:77:e8:a6:8d:ad:3a:af:90:28:cd:a4:54:54:71:
26:0d:2d:09:3f:0c:50:ba:ae:c9:98:07:a8:3d:a2:f3:bb:fd:
a7:7e:30:54:4a:9b:80:aa:74:2d:3e:d4:0e:b1:b2:dd:5f:bb:
80:cf:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:50:11 2025 by rpki-client