Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/3561E70246C911F0B48FB997DAE4EC9C.roa
File: 3561E70246C911F0B48FB997DAE4EC9C.roa (raw, json)
Hash identifier: hvGUR7BeqJ6MTLBaAk0vWcFdQF+l1z7VmRPb0Tpc0aQ=
Subject key identifier: 04:36:AA:EE:54:55:7A:ED:9B:B2:69:FA:45:0E:BB:B7:41:CB:2F:CB
Certificate issuer: /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial: 0356
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Authority info access: rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/3561E70246C911F0B48FB997DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:37:26 +0000
ROA not before: Wed 11 Jun 2025 13:37:14 +0000
ROA not after: Sat 17 Mar 2035 13:37:14 +0000
asID: 37014
IP address blocks: 156.38.4.0/24 maxlen: 24
156.38.6.0/24 maxlen: 24
156.38.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 06:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Validity
Not Before: Jun 11 13:37:14 2025 GMT
Not After : Mar 17 13:37:14 2035 GMT
Subject: CN=68498696-7e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:39:a1:4a:cf:30:b4:3d:6a:bb:bd:37:7c:
54:24:c6:d9:04:63:ed:f8:b0:24:2a:67:f2:f1:57:
fe:ad:76:c5:f4:cf:1b:c1:c7:e3:7f:a8:3c:be:ea:
b9:a9:46:86:dc:67:8b:48:1a:66:62:a1:82:b3:99:
14:e8:18:08:5b:45:e0:eb:95:6b:27:18:39:3b:4e:
27:fb:6b:b3:dc:2b:6f:1a:c4:42:36:b9:a1:65:d0:
57:2e:ea:49:c7:e9:5d:0e:79:3e:45:61:87:72:4f:
93:a9:b2:90:ed:8f:4e:54:f8:f6:a0:7d:48:31:05:
4c:26:d5:d8:3d:7a:ef:68:0b:46:12:38:30:07:8c:
ee:c9:75:bf:86:c4:63:b6:18:c7:a5:2f:c8:fe:39:
91:41:5d:3b:93:70:df:63:35:eb:73:b3:27:ea:c2:
4e:53:11:e8:60:63:5a:a2:69:8d:b1:8f:39:4f:a0:
87:4f:c0:ca:6e:a3:3a:2d:fe:c0:d6:e7:73:f1:53:
09:59:85:aa:f6:4d:c6:6f:f8:30:89:9f:9d:1e:28:
fb:3e:74:79:97:8f:77:f9:41:18:d1:29:1c:3b:5b:
2c:21:41:55:25:ed:10:13:48:6d:d3:4c:2a:de:11:
87:a2:2e:3d:87:49:8b:b7:53:56:1f:5a:c1:47:42:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:AA:EE:54:55:7A:ED:9B:B2:69:FA:45:0E:BB:B7:41:CB:2F:CB
X509v3 Authority Key Identifier:
keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/3561E70246C911F0B48FB997DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.38.4.0/24
156.38.6.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:53:5d:d7:9e:c5:64:d8:17:8b:25:ab:72:15:a2:b5:f2:e0:
d1:51:c8:d7:96:7b:ec:1b:82:5c:a3:06:6c:69:60:8c:99:88:
88:50:ff:1e:6a:a9:b5:ca:80:84:9d:eb:44:bb:f7:7f:75:72:
7c:64:fb:00:52:37:e9:86:b3:7c:e3:85:1f:31:b2:f6:7f:c5:
a6:bc:65:7b:9d:1a:f8:9b:04:40:2d:66:df:db:b6:31:df:fd:
46:de:1e:88:d2:80:36:9c:1b:5e:9c:0a:49:ab:0a:5a:bf:84:
76:49:2c:58:27:9f:78:cd:87:a8:99:06:c2:9b:03:dd:67:fd:
1f:84:1e:99:6f:94:ce:25:b5:98:aa:7c:cc:b4:a3:35:87:e4:
fa:f7:24:2a:4e:c4:7f:b3:51:a3:aa:74:7c:bf:49:da:72:f5:
1c:21:c3:6c:e4:89:d0:60:31:0b:ff:71:1d:69:93:b9:71:29:
cd:66:62:39:5b:67:1f:2e:f3:a4:81:3b:80:91:fb:c5:8d:38:
9a:6d:26:9d:fa:1f:23:6a:62:60:dc:06:e8:c6:26:76:c3:b9:
73:b2:95:be:2d:2b:e7:9a:d4:50:29:08:0b:d4:4f:78:8a:4b:
3a:80:8c:14:ec:76:85:13:75:4c:e5:3a:fa:c6:d4:76:c9:e3:
41:59:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:20:27 2025 by rpki-client