Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30CB73206ABE11F09434B6A8DAE4EC9C.roa
File: 30CB73206ABE11F09434B6A8DAE4EC9C.roa (raw, json)
Hash identifier: WdgheRaj82hLyQZpHlGMr0xx3z7WueEmnu3iuwtd/c4=
Subject key identifier: 79:11:58:18:B7:BF:AA:06:C3:83:83:9E:CC:96:16:9D:8D:09:91:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30CB73206ABE11F09434B6A8DAE4EC9C.roa
Signing time: Sun 27 Jul 2025 07:49:15 +0000
ROA not before: Sun 27 Jul 2025 07:49:10 +0000
ROA not after: Wed 27 Aug 2025 07:49:10 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92111 (0x167cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 27 07:49:10 2025 GMT
Not After : Aug 27 07:49:10 2025 GMT
Subject: CN=6885d9fb-1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:6b:0d:05:99:36:83:d1:11:d2:90:a1:0c:
c2:48:38:07:b9:bf:c7:65:5b:f4:2b:07:13:c2:42:
8f:09:59:f0:dc:78:b3:82:4b:35:01:af:de:bf:43:
50:33:e4:41:31:e3:79:ba:79:85:48:6d:9f:7f:25:
5c:ec:c3:03:0e:a2:fd:5c:15:5c:bf:44:16:9e:72:
ed:2c:0e:8b:1e:dc:72:91:f1:51:3f:24:40:0d:93:
02:54:85:3a:58:fd:72:b3:37:20:28:96:4b:f3:08:
a6:32:55:15:3a:5b:af:79:81:93:7e:f4:bf:95:da:
70:59:60:7c:95:0e:b9:25:e8:f7:6d:54:5a:ee:38:
c6:05:52:03:ce:d5:2c:37:69:ef:36:c2:39:f6:ec:
04:6a:f9:89:1c:9b:7f:83:6c:e0:28:94:96:90:4f:
fc:86:ae:18:c5:89:85:ad:9a:be:a3:9f:23:c4:35:
e1:c5:06:fb:d4:93:10:ce:55:c2:a8:2c:89:1d:aa:
23:66:66:30:d4:e2:ac:31:2e:d8:3b:af:30:c7:8f:
27:12:d1:98:41:62:08:2f:49:80:98:b3:2e:38:4a:
f9:d9:b7:ab:f8:dc:2c:d9:01:ad:d9:40:70:76:a6:
70:37:87:f7:89:3d:68:34:9a:40:f9:46:26:12:25:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:58:18:B7:BF:AA:06:C3:83:83:9E:CC:96:16:9D:8D:09:91:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30CB73206ABE11F09434B6A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:07:f1:83:03:66:9d:1c:f8:cf:41:d5:de:2f:bf:ad:1f:f2:
ad:ae:fe:05:24:53:bd:51:ea:0e:aa:ca:85:52:df:9d:e1:a4:
db:93:5d:93:c0:fd:c0:a5:ab:14:2c:02:3b:f3:85:54:e9:5b:
1b:76:17:57:03:bc:64:5c:c5:83:57:6f:cf:83:30:92:45:56:
b1:9a:68:5f:cd:93:49:d2:45:ad:83:d1:4a:1f:d0:80:df:6a:
46:d4:c7:c6:c3:df:12:7d:c2:98:d2:e7:03:81:5f:9d:6e:b5:
4c:16:52:b4:8f:d5:5f:d9:48:0b:96:28:ab:bc:59:5c:bf:43:
da:82:4e:fa:fd:9b:0d:e8:62:ac:90:92:6c:cf:51:b0:01:96:
64:fa:fd:da:9d:b7:9b:ca:47:ad:7e:ee:84:bf:9f:63:46:dd:
6e:8f:84:c1:2d:81:91:17:7b:26:57:a7:8b:12:a0:0e:3b:44:
e5:7e:76:cd:01:88:ab:ff:74:3e:ea:00:55:b1:ac:50:ce:de:
27:70:45:e3:46:09:41:c9:e4:2c:30:db:54:21:7a:a6:69:1f:
d9:57:a0:a8:76:79:3d:fb:c5:11:2f:21:a6:1a:3c:72:68:95:
b6:13:f7:0f:c8:9d:00:44:79:aa:00:97:71:d0:36:88:a8:75:
07:1f:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:28 2025 by rpki-client