Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3531000C49CF11F0A6C5C0D5DAE4EC9C.roa
File: 3531000C49CF11F0A6C5C0D5DAE4EC9C.roa (raw, json)
Hash identifier: BirPtEl2q5tUYQbiLLX3+z7Y63B4XJk8XnhUPkTivMA=
Subject key identifier: FF:39:1E:82:9E:3F:78:67:42:0B:56:2D:CE:75:E0:DE:B5:26:D4:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015C38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3531000C49CF11F0A6C5C0D5DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 09:57:55 +0000
ROA not before: Sun 15 Jun 2025 09:57:49 +0000
ROA not after: Sun 22 Jun 2025 09:57:49 +0000
asID: 134687
IP address blocks: 156.230.2.0/24 maxlen: 24
156.230.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89144 (0x15c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 09:57:49 2025 GMT
Not After : Jun 22 09:57:49 2025 GMT
Subject: CN=684e9923-de8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:2c:0b:de:43:e0:86:03:aa:67:e9:34:42:
1a:c3:59:96:72:a7:40:28:11:a2:f8:8e:9a:a8:81:
81:f1:9a:8c:33:76:c9:79:2c:1f:b8:16:21:77:28:
c6:ac:dd:6a:b2:01:86:75:fb:9c:8e:66:34:07:1f:
97:b9:df:8e:6e:5f:a4:c1:24:ab:90:21:2f:b7:90:
da:48:e3:09:20:1d:f5:8e:31:19:3e:3f:4e:9a:08:
8a:a3:9c:81:96:8b:43:43:d9:bb:67:25:e3:6d:81:
99:22:16:6f:be:ff:ca:ec:96:41:3d:90:04:da:37:
c4:a1:c1:a3:93:4e:58:62:3f:67:0d:1b:7b:d5:53:
a1:29:a7:41:1f:27:18:78:7f:7f:cb:17:39:02:be:
ea:ea:76:95:6f:0d:d3:79:55:34:8a:7c:a2:1e:b6:
41:87:7c:d6:23:62:54:71:2b:64:a9:d1:1d:a9:1f:
54:82:53:28:07:ca:35:20:f1:54:19:02:5d:3f:02:
b7:3c:f3:6f:ac:b8:9b:4c:e8:27:30:05:91:8d:f1:
20:22:9c:8c:04:31:ac:47:c0:80:32:6c:3d:2d:53:
12:1c:33:60:3c:25:57:2e:1e:92:73:8b:66:dc:29:
f6:23:a7:3a:52:ef:69:ea:ba:d4:e2:dc:67:07:34:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:39:1E:82:9E:3F:78:67:42:0B:56:2D:CE:75:E0:DE:B5:26:D4:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3531000C49CF11F0A6C5C0D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.2.0/24
156.230.10.0/24
Signature Algorithm: sha256WithRSAEncryption
03:60:c9:8a:87:ef:78:75:86:b6:f7:94:94:d7:4f:d1:ef:a0:
7b:80:d8:74:87:45:6f:ef:90:5d:68:69:f2:fa:8e:f2:1c:0e:
11:74:c1:0a:c8:0a:0d:63:4a:46:8e:8a:65:c9:b6:53:5f:9e:
f2:be:62:e1:28:ef:94:26:af:a2:93:93:61:30:3a:df:7b:1e:
71:34:be:6c:9d:43:16:12:9c:57:a6:1c:5f:70:d4:de:d1:6b:
66:cd:e5:04:56:ca:04:a5:36:65:78:06:53:01:e1:9d:c4:89:
38:62:75:cf:cf:9e:7f:76:df:60:d1:b5:df:a1:cc:88:2e:a3:
3d:e9:c7:b5:43:8d:a9:ea:20:af:8d:08:75:dc:37:c0:7c:e0:
0b:fb:a0:8b:b6:df:df:e4:df:57:34:e9:f3:e8:30:a9:b8:25:
81:0b:55:29:6f:82:e2:fa:df:7d:9c:5b:29:71:67:0f:0c:fe:
07:9f:45:87:60:fc:9f:b6:09:f4:19:5e:2c:5c:54:f2:c8:65:
df:0f:77:e2:26:ae:e6:e6:5a:fd:fa:68:4f:4e:f7:e8:86:92:
f6:23:41:dc:3c:71:16:df:50:33:d3:ab:6d:cb:af:f8:71:54:
a8:77:aa:9b:65:7b:53:97:b0:f9:13:cc:95:00:ee:67:9e:bb:
31:c3:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:02:16 2025 by rpki-client