Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C3D3E2E42DB11F0BB2D9C8BDAE4EC9C.roa
File: 3C3D3E2E42DB11F0BB2D9C8BDAE4EC9C.roa (raw, json)
Hash identifier: kahrq41tYuNbQ1Wx3MXKXKos6Q1huEC+o+87lHg7Wu4=
Subject key identifier: 3B:06:95:19:0A:70:7D:E5:A1:0D:D2:9D:1C:3C:C9:C5:9C:68:A5:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015A10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C3D3E2E42DB11F0BB2D9C8BDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:36:23 +0000
ROA not before: Fri 06 Jun 2025 13:36:13 +0000
ROA not after: Mon 14 Jul 2025 13:36:13 +0000
asID: 20473
IP address blocks: 156.231.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88592 (0x15a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 13:36:13 2025 GMT
Not After : Jul 14 13:36:13 2025 GMT
Subject: CN=6842eed7-8f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:b7:65:64:50:9c:30:25:36:ce:40:12:ec:
5d:ad:10:36:1b:ff:b1:69:2a:67:17:c1:cc:72:ec:
c5:b1:47:32:2c:21:08:87:ea:b2:a2:25:dd:5d:c2:
9b:3e:f4:7f:4a:c4:76:72:de:68:fc:25:72:0b:b4:
0e:bd:98:06:5f:31:5c:60:43:b2:2f:63:80:4d:9b:
c6:c2:48:c4:e7:de:04:47:1c:90:61:f5:be:35:70:
8e:b4:a0:1d:20:6c:f1:cd:1d:dc:c3:16:f3:5e:9d:
6c:26:8e:5a:e5:00:0f:7a:57:35:62:6d:94:97:ff:
12:55:e9:65:4f:2d:ee:9f:97:c4:56:fa:a3:23:c1:
e1:87:68:37:76:75:e1:e0:f3:48:34:27:d4:6b:df:
32:0e:88:e6:14:39:ea:29:68:80:73:01:09:d7:fc:
ee:0b:7e:89:68:46:8a:ed:6e:b1:8f:73:82:10:c0:
25:0f:84:e7:76:93:1f:cc:b3:b2:ec:4b:89:b2:75:
59:25:d7:08:42:2a:3d:0c:fb:70:73:35:bf:aa:dc:
cc:05:53:69:82:20:b0:47:61:ef:9b:dd:ae:71:91:
28:30:dd:c6:a7:93:f9:19:1f:74:6d:e8:d2:24:1f:
40:ce:6e:39:05:6f:7d:5f:0f:24:0c:2e:86:ed:98:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:06:95:19:0A:70:7D:E5:A1:0D:D2:9D:1C:3C:C9:C5:9C:68:A5:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C3D3E2E42DB11F0BB2D9C8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.72.0/23
Signature Algorithm: sha256WithRSAEncryption
88:23:f4:a7:02:6f:f7:20:a7:33:b5:d0:50:a6:05:71:2a:ff:
a5:1f:0f:7b:b4:dc:d8:c2:82:f4:7b:c5:a4:7b:d7:0b:da:bc:
3a:16:a3:75:89:75:ad:69:a5:9a:c5:3a:01:cb:d6:a5:1b:ce:
4a:c7:81:ee:e5:9d:fa:87:5b:b5:b8:71:a2:e2:e1:3a:96:df:
26:18:c2:fa:52:0c:fd:0f:0a:f6:7a:97:87:04:29:3e:b9:32:
7c:ee:2a:bc:be:ea:c1:44:f2:dc:97:dd:cc:15:f6:ab:12:9b:
80:dc:57:84:75:72:46:67:58:2e:99:65:23:c2:2b:7a:76:ed:
e5:be:d8:9b:8c:2f:6e:96:5f:27:df:3d:5c:18:16:ab:97:75:
fc:6c:24:55:3a:c9:26:6d:d8:f8:af:52:38:d2:08:6d:b3:42:
7d:5e:99:c7:94:8c:b4:54:6c:45:3a:4f:14:f6:63:c2:cf:50:
ad:39:c7:1e:82:46:f5:47:8d:70:34:32:b9:f3:ba:51:59:31:
14:a2:b5:88:29:4c:8f:68:7a:50:c8:c9:74:84:b2:3d:84:fe:
b8:42:be:fc:bc:18:93:77:79:5f:62:96:54:ef:1b:8e:f3:09:
29:70:08:2f:99:26:d2:2c:8c:9f:25:05:c5:68:f2:71:f7:ab:
44:9e:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:24 2025 by rpki-client