Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D16AC92842AC11F096FB2AE1DAE4EC9C.roa
File: D16AC92842AC11F096FB2AE1DAE4EC9C.roa (raw, json)
Hash identifier: aryHlkbzk5ejzbZwxEuc2cJuQPICscKci2GeJaJrhnw=
Subject key identifier: CC:9D:FA:66:E2:DA:44:A3:F6:8D:A9:A9:23:FF:A2:9A:B4:B7:2B:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D16AC92842AC11F096FB2AE1DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 08:04:07 +0000
ROA not before: Fri 06 Jun 2025 08:04:02 +0000
ROA not after: Sat 06 Dec 2025 08:04:02 +0000
asID: 328608
IP address blocks: 156.229.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88559 (0x159ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 08:04:02 2025 GMT
Not After : Dec 6 08:04:02 2025 GMT
Subject: CN=6842a0f7-e9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:b1:43:1e:50:b8:69:a3:5b:38:25:6f:f1:
7e:a0:19:dc:5a:01:9f:ff:c1:35:90:46:be:44:34:
45:29:b1:50:a1:e6:56:43:19:fc:09:06:66:78:30:
4d:41:43:07:a8:31:03:28:b0:1b:f1:26:a1:58:bb:
3f:61:94:9a:e5:0c:47:b5:ff:3e:77:06:a0:2d:d7:
9a:a3:ed:9a:62:31:35:12:24:68:95:c1:96:08:c3:
54:ad:8a:6f:e1:08:66:e0:03:a0:66:53:bd:23:5b:
f8:4b:d6:69:54:69:4d:5e:1a:cd:eb:1f:dc:ac:43:
78:1a:5d:f5:f3:88:a7:e2:98:18:56:6d:e5:0b:89:
35:95:1d:fe:ea:09:98:bb:dc:f2:e8:ec:a4:c7:e5:
f9:61:e4:5a:78:10:12:57:7a:9e:60:01:1a:ac:51:
3f:22:1a:3a:11:73:e0:0c:ae:81:08:9b:d7:13:2c:
3e:43:9f:d6:f8:3d:c9:c5:c4:24:3d:d5:0b:f7:38:
19:aa:00:1a:a6:75:99:8c:c6:45:45:db:d8:2b:6a:
d3:ab:e5:da:b7:ac:ce:20:15:ac:cd:e1:67:13:e0:
de:51:2d:96:fb:ac:11:59:99:dc:69:c9:a4:18:1f:
1d:73:11:44:63:09:14:a0:d8:fe:d2:7e:db:ee:50:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:FA:66:E2:DA:44:A3:F6:8D:A9:A9:23:FF:A2:9A:B4:B7:2B:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D16AC92842AC11F096FB2AE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:9a:06:62:66:f4:98:a3:b5:92:82:07:8e:66:24:3b:8c:2a:
45:a1:5d:8e:5b:df:37:28:1c:b0:ca:3c:87:bf:84:64:10:d7:
64:1e:87:aa:f7:98:a9:28:65:f3:d1:0f:db:92:21:e3:8c:74:
a1:1b:51:ba:27:48:16:64:d1:fd:b5:4d:a4:b1:c3:34:ec:d9:
b8:f8:ac:60:3f:f8:68:b0:78:fc:5e:77:eb:67:75:74:8c:cc:
4c:f8:71:8e:76:5e:f5:a1:9a:a7:cf:9a:92:26:e1:bd:46:f4:
e7:93:09:6d:0b:7f:45:88:4b:65:c3:d8:0a:23:11:d9:95:23:
2f:63:4e:22:a3:85:37:fa:69:dc:6c:53:0f:21:ef:d0:49:0c:
13:9e:6b:d1:06:85:0a:e4:eb:7f:34:ca:fb:8f:ec:f2:de:d8:
2a:af:da:22:f1:73:df:71:e1:32:fb:67:39:fc:69:73:52:64:
fa:bc:c8:8b:bc:63:08:43:43:51:9d:01:00:60:36:64:27:25:
15:de:42:8f:d5:8e:90:74:e3:e8:1b:6f:5d:48:a8:25:8c:41:
86:f3:88:31:92:60:5c:9b:76:d9:67:63:bc:1b:ba:70:3e:9c:
60:d8:ed:04:a0:6a:66:5b:59:d1:07:da:67:26:cb:77:e2:b5:
96:ac:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:29:24 2025 by rpki-client