Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7EE1838486611F0808937AADAE4EC9C.roa
File: F7EE1838486611F0808937AADAE4EC9C.roa (raw, json)
Hash identifier: eCbs1AeEaDPO9EQZVBAdLu0wol1tMSPG3d8f0RbdkaY=
Subject key identifier: C9:05:58:41:E1:69:7B:35:00:BA:FC:07:32:71:F1:D8:C9:9E:8B:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015BD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7EE1838486611F0808937AADAE4EC9C.roa
Signing time: Fri 13 Jun 2025 14:59:13 +0000
ROA not before: Fri 13 Jun 2025 14:59:06 +0000
ROA not after: Fri 20 Jun 2025 14:59:06 +0000
asID: 394432
IP address blocks: 156.252.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 14:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89048 (0x15bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 14:59:06 2025 GMT
Not After : Jun 20 14:59:06 2025 GMT
Subject: CN=684c3cc1-a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:2e:d5:49:77:1d:00:11:84:29:75:dd:04:
22:f6:55:5b:0e:1f:ac:97:8a:59:9b:80:26:70:e2:
2e:bf:ba:ac:d7:78:d3:9b:d5:7e:2e:fc:79:04:36:
8e:69:f5:f7:73:88:8a:43:d7:e1:eb:d4:3c:71:40:
2e:55:c1:b7:fa:8c:48:42:40:bf:e3:68:c7:77:42:
5e:eb:e4:07:a4:e2:2a:03:41:d7:38:1d:b7:4a:59:
33:98:fc:b5:93:9f:81:3c:b0:9b:25:74:d7:61:84:
95:6a:71:43:df:92:4f:cc:6d:30:b6:47:5a:ee:19:
c5:20:c8:98:96:c1:a6:c9:c2:62:18:0c:49:67:c0:
b8:2d:86:10:da:c4:b7:c9:19:80:b3:39:6b:38:09:
41:91:43:84:ae:f1:1b:68:2e:1f:e8:fe:6f:cb:c5:
64:53:6a:eb:c3:fb:b8:d8:cb:19:7c:c9:73:a1:9e:
29:6d:86:9b:95:ba:52:5e:45:4f:62:40:ef:54:bd:
39:c1:c5:b4:02:89:34:4d:ed:c0:fa:61:da:25:ed:
52:a0:02:de:74:de:09:0b:88:0f:dc:42:11:e5:aa:
a8:2c:65:1f:24:09:16:8d:26:af:cb:fa:57:96:cf:
5e:f9:50:48:d0:0f:a2:9b:c8:c1:e7:3c:28:7a:17:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:05:58:41:E1:69:7B:35:00:BA:FC:07:32:71:F1:D8:C9:9E:8B:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7EE1838486611F0808937AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
98:b5:5f:ab:94:d6:2e:d7:4b:a7:77:0d:33:b6:51:05:6f:68:
71:cd:29:72:1d:3b:79:f6:7b:e7:ba:09:60:3c:ce:f8:8f:19:
5b:ea:d8:cd:76:67:73:f3:ab:13:3e:7d:83:57:d0:97:87:79:
b9:43:85:f9:37:fa:f0:9b:9c:d4:dd:b0:1b:4c:0b:44:68:f3:
4b:f8:31:c0:2f:6e:64:4e:59:ce:d1:c5:30:3c:5d:fd:53:3a:
b7:97:b0:67:99:8f:ed:6b:36:d2:60:21:49:86:c3:da:59:5e:
85:91:b8:a3:dd:21:e2:79:0c:a5:ea:ff:9b:41:c2:ef:ad:40:
79:16:76:5e:e3:af:31:1f:99:f5:98:38:c7:62:f2:a9:99:16:
4f:fa:b6:75:9b:ca:db:62:e8:90:90:df:80:16:74:25:be:7a:
c5:89:aa:f0:f2:99:bb:e9:75:89:40:5e:2a:7c:30:22:cc:09:
90:62:28:f8:e1:3c:ab:5f:82:8b:26:16:7a:f9:2a:8a:58:f0:
43:48:d9:c5:44:b3:0a:c9:91:50:cc:84:f4:14:ef:69:58:2c:
89:c8:36:9e:08:1b:5f:72:12:5b:e4:b2:59:26:e5:2b:d1:74:
87:9d:db:94:44:34:67:d3:4c:2b:3d:d4:21:f0:f2:a0:68:65:
8d:7d:15:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:44 2025 by rpki-client