Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/046CF67872E311F0A86CB7A7DAE4EC9C.roa
File: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (raw, json)
Hash identifier: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=
Subject key identifier: AF:75:EC:EE:61:1B:4C:E0:00:F6:42:C2:9B:AC:A2:6A:9C:C9:F0:98
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 02EF
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/046CF67872E311F0A86CB7A7DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 16:33:01 +0000
ROA not before: Wed 06 Aug 2025 16:32:56 +0000
ROA not after: Tue 06 Aug 2030 16:32:56 +0000
asID: 29571
IP address blocks: 160.154.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 03:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Aug 6 16:32:56 2025 GMT
Not After : Aug 6 16:32:56 2030 GMT
Subject: CN=689383bd-bc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:09:04:68:2d:97:8a:c7:dc:91:45:ce:d1:
f2:63:e6:e4:21:66:f8:ec:6a:40:4e:f0:14:64:80:
aa:9b:a5:16:6d:fd:94:88:3c:4a:ef:3a:56:a6:08:
12:67:5f:ef:1f:d4:e2:1d:c1:be:61:eb:bb:34:94:
1d:9e:d5:5a:0a:b3:23:8d:27:5f:b1:66:eb:e7:0d:
c9:a6:b1:a7:12:f1:b7:34:40:2b:73:91:39:3d:ff:
98:37:0d:5b:dd:b4:fb:b0:14:59:b2:b9:dc:ad:c9:
39:25:38:0f:4f:3d:72:be:f6:20:3e:f9:bc:3c:c9:
64:54:5e:f0:19:a9:02:c1:a8:7d:89:68:10:62:7f:
3c:e1:40:a4:66:41:79:24:55:42:70:4c:a2:4b:70:
c4:35:ce:0c:ac:03:1c:54:0d:d6:49:4c:b4:02:e0:
36:f3:79:d6:e5:08:20:ce:38:cc:27:fe:84:4b:15:
5f:70:1e:fc:fe:07:f4:df:5f:18:1a:b5:18:42:c2:
e8:16:a8:9d:b3:97:30:47:00:b0:bd:97:23:aa:78:
c9:c5:1c:f5:32:2a:3e:60:25:ed:10:a0:e3:d2:93:
69:01:42:dd:d2:bb:69:0a:69:61:88:19:20:e6:e9:
a3:c2:e0:a3:f9:66:91:be:69:b1:e0:e1:7f:da:d4:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:EC:EE:61:1B:4C:E0:00:F6:42:C2:9B:AC:A2:6A:9C:C9:F0:98
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/046CF67872E311F0A86CB7A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.154.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a2:21:ef:bc:ef:d6:01:6a:21:c5:da:72:4a:40:6c:01:b5:cd:
38:08:81:81:7b:48:92:9c:ac:9e:28:8c:1b:57:ec:77:b1:93:
20:af:b8:cd:2c:d5:86:a3:ba:6c:46:ab:5f:be:16:c5:e9:36:
be:ef:15:00:26:b6:ec:59:7b:13:a7:d8:d9:29:5d:6f:0c:cb:
f0:ae:cd:fa:c5:3c:c1:24:82:3f:82:d5:57:cd:d2:12:8c:c8:
e6:3e:41:4a:a0:a0:30:48:2e:5b:0b:17:70:e6:57:10:d6:3d:
6b:b9:b6:b1:75:02:ab:46:ac:8d:22:d0:8e:5f:d6:b9:f9:33:
70:e7:97:7a:d0:8f:48:f5:26:ea:26:72:c0:2e:1d:c8:31:5b:
bf:62:f1:94:e7:23:47:83:f8:7e:db:5f:95:cb:fe:59:85:44:
be:22:cc:7d:9d:dd:7a:37:fb:ff:1a:7a:a2:25:a9:d5:7c:8a:
34:70:39:12:de:a6:e9:6f:17:08:90:7e:89:93:a2:47:03:85:
bf:ad:13:94:1c:7e:fa:f5:83:63:64:42:42:29:d6:3c:7c:23:
b0:05:ee:31:cc:6e:d9:d7:48:7d:d9:c9:17:16:78:30:c1:7d:
85:43:50:b2:88:a6:52:4d:03:e3:70:cd:b0:bf:2c:a3:59:4e:
19:ce:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:52:27 2025 by rpki-client