Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/308911DA72E111F086A6389EDAE4EC9C.roa
File: 308911DA72E111F086A6389EDAE4EC9C.roa (raw, json)
Hash identifier: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=
Subject key identifier: 1C:78:D1:86:E8:8B:65:CF:03:53:7F:20:FB:82:8E:E6:48:A2:80:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 02ED
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/308911DA72E111F086A6389EDAE4EC9C.roa
Signing time: Wed 06 Aug 2025 16:19:56 +0000
ROA not before: Wed 06 Aug 2025 16:19:51 +0000
ROA not after: Tue 06 Aug 2030 16:19:51 +0000
asID: 29571
IP address blocks: 160.120.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Aug 6 16:19:51 2025 GMT
Not After : Aug 6 16:19:51 2030 GMT
Subject: CN=689380ac-5560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:c2:98:e5:25:32:fc:9b:9c:26:74:01:3b:
7a:64:3a:ed:ba:0c:19:0a:bf:86:bb:5c:e5:52:90:
54:95:b8:3e:df:03:b6:f6:0d:03:d8:4d:c9:a9:6a:
8e:a5:13:4e:2f:7f:ca:15:df:cd:d4:e8:17:a4:4f:
17:91:3d:65:58:03:90:0e:84:cb:df:34:e0:67:8e:
a4:24:23:a3:77:60:02:63:c4:30:f7:f9:0a:fc:cb:
c9:a5:35:58:c7:8b:f0:f3:9f:99:05:43:ec:87:02:
6f:d9:d6:bd:b9:68:77:1c:53:26:b1:ab:03:c9:9f:
ae:b7:3e:64:75:d2:37:5f:05:8b:46:6b:d7:1e:1c:
fd:11:2c:bf:a3:c6:db:a3:db:6c:28:65:be:0c:a8:
a8:07:d0:4f:8b:ec:c8:67:3b:f7:12:8c:fd:b7:e2:
83:6e:ea:33:b6:cb:29:1e:7e:fc:b8:de:35:70:21:
de:38:ec:16:8a:cf:ec:af:6c:43:1f:89:b3:98:8d:
1e:9d:b0:ee:a8:48:19:24:0e:f8:02:b8:90:84:15:
aa:6a:e7:6e:cc:27:32:98:a2:a4:8f:51:51:c5:98:
fe:1e:e2:38:8c:14:f0:08:b8:84:7b:f9:52:57:70:
2b:2e:bd:2a:15:c2:f4:00:48:d9:50:4d:62:9d:6e:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:D1:86:E8:8B:65:CF:03:53:7F:20:FB:82:8E:E6:48:A2:80:AB
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/308911DA72E111F086A6389EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.120.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:51:c0:65:a7:2a:8a:a5:04:f2:0d:aa:b8:db:1d:b4:50:79:
94:27:cf:4c:75:6a:9d:82:36:06:89:70:09:d0:f7:f2:c4:d5:
58:38:41:4d:bc:55:5d:a9:9d:8b:74:d0:ad:38:9b:12:ec:3d:
0c:60:b9:69:db:50:29:d1:41:8d:20:62:44:a9:83:94:ad:e9:
21:d5:2e:22:04:5d:83:5b:b6:ee:fb:c6:56:a7:49:a4:88:cf:
5c:46:34:39:e1:83:bb:51:ae:6e:fb:e6:01:2c:73:ed:9f:88:
83:d0:da:11:60:e4:6a:e4:17:fd:7a:65:3f:71:6f:d7:47:0b:
00:d8:b3:b5:e8:bf:22:b6:e2:8a:e4:2d:7c:b2:b1:4f:20:3d:
5a:79:9d:54:9f:48:00:e9:22:89:56:6e:d4:1c:b1:81:74:ac:
e8:7a:8a:ac:38:f8:5c:8d:af:8a:01:43:4f:b5:17:54:9d:73:
84:fc:f8:5f:a3:5f:52:6e:20:c8:76:e8:26:e9:bb:20:2b:a5:
0a:28:13:69:69:90:61:d1:d5:0d:d0:77:5c:f3:2d:be:13:cc:
be:78:55:00:57:96:8a:5c:59:d0:d7:6a:ec:b6:e3:bb:e5:7c:
5a:d5:22:8f:94:a9:ed:2d:fa:d8:08:3d:0f:0b:2b:39:cc:89:
0b:99:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:42 2025 by rpki-client