Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B02D4C59B811F0B65D64E0DAE4EC9C.roa
File: 04B02D4C59B811F0B65D64E0DAE4EC9C.roa (raw, json)
Hash identifier: lzM7aOpSGWqnBCd+AsPdA1NgoKfVHKDke2nol8i02lw=
Subject key identifier: 9E:2D:5C:CF:5C:B2:EC:D8:C7:97:44:CF:1F:6E:FA:4A:A7:9D:E1:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B02D4C59B811F0B65D64E0DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 15:52:14 +0000
ROA not before: Sat 05 Jul 2025 15:52:09 +0000
ROA not after: Sat 30 Aug 2025 15:52:09 +0000
asID: 398443
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90567 (0x161c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 15:52:09 2025 GMT
Not After : Aug 30 15:52:09 2025 GMT
Subject: CN=68694a2e-35d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:18:41:87:0c:5a:46:d7:ea:8f:55:dd:7e:
e3:75:26:e7:ee:5e:19:96:03:45:ab:4a:26:f1:2c:
66:36:9b:14:65:c1:1c:a4:27:df:b0:69:58:e1:ad:
1f:84:61:b2:59:84:e2:0d:7c:44:5c:6e:86:82:ba:
43:14:66:1e:9c:17:a0:7b:54:51:40:bb:46:63:00:
4d:bd:e1:93:06:5c:b2:04:a8:8d:71:6d:42:8d:27:
f6:83:fc:3c:37:b7:d1:0f:fd:62:d4:c1:bb:26:c2:
05:57:2c:99:c5:bf:8e:0c:bb:32:82:71:00:3e:b3:
23:0a:44:f3:1e:64:01:91:2e:54:35:79:20:ce:3d:
f1:fc:d4:58:7b:ac:98:29:7b:91:a5:59:c7:52:83:
34:2f:58:b1:a5:ee:43:b7:55:54:85:97:d3:00:4e:
5b:16:1f:2f:bd:67:bd:b2:82:26:06:20:0c:a4:57:
00:a8:8a:55:2e:a2:a6:50:f2:c4:05:5a:bf:7e:4b:
ac:51:0b:3d:91:9f:2d:43:bd:0e:aa:ad:71:22:e2:
4b:fa:5b:93:48:cd:cd:0d:5e:99:0b:97:08:fd:50:
c4:21:15:7e:08:bf:15:f3:0f:60:cf:01:94:67:21:
11:b8:92:92:2e:00:13:9d:d6:97:f7:66:35:a5:47:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:5C:CF:5C:B2:EC:D8:C7:97:44:CF:1F:6E:FA:4A:A7:9D:E1:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B02D4C59B811F0B65D64E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
Signature Algorithm: sha256WithRSAEncryption
29:94:9f:53:07:41:2d:04:0a:0f:59:cc:08:63:07:61:f8:30:
d9:86:a6:c9:63:f2:53:05:a8:14:ab:70:53:b5:33:4e:cd:59:
5e:29:dd:0e:c7:63:af:d0:93:01:75:ee:81:a9:82:f5:c7:d8:
3a:8d:d4:35:d4:2b:7c:63:4e:ee:14:a3:a9:de:11:f9:c5:94:
45:52:04:fa:0d:62:39:9a:24:f6:c3:aa:2c:df:cd:ae:0e:32:
bd:2d:4e:27:6f:49:56:88:93:c5:c4:0d:be:e8:f6:41:82:f4:
26:d1:42:18:50:7c:0d:60:55:a7:ab:98:91:f8:ea:c7:fd:19:
bf:97:86:ba:e9:86:77:60:53:ec:ff:ed:12:d0:d5:8a:49:f8:
58:78:58:cf:52:0d:35:38:a2:a2:ed:d3:05:ad:f5:50:b7:70:
7c:c4:19:d0:51:bf:c0:4f:60:b2:c0:13:6f:0e:29:df:2c:4d:
eb:45:51:08:06:ad:d5:ea:0e:58:e9:42:a9:a4:5b:75:3a:33:
82:2b:d7:92:4f:71:9a:84:f4:13:e6:db:2b:65:2c:1e:e9:d0:
5f:e6:fa:c8:60:73:6f:de:3b:aa:2f:3c:4c:54:f0:c5:79:02:
e6:47:d2:06:f2:51:7c:bf:3a:b4:94:df:e6:d5:31:2e:da:61:
90:36:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:59 2025 by rpki-client