Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7F21CC5B1A11F0878413E6DAE4EC9C.roa
File: 0D7F21CC5B1A11F0878413E6DAE4EC9C.roa (raw, json)
Hash identifier: 909/2xiecD/z6EMBmQdOPOxw4WfyzWt+/skQGtCu79g=
Subject key identifier: 45:F4:F9:ED:89:9D:B3:2A:9E:A8:B5:D4:87:09:0C:39:4D:83:4E:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7F21CC5B1A11F0878413E6DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 10:06:31 +0000
ROA not before: Mon 07 Jul 2025 10:06:26 +0000
ROA not after: Sun 10 Aug 2025 10:06:26 +0000
asID: 401701
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90868 (0x162f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 10:06:26 2025 GMT
Not After : Aug 10 10:06:26 2025 GMT
Subject: CN=686b9c27-9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:66:79:c4:da:e0:36:bd:ea:70:77:d8:85:
a6:f0:d4:e2:dd:b4:77:82:d4:85:f6:e1:31:84:09:
69:da:6b:c1:6a:96:c3:c0:25:aa:d2:91:4a:7c:92:
cb:98:4b:01:77:a1:06:ec:f0:ee:34:de:39:54:93:
44:47:87:4a:63:71:5c:13:4d:98:bb:3b:17:69:5f:
70:6d:bd:fd:4d:7a:63:6f:8f:f5:5c:2d:2c:37:ca:
12:5a:7e:31:66:c2:03:6b:f8:af:37:ba:a8:4f:55:
18:a3:97:52:60:d9:55:94:37:48:91:21:ea:01:8c:
e7:35:92:fd:06:37:bc:d4:f4:bf:d2:58:30:69:30:
24:12:1e:06:61:9f:5b:55:d1:eb:c6:17:f5:cd:2c:
f5:b2:bb:73:88:e8:ff:65:cd:04:da:b5:d9:63:bb:
93:11:80:6e:ea:48:23:ec:44:78:7d:9e:6c:ee:12:
4a:63:fa:3c:b9:38:c8:cd:2c:23:86:d3:41:b5:d0:
57:68:90:ac:45:22:9d:fa:45:a0:61:8d:96:4a:bc:
3a:89:3d:98:b5:e7:cb:74:4e:59:24:50:e4:55:5b:
32:34:c7:3e:02:a6:4c:6d:e9:44:0a:04:82:55:28:
6b:5a:e2:c8:9d:dc:78:08:c5:00:8f:22:51:54:8a:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:F9:ED:89:9D:B3:2A:9E:A8:B5:D4:87:09:0C:39:4D:83:4E:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7F21CC5B1A11F0878413E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
47:91:00:76:32:72:f4:0e:a3:36:0d:53:80:2a:4c:2c:ed:f8:
53:a8:f7:f6:eb:fe:2b:4e:aa:8f:08:7c:93:53:07:28:bf:d8:
0f:a2:aa:e2:0d:27:7c:b1:91:e0:80:37:53:a5:3f:e8:d8:bb:
64:ef:b2:96:89:f9:a4:ea:bb:74:3a:50:ec:b8:8f:e8:f9:78:
42:ae:06:85:ea:25:2e:78:4d:22:47:37:55:4f:01:50:36:a4:
18:20:c9:56:85:de:16:c3:3d:be:c9:63:1e:94:28:e6:c7:0a:
30:c5:fc:f9:c7:10:cd:0e:c9:74:5a:fc:ca:51:90:da:1a:46:
f7:dc:d5:c6:33:fc:1e:1e:e0:2f:5b:59:ee:63:be:c3:ab:98:
ff:34:1c:a4:f6:a0:52:7f:76:85:d0:60:77:0c:d7:6f:d7:30:
6c:1e:76:df:a8:b3:08:64:71:d7:c6:49:80:20:68:73:5f:5f:
8a:f7:5c:02:49:05:95:63:77:4a:e4:08:98:6f:68:a6:61:6e:
f1:4e:5f:cd:da:da:2a:1b:7b:8c:4f:63:24:07:b5:06:43:6b:
ab:da:67:50:cc:67:f6:1b:85:a6:48:f0:ac:68:35:37:01:da:
f9:d6:46:f7:63:5b:db:5b:36:51:45:d1:46:57:14:2d:16:a8:
01:43:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:41:40 2025 by rpki-client