Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/110935AE607D11F09FF849CCDAE4EC9C.roa
File: 110935AE607D11F09FF849CCDAE4EC9C.roa (raw, json)
Hash identifier: jdgzq4ooqlJr1RZYlqGpXq7aLhUsIYDknk8XqkdhfwM=
Subject key identifier: F0:E5:8D:49:DE:97:1A:F6:81:8F:F6:E0:65:15:78:28:37:ED:9D:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/110935AE607D11F09FF849CCDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 06:37:52 +0000
ROA not before: Mon 14 Jul 2025 06:37:47 +0000
ROA not after: Wed 13 Aug 2025 06:37:47 +0000
asID: 395839
IP address blocks: 156.229.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91349 (0x164d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 06:37:47 2025 GMT
Not After : Aug 13 06:37:47 2025 GMT
Subject: CN=6874a5c0-4b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:63:a5:08:59:14:aa:8c:68:05:02:db:30:
12:f7:52:bf:01:3a:26:40:bc:e6:87:c4:80:2f:20:
31:33:97:13:22:e2:8f:dd:1b:39:1e:8f:c9:1e:81:
0e:f5:4a:8f:6e:13:4d:bd:84:c8:78:a7:88:c4:dc:
08:32:59:8f:04:56:7a:a3:e6:37:df:6d:ad:06:e9:
5e:c6:85:d8:4d:7a:0c:ee:2a:d3:e9:c2:0c:e5:82:
03:94:4d:fe:26:d4:fd:15:86:2d:a5:b9:f4:48:53:
fe:d9:6a:c2:7a:9e:d0:a0:07:53:56:e5:3c:f9:7e:
a1:20:d5:e8:79:61:0a:2b:aa:26:4e:c0:2b:f0:9a:
c5:e4:59:ff:01:0c:3d:9a:8b:ad:76:a8:40:ec:45:
61:9f:3f:55:02:07:5c:90:6d:c1:40:a9:87:0e:1f:
5b:27:71:85:44:af:1d:76:4f:25:12:f5:78:5f:3b:
bb:ca:32:09:5b:5c:6f:d8:1d:6d:5b:78:ed:f2:68:
65:d0:88:f8:df:09:05:f7:6f:53:a6:4c:98:c7:30:
fd:1d:3a:89:9f:32:91:3a:c6:38:b4:01:ef:d2:4c:
81:74:40:bd:2b:9e:8b:ef:cd:ec:17:95:ec:70:8f:
89:14:3f:64:49:74:f2:95:0c:31:07:47:28:b2:28:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:8D:49:DE:97:1A:F6:81:8F:F6:E0:65:15:78:28:37:ED:9D:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/110935AE607D11F09FF849CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.27.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b5:5a:3d:1a:05:60:90:d4:a6:87:b7:0d:bf:e7:50:d6:9c:
b5:79:a1:57:d6:11:e0:8a:1c:25:78:d8:85:39:f6:af:d7:d7:
67:dd:ae:70:26:28:fc:3b:ff:73:d3:d9:8a:86:d6:d9:6a:21:
1b:65:95:7b:4f:21:ba:01:fe:e4:3f:f1:b5:5f:2f:ba:b8:97:
74:c4:24:8e:d5:36:9f:e8:5a:32:5f:87:59:dc:21:f5:95:12:
82:ab:b9:67:06:92:fc:9a:56:91:a4:f2:d9:85:df:9c:a8:7d:
de:9a:69:a0:55:de:09:bd:8b:02:d6:47:f1:f4:b4:d8:fc:77:
a1:62:89:e8:8c:3d:38:7c:4e:ba:1a:10:05:f2:a8:8e:fd:c9:
15:3c:47:95:95:c5:42:52:cd:99:5c:3b:2d:cb:8c:32:37:69:
8f:f0:1c:f3:52:39:67:29:69:ab:2c:44:84:13:ec:2f:90:19:
f0:41:09:39:a9:de:c7:35:d8:d8:b6:af:c6:7a:1d:1a:fb:5f:
60:b7:91:46:ea:3c:88:2e:3d:75:c5:84:69:fb:47:e3:c1:c2:
6f:b3:6e:a3:5c:00:59:2d:c5:a2:c0:28:34:cd:84:a4:62:1a:
43:c2:42:f3:d7:d6:21:de:aa:18:57:26:09:f5:f8:75:77:d8:
75:43:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:31:49 2025 by rpki-client