Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF3B0F259D011F09AD1D37ADAE4EC9C.roa
File: 2EF3B0F259D011F09AD1D37ADAE4EC9C.roa (raw, json)
Hash identifier: XVPVYNtt0hk9RopaE/bLCmR00znNoflkVg+q4P2UzKY=
Subject key identifier: F1:D3:90:35:98:74:13:61:1F:1C:84:D0:9F:5B:2A:CD:DD:35:7E:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF3B0F259D011F09AD1D37ADAE4EC9C.roa
Signing time: Sat 05 Jul 2025 18:45:13 +0000
ROA not before: Sat 05 Jul 2025 18:45:08 +0000
ROA not after: Fri 17 Jul 2026 18:45:08 +0000
asID: 36137
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90581 (0x161d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 18:45:08 2025 GMT
Not After : Jul 17 18:45:08 2026 GMT
Subject: CN=686972b9-473f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:53:a7:21:2f:81:67:bf:3f:f4:6f:70:29:
de:e1:d9:60:5c:36:70:7e:86:72:f2:7f:88:c4:2f:
cb:62:42:c4:ea:14:bc:e3:b4:42:a6:a8:f7:b7:0d:
cb:f9:51:5f:17:c6:6d:6a:fa:1e:ce:1a:19:eb:39:
fc:65:d4:0c:70:9d:ba:51:4f:6d:47:65:11:c9:a3:
28:14:84:21:ea:aa:e6:37:f7:7d:e3:b6:37:33:73:
41:1d:dd:e9:00:4f:54:06:d6:11:08:74:31:82:1d:
5a:a4:08:b0:9e:19:dd:99:d2:61:a5:11:7b:98:c8:
df:89:d8:9c:25:a0:2a:6c:49:3a:02:30:5c:4e:10:
2f:26:20:9d:4e:ec:bc:99:86:b3:33:9a:54:c9:d0:
7c:58:1f:0c:03:43:a4:ca:48:b3:74:6e:f9:d1:56:
3d:9f:35:4a:20:46:16:e4:80:bc:b7:87:55:3b:f2:
69:f1:e1:02:4d:d8:91:b3:27:12:5d:b3:53:4a:55:
26:64:ee:7b:c5:b5:02:b2:95:34:d3:34:45:02:66:
e4:f5:33:0b:66:0b:3b:d2:be:8a:99:dc:c3:5e:f6:
ea:d3:d7:ec:5b:05:d8:85:d9:62:a2:b8:bd:c2:ae:
9e:2c:97:24:21:d1:ba:3d:8d:ab:a7:bd:8a:e2:67:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:90:35:98:74:13:61:1F:1C:84:D0:9F:5B:2A:CD:DD:35:7E:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF3B0F259D011F09AD1D37ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
3e:78:23:03:05:be:89:28:d7:c3:c6:96:48:0e:a9:ed:eb:69:
7a:64:27:87:4c:28:74:a3:93:2e:16:85:99:e1:16:04:79:20:
8d:cc:80:d5:73:06:5c:cc:25:fc:7b:f8:07:f5:36:22:5e:49:
2f:4d:e5:7f:9a:5b:14:83:fe:6d:cf:de:6c:a3:7b:4a:e5:17:
18:83:43:6a:43:6c:48:98:e1:4a:f7:b8:ef:6e:54:ad:d3:aa:
a0:62:f7:5f:7d:5f:02:52:32:89:ad:46:40:aa:36:64:1e:88:
67:58:b8:53:26:99:aa:d0:09:c1:32:3c:a8:00:ef:0e:19:6d:
ca:ca:6a:da:76:83:ab:67:10:b1:c4:9e:53:ba:92:4c:a4:33:
68:d2:4b:03:64:f2:3e:8e:52:2a:0a:16:6f:ab:23:65:a2:8b:
11:87:8c:d7:f3:b2:c7:66:0a:81:c5:30:07:d6:85:16:7e:88:
3f:7b:17:69:3d:1f:5c:a3:fc:4c:9e:b7:97:ea:9e:57:af:8e:
17:ba:d2:2d:c7:92:90:c6:81:f0:b8:f3:84:2d:a0:81:0e:51:
96:52:ce:ec:36:5f:5f:b0:7c:e9:7f:c1:8c:87:a7:64:b4:d9:
a4:a3:8c:ba:25:f1:75:2f:cb:42:c9:2b:7e:c6:00:b4:46:51:
7f:e1:a3:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:38 2025 by rpki-client