Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3C1132624611F09BD23AEADAE4EC9C.roa
File: 3B3C1132624611F09BD23AEADAE4EC9C.roa (raw, json)
Hash identifier: bTL0R0ywzM9Ht6G8iX/qXQ9lXJSF5gBVEPFoiWFIJMg=
Subject key identifier: D6:9D:DC:CC:C5:46:0C:4A:16:A9:BB:9C:1B:AC:14:48:D8:E2:14:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016591
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3C1132624611F09BD23AEADAE4EC9C.roa
Signing time: Wed 16 Jul 2025 13:10:23 +0000
ROA not before: Wed 16 Jul 2025 13:10:18 +0000
ROA not after: Fri 25 Jul 2025 13:10:18 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91537 (0x16591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 13:10:18 2025 GMT
Not After : Jul 25 13:10:18 2025 GMT
Subject: CN=6877a4bf-0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:28:a9:cb:3d:10:83:0a:34:92:b3:dc:85:
4e:d8:8d:ce:57:1c:12:dd:f0:87:f6:8a:93:ea:ee:
27:01:57:48:44:e4:33:b9:46:b7:a5:5d:c2:1d:59:
02:d3:69:67:9d:a3:70:e4:02:b9:9c:0a:6f:10:13:
ef:63:55:83:93:1a:09:88:b5:21:d3:9b:bc:d5:bb:
7a:11:02:d1:d9:db:09:01:6e:b8:27:29:a2:85:b0:
f1:50:4a:f6:2e:6c:e3:3b:e2:67:cb:4f:34:c6:46:
a2:59:55:2b:84:37:a2:70:54:29:29:58:7d:da:84:
a1:83:db:27:05:e4:3f:33:92:0e:3e:2e:c1:31:15:
99:04:77:31:02:2a:0b:6b:55:a5:12:b6:a3:09:ec:
5a:a2:a5:29:75:d3:5f:53:2a:46:01:3a:5c:af:4c:
69:6f:2e:b9:9e:0b:17:0c:87:a8:3b:49:3c:b5:28:
69:21:81:7a:7c:fd:a7:12:fc:a8:66:09:04:5a:79:
cf:b1:10:ac:f3:70:a8:ef:ce:7c:95:98:07:4d:da:
df:76:7a:87:d4:ba:8d:d9:88:28:0a:81:8a:36:fd:
cd:67:60:4a:e8:5e:33:a2:34:fd:34:f6:b7:34:bb:
23:e9:06:a8:0a:93:db:39:11:f2:9a:52:cd:5e:13:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:DC:CC:C5:46:0C:4A:16:A9:BB:9C:1B:AC:14:48:D8:E2:14:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3C1132624611F09BD23AEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:c5:d0:9e:cd:58:c0:6e:92:01:58:14:42:d6:f0:da:5b:bd:
12:ec:47:fc:b5:b1:e5:8b:72:58:07:3f:87:22:ef:5f:71:42:
b0:fd:a6:a0:3a:2e:2e:9d:6d:eb:0f:8a:d8:60:ad:a6:af:a3:
a4:af:8f:45:7a:80:d9:2f:f7:3a:65:2b:47:32:d1:08:65:f7:
89:db:da:0a:1d:30:f1:c7:90:c6:6e:2a:8a:06:e1:de:4a:7e:
8b:b8:06:b2:c1:f1:b6:03:10:ee:fc:da:99:0b:e7:04:49:c5:
d7:52:39:c6:88:c9:7f:f1:dd:47:ca:72:55:4c:29:82:b0:dc:
d3:ab:99:3e:5b:c6:6b:c3:da:26:24:99:c8:e7:84:ff:26:be:
2a:c4:c4:ec:9e:71:fd:3e:5c:84:66:02:9e:45:59:29:53:32:
7d:e8:b0:df:cd:32:f0:0c:0a:f1:c3:77:99:e3:46:d7:78:2b:
d9:eb:85:e2:cb:47:6d:d7:71:79:a7:9e:2e:29:61:93:9c:0d:
91:9c:bc:6d:98:f4:6a:e3:e2:b1:a6:c2:c3:9c:d0:89:fa:83:
ab:a1:8c:30:69:23:bf:bf:d6:9b:fb:16:b6:93:45:ee:3c:c3:
72:9b:98:0e:e2:bd:fc:b5:97:97:43:2d:51:26:e9:27:20:33:
a2:69:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:33 2025 by rpki-client