Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41E9F9DC59E411F0BACD367CDAE4EC9C.roa
File: 41E9F9DC59E411F0BACD367CDAE4EC9C.roa (raw, json)
Hash identifier: LuZTA6z4QzmclewL4HJ6w5EhrwAFjo8bRysmYll2W8U=
Subject key identifier: 0D:0E:4D:5B:F3:70:30:79:63:43:42:6C:F8:88:0C:3A:E9:2A:AB:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41E9F9DC59E411F0BACD367CDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 21:08:54 +0000
ROA not before: Sat 05 Jul 2025 21:08:50 +0000
ROA not after: Fri 17 Jul 2026 21:08:50 +0000
asID: 62610
IP address blocks: 156.241.129.0/24 maxlen: 24
156.241.133.0/24 maxlen: 24
156.241.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90601 (0x161e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 21:08:50 2025 GMT
Not After : Jul 17 21:08:50 2026 GMT
Subject: CN=68699466-8c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:3b:2b:0d:3d:bf:32:fe:4a:6f:ad:e5:c7:
17:c6:8c:cb:23:25:62:25:11:0e:95:76:10:9f:26:
56:af:cc:35:70:e9:a0:11:84:a1:18:53:41:0c:15:
49:00:45:e3:88:7d:81:21:f8:b6:7a:25:2b:9e:4f:
52:d9:52:c3:0c:81:a3:d7:43:9b:4a:7f:8f:e2:cc:
c9:86:8c:85:8d:b2:6f:c3:73:ad:29:f6:de:1d:0f:
30:3c:59:0a:3a:6f:0e:9e:cf:12:4b:05:cb:c9:ef:
dd:5c:9b:8c:b7:09:05:3b:41:2a:84:4f:60:1f:4c:
60:85:a9:ff:2f:25:c0:24:2c:56:8a:1b:21:85:25:
4f:2b:98:92:28:17:7f:c6:a9:1d:d9:f5:cf:2f:64:
06:54:8f:94:03:08:d6:d5:5d:97:e7:ab:9f:0c:19:
44:ca:13:55:1a:1b:b2:4c:fe:b0:7b:1d:a7:84:4c:
7b:1d:ce:c0:4e:f8:59:92:df:2e:07:de:8a:f8:b9:
81:ab:0e:df:f2:bc:7f:14:c1:ce:6a:0d:be:94:80:
3a:a3:9d:f2:2e:20:9a:fa:90:86:75:be:d1:7c:92:
4d:5e:f6:45:1e:48:77:fd:e0:97:8b:f0:f6:2e:50:
7b:68:da:ec:75:1f:d6:be:cb:16:12:23:5d:0a:34:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:4D:5B:F3:70:30:79:63:43:42:6C:F8:88:0C:3A:E9:2A:AB:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41E9F9DC59E411F0BACD367CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.129.0/24
156.241.133.0/24
156.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a1:cf:44:94:57:41:97:00:3c:93:b2:84:dd:29:54:87:16:
5f:42:c8:06:b8:2d:3f:58:f3:b8:2a:e0:76:1e:28:e0:5c:c0:
1c:c8:0b:2c:0e:8c:b6:25:64:bb:ec:c2:ae:23:66:b4:03:ee:
9a:2e:21:98:ce:b0:43:18:a7:b2:97:3d:4f:67:fd:bc:88:83:
cf:9d:e5:65:a4:c5:09:44:2c:b3:6b:6a:aa:c3:ee:b4:07:2e:
1e:f9:9c:27:d7:b9:58:0b:9c:06:0c:ca:b0:ec:23:0d:38:f6:
21:e8:eb:e6:b1:0e:6d:fa:b0:24:b1:13:4a:a8:d7:54:a2:f0:
77:01:27:90:c1:90:a5:ed:d8:b9:2a:1d:e5:16:5b:45:4f:cc:
08:43:af:55:f5:bc:e5:12:25:ba:bb:c5:87:e5:3e:2b:6b:7b:
48:19:14:60:e8:3d:94:4d:0b:7a:3d:2e:88:7d:9c:81:c2:52:
6d:bd:a2:82:0f:94:3a:bc:cd:92:79:ee:65:28:77:5c:3c:5d:
59:8d:79:55:7f:42:be:c7:97:09:92:da:0d:06:1c:e6:6b:13:
ac:df:d1:f1:83:5a:b1:20:62:90:66:6d:e4:ae:8e:71:37:2f:
c2:16:d0:82:34:3e:1b:30:a5:5e:d5:c4:15:b0:6b:2e:bb:13:
09:9e:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:17 2025 by rpki-client