Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C9D2B4E5CDF11F099114FEADAE4EC9C.roa
File: 4C9D2B4E5CDF11F099114FEADAE4EC9C.roa (raw, json)
Hash identifier: cDsEUbXIiDcgC6YMOtxYX8gVrf7S9hLz13V2jyoX9DM=
Subject key identifier: 8F:A4:75:98:32:8A:DC:1A:BA:EC:97:64:A6:3B:0B:2E:12:AC:2C:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01641A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C9D2B4E5CDF11F099114FEADAE4EC9C.roa
Signing time: Wed 09 Jul 2025 16:10:59 +0000
ROA not before: Wed 09 Jul 2025 16:10:53 +0000
ROA not after: Wed 13 Aug 2025 16:10:53 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91162 (0x1641a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 16:10:53 2025 GMT
Not After : Aug 13 16:10:53 2025 GMT
Subject: CN=686e9492-611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:c3:ae:ba:71:c4:f3:85:02:4f:94:59:0b:
12:44:7a:16:7b:6a:a7:05:0a:06:67:a9:3a:1c:31:
f7:51:ee:f1:72:3a:79:bf:9e:0e:ea:51:41:2b:c4:
f0:5a:8f:37:3e:b7:ee:63:77:7b:61:dd:40:62:af:
68:b5:ff:19:05:0e:d3:90:9c:55:09:7d:d8:c5:fb:
22:14:e5:1c:f0:ce:31:f9:06:6a:77:c3:45:cb:9c:
f9:20:00:1f:06:f6:08:73:3a:71:ee:11:cf:0d:1a:
01:0e:1d:e8:48:7a:a7:16:df:b8:ba:6d:1c:57:c5:
8d:95:e6:cc:77:05:65:68:ac:ca:67:9d:c4:fc:67:
bf:ca:f8:2b:18:2c:6f:df:00:71:c0:ee:92:6f:de:
63:77:93:a0:e2:8c:9d:8c:4e:05:41:d2:97:37:d6:
f4:be:2c:9b:27:f5:1b:97:58:35:68:52:ff:19:1b:
d1:ee:54:58:4d:80:44:5f:29:a7:3a:69:be:4c:9e:
e8:f7:08:c4:75:bd:95:28:51:16:6d:fe:8f:e8:96:
7b:dc:36:ea:de:53:1b:b8:7e:b7:1e:ac:0b:70:d9:
d7:61:03:65:1c:95:02:32:8f:28:a9:72:60:e2:fd:
fc:cc:81:6e:68:8e:42:1f:98:e8:73:8d:e8:9a:c6:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:75:98:32:8A:DC:1A:BA:EC:97:64:A6:3B:0B:2E:12:AC:2C:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C9D2B4E5CDF11F099114FEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ee:4e:32:4a:c5:72:03:08:53:52:38:14:f5:ae:c4:45:90:
80:95:f1:85:48:a2:37:9c:8f:7c:73:ea:9d:5d:bc:01:27:98:
59:80:57:f1:88:f0:e4:fc:12:76:df:58:35:90:1d:23:37:10:
63:d3:b7:eb:da:41:f5:b2:1e:f2:8a:fa:15:44:0a:b8:62:36:
9f:25:50:30:67:bf:22:89:37:5c:0d:c0:1a:df:3f:43:3a:3e:
74:56:03:4e:71:03:e9:8f:09:10:00:ec:5a:38:91:6a:2f:23:
2d:2d:b0:a8:f1:4c:fa:47:6d:07:6b:62:4c:c9:ca:c5:02:f9:
72:73:c5:df:3d:a1:f3:ad:76:e1:6b:8c:d3:87:33:57:d8:ca:
26:40:f6:05:b2:75:b1:8d:6f:7e:6b:87:81:60:01:c7:92:1f:
b8:ea:ff:6d:01:25:f1:93:a8:28:91:69:ff:6f:0f:76:02:cb:
85:da:d7:54:32:c4:55:41:92:52:6c:c3:70:0f:57:fe:c5:dd:
66:ad:b4:34:78:66:9e:71:8b:24:f4:da:2c:99:5d:a0:c7:c7:
a5:41:65:36:1f:f0:c3:97:8b:b2:8c:58:8f:9a:d5:78:59:87:
87:e6:19:26:84:16:74:a7:65:a0:d3:5c:5c:2f:bc:b3:ef:47:
54:3c:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:29:31 2025 by rpki-client