Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658D48545CD111F0A7B81592DAE4EC9C.roa
File: 658D48545CD111F0A7B81592DAE4EC9C.roa (raw, json)
Hash identifier: Xd3c1wlZK+PitNImpNu4bPXrahQSe0redKj5XMSaTnA=
Subject key identifier: C2:A4:E7:1F:A5:A7:DF:D2:07:DB:39:31:F1:43:67:66:E4:E6:F9:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658D48545CD111F0A7B81592DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 14:31:27 +0000
ROA not before: Wed 09 Jul 2025 14:31:22 +0000
ROA not after: Fri 10 Oct 2025 14:31:22 +0000
asID: 272018
IP address blocks: 156.235.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91132 (0x163fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 14:31:22 2025 GMT
Not After : Oct 10 14:31:22 2025 GMT
Subject: CN=686e7d3f-4ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:f1:1c:9a:93:ce:8e:45:6d:68:58:d8:75:
68:e1:25:b9:c0:56:21:49:42:86:8a:a5:c1:94:b8:
d0:8d:7b:11:33:ac:b3:b6:c9:4a:59:31:10:53:07:
e9:00:c9:99:c8:e8:9e:38:ae:51:d0:82:da:b2:c0:
eb:1c:d9:10:8c:57:5d:2b:df:65:86:5a:5e:4d:91:
8b:74:4f:4c:45:88:f6:33:68:65:d4:ae:f7:db:24:
d8:70:d6:bb:6f:e8:2c:03:10:0f:5a:a0:0f:89:b1:
ab:5f:f5:37:75:e3:67:9a:0e:f6:62:d6:d4:21:1a:
b0:bd:30:13:db:75:85:37:0e:93:ed:12:16:7b:bc:
09:ec:e9:a4:16:c4:25:9c:51:d5:08:80:07:de:72:
9a:9c:b0:71:ac:7a:f4:ae:b6:8a:94:49:23:d1:ec:
a0:ad:ac:af:d4:f2:b0:62:0a:22:3b:d7:a2:40:38:
1d:9a:64:6b:4c:3f:60:8f:4e:c1:67:60:76:82:b9:
0e:12:86:e8:94:54:1d:08:61:29:1a:8a:27:3a:51:
09:7a:71:a9:c7:39:00:31:33:05:00:b7:76:26:59:
14:c8:b3:eb:b5:72:ad:ef:4f:4a:a2:fe:c5:d4:33:
36:7e:03:b9:a1:0d:80:af:b9:ac:31:88:26:0a:64:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:E7:1F:A5:A7:DF:D2:07:DB:39:31:F1:43:67:66:E4:E6:F9:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/658D48545CD111F0A7B81592DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.90.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0c:49:9a:7f:97:05:d8:47:4e:33:ed:97:a7:d1:83:5d:c0:
72:0a:7b:74:b0:dd:0b:be:51:5d:14:60:ff:ec:2f:10:de:0c:
cd:c2:29:2a:1e:8a:dc:35:68:eb:4c:fc:50:12:67:76:66:b9:
c1:ea:a5:de:3f:dc:df:76:87:f1:99:4f:ec:cf:49:65:ad:67:
90:b0:35:1c:ec:95:93:14:4a:a5:b9:dd:25:b6:af:5d:0d:06:
eb:54:cc:79:b7:f1:13:e6:4c:09:37:32:d3:77:ca:73:56:3f:
76:4d:83:21:79:83:2e:e5:22:9f:7d:69:0b:f0:9a:b4:13:5b:
de:26:6a:3e:f5:5f:78:3d:45:8a:a8:96:a2:28:d2:0f:e0:a3:
39:31:f7:08:1a:6f:eb:e5:3e:58:5e:4e:de:90:37:56:2e:5e:
cc:25:01:a3:1f:47:f1:f4:97:d3:02:64:a4:77:da:a3:f8:7c:
5d:40:b2:5d:68:0a:82:31:c5:41:91:7f:ea:d7:bb:65:cc:08:
9d:1b:d0:88:22:b2:4b:53:fd:16:ef:fd:9f:bd:62:a4:c7:77:
5c:65:70:fc:9b:0a:18:02:eb:5a:79:61:7f:7d:fe:ee:c6:8c:
6e:11:ca:62:e9:0a:18:65:07:41:6b:21:21:ba:ba:ba:7d:b5:
4e:30:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:50 2025 by rpki-client