Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67ABA8E8609F11F085463AACDAE4EC9C.roa
File: 67ABA8E8609F11F085463AACDAE4EC9C.roa (raw, json)
Hash identifier: zeSMDRnd1v+dKkaWNEIGnmvTh8hz/BF3kprkz1zmlhs=
Subject key identifier: 36:2D:DA:00:FD:34:B8:73:CD:A2:3C:BF:83:B0:63:0B:B6:B8:B5:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016514
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67ABA8E8609F11F085463AACDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:43:41 +0000
ROA not before: Mon 14 Jul 2025 10:43:35 +0000
ROA not after: Thu 24 Jul 2025 10:43:35 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91412 (0x16514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:43:35 2025 GMT
Not After : Jul 24 10:43:35 2025 GMT
Subject: CN=6874df5d-a68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:04:4f:f9:24:6e:a0:b8:0d:e2:b7:c5:8b:
2c:d7:3a:42:d0:1c:05:5a:18:51:85:90:ad:10:24:
fc:9a:4e:d2:9e:89:1d:b6:9c:23:da:cc:76:05:6f:
8e:3d:74:b3:5c:e6:b7:6f:08:63:6a:80:eb:2f:f3:
35:16:69:7e:4d:66:00:43:2a:75:5c:e3:58:88:80:
20:3b:05:4c:1a:7c:33:c3:d7:21:3b:69:c0:35:82:
01:ee:ef:26:09:52:c8:76:42:22:7e:70:d4:28:68:
35:8c:ca:88:9b:55:ce:4d:08:36:91:e9:6a:4b:2a:
d9:ab:8e:d8:4f:a0:5a:eb:02:40:97:06:de:ae:3e:
d3:5a:eb:12:45:ef:81:1e:2b:d6:a7:a3:26:2a:76:
64:f3:b5:af:9b:bc:0f:ef:e4:2d:3d:43:3c:3b:5d:
c2:4a:4a:76:78:86:78:75:f7:77:1c:ec:ee:d9:e7:
89:30:29:8a:87:29:4b:d0:69:df:ba:38:76:da:21:
dd:bd:d1:46:e7:2b:da:26:16:7e:ed:6e:d9:c7:7f:
d3:89:33:e8:ca:37:c7:b9:5e:e3:80:c7:2d:73:87:
7f:66:ff:c6:8c:7b:96:57:f5:8e:7b:dc:67:8a:c1:
36:7c:f2:68:af:e2:76:1a:8f:ba:9c:37:24:7f:f4:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2D:DA:00:FD:34:B8:73:CD:A2:3C:BF:83:B0:63:0B:B6:B8:B5:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67ABA8E8609F11F085463AACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2e:ee:93:d3:f9:3f:83:1b:b1:f4:8b:82:ed:15:b9:bb:3a:
59:68:c0:29:6b:0a:64:79:0f:b4:2b:90:91:65:6a:ed:05:67:
c1:97:32:a0:1c:cd:23:79:92:c7:58:dc:7f:7c:7b:b4:44:36:
5f:89:f3:ae:da:19:30:32:5f:41:f4:a8:14:05:e3:e1:ad:c5:
17:88:37:dd:b3:82:f4:c5:f4:c4:7a:33:d1:f8:e7:69:ce:8a:
18:39:16:e5:71:6f:57:62:af:e9:a0:27:bf:4a:95:91:63:88:
8f:32:a2:b1:85:ab:bb:b7:fb:d1:1f:5f:a4:55:24:67:a2:59:
98:79:a0:d1:88:77:9f:cd:4e:54:a8:ea:65:f7:69:77:ae:49:
a5:d0:bf:46:10:77:2a:8e:54:69:7d:a2:65:65:4b:71:7b:ec:
8e:64:f0:91:14:d4:52:fa:c6:25:19:6a:f9:86:9c:00:9f:7d:
6d:a4:ac:0b:e2:2e:e0:0a:ea:e8:4d:c3:86:4f:49:97:53:78:
5c:57:bb:b0:de:e5:f5:96:7a:d6:65:1d:13:00:b9:b5:1c:1a:
c1:98:12:25:5f:0c:52:27:2f:09:ec:5e:6a:d1:bd:9c:7e:e5:
ae:9a:ee:5b:c1:37:6c:3a:3a:8b:61:8b:32:9e:ba:d3:dc:ac:
33:de:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:18 2025 by rpki-client