Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7047549A62EB11F08080C7ABDAE4EC9C.roa
File: 7047549A62EB11F08080C7ABDAE4EC9C.roa (raw, json)
Hash identifier: KN8A9UVH4j/sDm7Z1VSRPSUBjP7a+nQTaZqfAeiX9NU=
Subject key identifier: 05:0A:DF:D6:11:9F:18:E7:FB:2F:E4:E6:92:61:96:0E:27:B9:1B:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7047549A62EB11F08080C7ABDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 08:52:59 +0000
ROA not before: Thu 17 Jul 2025 08:52:54 +0000
ROA not after: Sat 26 Jul 2025 08:52:54 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91574 (0x165b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:52:54 2025 GMT
Not After : Jul 26 08:52:54 2025 GMT
Subject: CN=6878b9eb-efff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:90:e6:5d:cb:b9:c4:54:7f:df:4b:c7:77:
a1:49:c3:a7:68:cb:cc:14:17:1c:5a:18:e6:6b:81:
ca:0a:0a:11:6c:1c:f7:f4:31:8e:55:e9:fa:6d:3b:
fa:c9:83:40:2e:2e:6c:b0:9b:cd:30:27:ee:f4:60:
63:5a:2b:3b:98:52:99:53:42:52:f7:d7:71:5e:1b:
fa:29:2a:02:92:63:6f:35:58:1f:5d:9c:69:25:f8:
01:b1:7b:a9:76:08:90:89:a9:1d:81:f9:fc:ef:43:
5a:82:a3:c4:cd:b3:0d:13:a5:b5:9f:65:78:ac:66:
2f:65:d0:42:77:8a:39:e9:02:c2:6f:35:91:39:28:
83:1a:b2:44:6c:d2:9b:b0:83:3b:32:19:20:85:b1:
e7:05:4e:3d:ce:3e:0a:86:6f:38:be:16:95:c5:a6:
0f:28:01:da:c0:80:e2:1e:86:8a:31:cf:de:c0:12:
a5:99:86:fd:f5:99:82:0d:75:d0:5f:2b:50:28:f3:
b3:f7:85:78:56:16:27:62:66:b0:8f:83:b3:71:41:
d7:ed:36:18:1f:80:8b:9b:e3:30:ba:24:51:d7:24:
0d:b3:32:1f:41:2f:9a:5f:19:8a:6c:28:89:42:f6:
6e:9f:75:88:38:ff:42:eb:a5:ab:3f:d4:05:3a:98:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:DF:D6:11:9F:18:E7:FB:2F:E4:E6:92:61:96:0E:27:B9:1B:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7047549A62EB11F08080C7ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0/21
Signature Algorithm: sha256WithRSAEncryption
90:c9:f6:48:b1:e9:50:91:3f:83:1a:d2:d0:4d:d1:8d:92:03:
99:39:94:7b:e5:42:53:2a:16:ca:3d:3f:f6:9d:a4:07:6c:16:
84:d1:7d:89:02:f7:f8:43:f0:6c:07:67:0f:46:80:94:9c:78:
5f:c6:a8:1e:64:6b:e1:d9:95:92:76:d7:2d:c5:c9:f8:ac:50:
3d:9d:1d:e9:2a:b1:53:ce:56:1b:13:23:e4:b2:9d:64:e4:d8:
8a:76:a1:36:e9:12:5a:4d:50:64:b1:0a:9f:81:5a:6f:3b:a6:
b9:0f:ec:ea:54:40:16:9d:32:a5:53:b6:9e:95:94:56:2e:c7:
a1:3c:f6:98:be:31:e2:bd:26:cb:81:c4:92:da:c7:4a:06:8b:
12:8f:de:4d:ca:85:60:55:b9:55:c7:36:e2:a0:b8:57:71:c9:
bd:46:a6:fe:ac:32:dd:bf:bc:87:39:b6:40:d3:bb:3e:c6:b7:
77:2c:71:fc:a4:ff:8d:af:5e:15:73:61:24:6b:f2:c6:0c:f2:
5d:04:ac:f4:52:b4:47:e5:2a:cb:67:c4:9e:6b:ac:8b:05:96:
ea:bf:7f:ec:12:69:17:47:48:d6:b4:4a:37:b9:ca:ec:31:09:
94:03:7f:6c:cb:a5:53:73:43:e1:a2:c6:21:ff:af:d3:74:63:
22:5e:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:29:39 2025 by rpki-client