Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70E30E2059CD11F099EBCDE7DAE4EC9C.roa
File: 70E30E2059CD11F099EBCDE7DAE4EC9C.roa (raw, json)
Hash identifier: Q940OBfHWGfwxuW1m4t6e3lAZjC1EC6q3ZFbNJUk3Ps=
Subject key identifier: E5:7B:6F:29:D7:C6:B8:D1:2E:B6:92:5F:0B:71:BF:2D:34:16:97:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70E30E2059CD11F099EBCDE7DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 18:25:35 +0000
ROA not before: Sat 05 Jul 2025 18:25:30 +0000
ROA not after: Fri 17 Jul 2026 18:25:30 +0000
asID: 398993
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90575 (0x161cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 18:25:30 2025 GMT
Not After : Jul 17 18:25:30 2026 GMT
Subject: CN=68696e1f-08a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:d4:38:b3:cf:8f:08:f0:a9:91:05:8e:57:
ea:e1:f4:c7:32:99:40:14:8f:9a:98:39:12:53:e8:
55:e3:c7:e6:0f:3a:f5:60:a0:4c:29:6f:6b:76:6f:
cd:35:c4:fd:47:25:f6:e5:f9:33:2a:d1:01:a2:46:
ca:17:5a:d7:6b:0f:18:d3:67:47:23:c2:46:77:5c:
4f:c8:87:41:8a:fb:1d:47:db:b2:f3:6b:70:43:9a:
04:f2:79:36:01:92:da:4c:91:35:03:cd:fc:19:47:
4c:b1:cf:e1:9b:59:c8:dc:ea:74:88:65:3d:f0:a5:
dd:dd:c4:04:7e:71:4c:88:0e:ad:d0:32:49:8a:9c:
89:25:13:9c:ea:e3:31:c9:5b:97:42:9f:7b:48:9f:
82:76:b5:c4:8a:02:80:33:bd:a5:3e:82:e0:82:28:
47:0c:6b:19:d3:b7:05:6f:57:4f:46:bc:6e:cd:ee:
aa:3e:3d:19:c6:ad:39:bb:9d:cd:3e:07:57:a5:5c:
08:8e:6d:17:ae:09:46:bb:14:ac:d3:c3:16:f4:82:
33:b3:04:b1:33:45:37:60:81:3c:d1:02:2c:00:30:
c5:ca:56:a6:34:50:93:77:34:36:97:8a:fa:37:dc:
ea:7e:8d:55:4d:07:9b:92:5e:c7:65:3a:b7:1e:34:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7B:6F:29:D7:C6:B8:D1:2E:B6:92:5F:0B:71:BF:2D:34:16:97:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70E30E2059CD11F099EBCDE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
b3:fa:ec:8c:8e:ce:8e:8b:7a:a0:f2:d9:23:d6:e4:e0:46:45:
77:8c:8f:b5:33:5c:18:ea:48:e6:27:7a:d6:dd:b9:6a:a5:86:
01:01:b0:f8:51:7a:1b:32:b4:8a:70:40:2f:c0:7c:91:18:d4:
28:d2:1d:bf:14:a6:7a:8a:ca:06:1a:51:87:9b:94:ac:e1:e0:
18:0c:67:f5:6f:15:6b:7d:80:56:e5:f0:46:75:8c:7e:73:e7:
09:a7:5a:1a:58:88:7f:60:59:4a:9a:fd:02:5a:43:e1:e4:41:
7c:02:54:d9:75:a0:aa:a2:73:18:ae:ca:4b:c9:11:2d:cf:6a:
a7:02:cf:eb:72:48:40:9f:7a:ae:69:77:cd:93:5c:30:d6:47:
98:8f:0b:aa:8c:c6:23:1e:a1:41:68:26:4a:ee:94:6c:09:f7:
be:ac:15:e3:bb:d6:d7:6a:ce:4c:aa:72:00:7f:fe:ae:94:d3:
96:62:f0:11:bb:f3:21:1e:af:e3:15:38:72:13:7b:51:3e:c7:
ab:0f:86:68:7c:9d:01:09:15:e0:f3:0a:e2:e7:e0:77:47:55:
45:8c:fe:8b:36:37:3b:99:33:77:cf:88:b3:53:58:0a:01:dc:
d5:71:ec:6b:40:d1:1e:e6:bf:ca:e6:74:1d:08:8c:bd:b9:de:
63:52:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:48 2025 by rpki-client