Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE7C4125AC111F093B06495DAE4EC9C.roa
File: 7EE7C4125AC111F093B06495DAE4EC9C.roa (raw, json)
Hash identifier: HsDMIqhvqxWiy0EMoY4s9HFDb0MRTFzQ4eapavaA8q8=
Subject key identifier: E4:30:3B:2A:AB:88:F0:0E:05:1E:DC:D0:EE:F3:12:71:28:71:74:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016295
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE7C4125AC111F093B06495DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 23:32:36 +0000
ROA not before: Sun 06 Jul 2025 23:32:31 +0000
ROA not after: Fri 17 Jul 2026 23:32:31 +0000
asID: 398478
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90773 (0x16295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 23:32:31 2025 GMT
Not After : Jul 17 23:32:31 2026 GMT
Subject: CN=686b0794-06ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:59:9b:44:1a:fc:38:5d:ba:4d:2a:7e:78:
6a:ae:18:53:15:80:91:b9:6c:23:c3:97:35:c7:75:
2d:45:04:97:e7:8c:9b:26:af:95:ff:e9:ac:00:7a:
10:41:64:09:62:56:9c:de:b4:57:10:09:d8:11:64:
cd:74:5e:8a:b5:95:3b:da:8a:c5:5f:c3:c3:2a:37:
8a:22:28:3a:b6:97:84:19:12:b1:35:2a:a5:5b:22:
f1:a0:29:72:27:9f:ac:ca:97:f1:06:d2:a4:36:b0:
3e:cb:16:cf:3a:1a:2d:4a:af:3d:41:2c:d9:51:8a:
3e:02:45:65:22:10:0a:62:e8:75:f7:ea:8c:f4:33:
3b:60:23:46:da:dc:75:22:e5:9c:0a:c1:e0:88:2a:
ed:b2:48:35:0d:09:dd:92:3b:09:01:c2:4b:38:ce:
b8:cd:d8:a4:03:7f:29:d7:ff:e2:2b:95:32:4c:2f:
15:ed:b1:1c:9a:f6:2c:bd:6a:4f:5f:ff:42:ba:80:
c6:01:81:55:3d:d4:ee:f2:20:7f:1d:00:00:c8:07:
68:73:35:88:20:c4:38:2d:67:a4:2c:da:8b:a2:9c:
fd:35:04:de:da:ce:94:30:ae:9a:57:ec:d6:27:59:
9e:8c:df:7b:8f:21:7c:84:00:b9:78:53:29:62:3e:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:30:3B:2A:AB:88:F0:0E:05:1E:DC:D0:EE:F3:12:71:28:71:74:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE7C4125AC111F093B06495DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
59:9d:33:24:fb:02:82:0e:87:78:10:ab:45:65:12:87:29:58:
dd:b2:8f:77:e5:87:dd:c9:c6:06:63:51:dd:0b:60:8f:aa:1e:
b1:5c:46:75:65:21:5a:89:bb:73:31:27:c5:11:f3:45:14:69:
8f:cb:a2:71:cc:0b:c8:c5:38:00:43:2b:ca:9b:b4:16:35:d8:
ec:b5:9c:5c:e8:f5:75:e2:61:df:f3:c3:b2:43:f1:fb:02:17:
64:f6:16:05:c3:83:81:1f:81:15:cc:8b:5b:b5:a7:3e:54:5f:
18:c3:61:36:37:cf:47:23:85:ca:06:31:12:f4:cd:0b:7a:3e:
da:e6:1b:3d:c4:7c:c9:1c:7e:ae:3d:18:be:c5:ab:13:48:ec:
4f:82:50:2a:06:55:7d:e5:6b:b4:3f:8d:52:fc:f6:07:01:1b:
64:36:c2:bc:0f:88:91:4f:50:e8:1a:f3:f3:a4:ea:49:90:67:
66:a6:71:0e:dc:4a:55:a9:2d:31:8c:f7:28:26:aa:24:e7:ff:
f6:d2:22:73:21:41:0d:fc:9c:48:d2:20:97:ec:23:8b:05:85:
a1:dc:16:7b:d3:e0:b5:59:fe:fd:2b:00:06:8b:ad:e8:22:fd:
e8:55:5f:3d:bd:3f:92:64:10:06:99:56:7b:aa:92:24:a3:4a:
48:08:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:32:05 2025 by rpki-client