Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4C1B9C591311F0BFCEE6A9DAE4EC9C.roa
File: 7F4C1B9C591311F0BFCEE6A9DAE4EC9C.roa (raw, json)
Hash identifier: 98Q/KcpKCHnHxHrIdjiMRxmfS3fxgzzkpRa+YFFfoVM=
Subject key identifier: AA:F9:ED:F2:EC:A2:3A:F8:93:6B:36:81:87:57:A8:12:7B:A1:14:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01613E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4C1B9C591311F0BFCEE6A9DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 20:14:33 +0000
ROA not before: Fri 04 Jul 2025 20:14:28 +0000
ROA not after: Fri 26 Jun 2026 20:14:28 +0000
asID: 137263
IP address blocks: 156.225.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90430 (0x1613e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 20:14:28 2025 GMT
Not After : Jun 26 20:14:28 2026 GMT
Subject: CN=68683629-f8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:6a:90:3f:ea:1c:bc:c9:15:03:f6:88:d0:
fd:10:38:3f:2e:f4:29:b9:cc:40:6d:8d:68:00:39:
3c:6e:99:3b:57:50:0e:29:85:f3:66:fa:6d:84:ad:
53:b3:3a:5d:83:ea:8b:a8:32:6d:71:e6:cb:33:48:
a3:6e:4a:df:2b:36:a0:cf:4b:93:08:b4:ba:f8:05:
27:fd:45:89:5b:98:84:c7:71:bb:b3:16:b2:7e:d0:
25:3a:17:18:c2:0e:1f:05:70:40:ec:dd:99:81:98:
fa:6f:0d:fe:05:6c:80:ef:90:29:6b:c9:ec:6d:a4:
37:fb:72:58:bb:7a:3e:58:90:88:fd:d9:23:ba:d4:
76:b7:31:c8:76:0f:a8:f1:30:fe:dd:c3:68:8a:a0:
16:b2:94:19:e1:41:8f:e2:5b:77:ab:a3:db:84:8f:
49:26:8e:0d:dd:bd:22:9e:4a:31:a4:ba:c2:2e:d6:
f3:d7:1a:03:a1:fa:73:1c:87:eb:1d:fa:2b:0c:fd:
f4:73:76:cb:89:5d:28:d1:63:75:90:34:b4:c9:25:
a6:2e:1b:b7:af:31:08:91:bb:56:98:29:a1:c2:df:
97:26:51:76:fe:31:0e:2a:d7:ad:c1:4a:f8:01:28:
0c:d9:29:74:5a:4e:f9:d1:b5:98:eb:9d:29:59:2c:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:ED:F2:EC:A2:3A:F8:93:6B:36:81:87:57:A8:12:7B:A1:14:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4C1B9C591311F0BFCEE6A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.180.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f7:9b:a3:a6:35:a5:3f:4b:00:0e:1c:12:18:25:83:2d:bf:
44:bb:a0:1b:c9:86:63:85:1d:9c:c6:7f:c2:d2:fb:52:35:6e:
4a:04:70:0e:46:a1:19:db:f4:8f:44:30:ec:9f:c4:94:38:97:
17:fd:6b:20:2c:93:f9:82:a7:4b:e9:27:bd:7b:e4:c3:e6:94:
12:9f:f7:73:b8:87:16:2a:b8:f9:41:fa:4e:4b:51:69:ba:fc:
24:8f:29:08:33:f3:21:8f:d3:ea:ac:6b:1b:16:8b:e9:fb:ed:
23:06:b4:d3:5c:73:00:33:b8:2f:ae:eb:26:45:cb:25:51:69:
27:5b:0c:a0:3d:3b:ea:58:2f:0a:3a:b0:3e:06:2d:1d:ec:1f:
10:96:93:26:49:dd:3c:5e:7a:a8:d9:c0:77:2e:6f:83:73:c6:
bf:4b:0e:2c:e2:3b:f8:05:9d:2a:ff:36:1d:51:35:4e:70:87:
58:d8:86:c8:4d:1a:64:1e:d7:db:80:46:c7:9b:fe:88:32:a0:
f3:f1:d3:e2:56:3e:d4:13:8b:13:9d:56:e9:df:7f:3d:25:d1:
71:65:33:3c:08:e5:c4:d4:47:91:c9:c5:e2:2a:e9:fd:cc:4d:
c1:90:1f:1a:f7:35:db:87:76:c9:b5:ab:de:73:27:b9:a9:0b:
f4:4a:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:49:36 2025 by rpki-client