Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86BA8E4262EE11F0A0227AC2DAE4EC9C.roa
File: 86BA8E4262EE11F0A0227AC2DAE4EC9C.roa (raw, json)
Hash identifier: zl0WHhxCrpFT83Vfekl9nnLMyts7TK05eBAa4FGlRZA=
Subject key identifier: 98:7F:49:6F:AA:0C:CF:94:B9:E5:30:16:5E:06:40:04:10:97:AA:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86BA8E4262EE11F0A0227AC2DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 09:15:06 +0000
ROA not before: Thu 17 Jul 2025 09:15:00 +0000
ROA not after: Fri 22 Aug 2025 09:15:00 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91590 (0x165c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 09:15:00 2025 GMT
Not After : Aug 22 09:15:00 2025 GMT
Subject: CN=6878bf19-9861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:9c:35:a8:29:d5:40:13:28:82:e6:76:9b:
aa:01:10:15:38:bc:56:e4:a5:08:ae:15:7d:a5:ef:
dd:42:84:32:af:f3:66:07:61:78:5e:c6:43:69:91:
6f:03:84:9b:2c:65:3c:93:fb:b1:3d:3e:b9:e8:7d:
84:a8:90:c0:41:31:db:64:d4:e8:e5:e1:86:d8:fa:
7a:da:b8:46:39:5b:47:3b:97:20:07:d4:62:24:b9:
48:8b:34:74:3e:af:43:b6:2d:1b:25:72:08:f2:fe:
74:4c:95:ac:9d:52:ad:a0:a5:f0:43:e8:6d:d4:19:
67:e2:b0:b7:e1:6b:7d:f8:e6:ad:42:aa:5f:aa:7a:
c2:db:0e:7a:c3:d4:1f:04:bf:3a:9e:3f:ae:f5:f5:
60:b6:d0:eb:96:c3:5e:85:f6:08:79:ac:95:60:ca:
d9:55:64:e8:d6:d6:a3:14:93:54:b2:35:df:bb:90:
f6:e2:cb:5d:37:0b:0d:5f:cd:08:e5:98:02:98:1f:
6f:fb:c5:a6:c5:74:d1:d6:ba:7f:1d:47:ca:18:16:
08:31:43:3a:09:60:23:bb:c9:de:38:e5:91:de:9e:
61:5e:a8:e4:aa:c1:da:ba:29:54:02:45:8a:14:52:
8d:ea:8a:b1:cd:04:3e:17:66:e1:85:5f:db:5a:d2:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:49:6F:AA:0C:CF:94:B9:E5:30:16:5E:06:40:04:10:97:AA:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86BA8E4262EE11F0A0227AC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:f6:d6:63:17:e9:0f:4e:31:b2:7e:40:e5:6c:87:f6:ff:dc:
b6:07:bb:9a:dd:7b:38:f6:3a:9b:35:b8:44:e3:4d:0e:92:24:
67:a8:78:5d:38:b3:ce:e4:8f:20:fc:72:8a:cf:2f:6e:2f:df:
d9:9e:0c:59:f5:81:fe:36:fc:9b:ce:65:02:3e:e3:51:db:27:
5a:54:68:d5:99:3d:8c:a9:3d:26:ef:3e:9c:ad:6b:da:e9:cc:
12:0f:f7:20:c8:2d:64:c1:a0:4a:1d:57:26:17:5c:3e:29:97:
28:93:11:2f:6b:27:7a:5d:54:4c:84:b6:c6:38:b6:2b:55:6e:
97:29:fa:e4:d2:d6:c1:a7:ed:24:8d:2f:75:67:d3:38:21:de:
dc:5e:8a:68:c8:bd:f9:a3:09:f5:35:2c:0b:bd:f5:9a:b8:1d:
29:7a:cf:5b:10:ac:8f:52:a9:d9:55:e1:7a:c1:1e:29:c3:d0:
ac:b3:af:35:5d:81:0a:d8:e5:1e:14:f1:4d:c0:15:f3:8c:88:
d5:8c:73:e4:3c:79:f4:01:f8:76:20:bc:9c:f8:f6:7f:2e:27:
44:90:12:b2:53:eb:df:1e:11:d3:39:7e:cd:4d:74:70:ef:24:
9d:b9:e3:54:a7:6f:17:67:d7:dc:41:57:3f:2d:5d:2a:f1:c3:
71:ae:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:37:35 2025 by rpki-client