Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7B6B4C5B5411F099575ADDDAE4EC9C.roa
File: 8A7B6B4C5B5411F099575ADDDAE4EC9C.roa (raw, json)
Hash identifier: +K14LYZZZ8ceIV9spm2mvI93GUj9hFhYm0no/7w4UmI=
Subject key identifier: D3:08:47:D3:A4:C1:72:11:92:22:EB:8C:EE:AC:C0:90:DA:92:56:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016334
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7B6B4C5B5411F099575ADDDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 17:05:11 +0000
ROA not before: Mon 07 Jul 2025 17:05:06 +0000
ROA not after: Fri 17 Jul 2026 17:05:06 +0000
asID: 18013
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
156.241.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90932 (0x16334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 17:05:06 2025 GMT
Not After : Jul 17 17:05:06 2026 GMT
Subject: CN=686bfe47-eaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:00:55:b1:0f:0a:62:cf:9f:47:5b:53:67:
f4:81:5d:be:eb:35:84:a6:76:32:1b:37:bd:c3:88:
bd:df:c2:c6:57:ce:b3:7f:01:dc:54:cc:f2:a2:3f:
99:82:aa:18:92:2e:c5:99:a8:19:c6:8d:e3:03:b6:
fa:fa:0f:e2:1a:a0:20:8e:88:8f:fa:ab:d7:d0:7d:
63:cc:67:51:46:7f:cd:a6:63:4b:74:b8:95:e6:70:
2c:62:fc:7a:b2:d6:9c:b8:c3:00:a9:b7:8b:fb:89:
15:e9:ef:3d:95:d8:53:3a:a7:7c:26:1a:99:83:9a:
c4:f7:72:e5:ac:59:3f:27:62:e9:1c:5f:ac:53:bc:
78:b0:a4:73:47:a9:dd:d4:03:7b:f5:94:a9:f7:72:
e9:98:96:90:dc:14:e1:a1:76:8e:a4:66:c3:b2:e3:
12:78:fb:c9:37:8b:f0:aa:aa:26:7a:e8:9e:a1:cd:
19:bf:60:b2:97:21:be:3b:ba:c4:25:3f:db:08:19:
6a:a6:9f:63:56:50:f3:00:cc:fb:6c:fd:c8:2f:a8:
f9:40:e3:28:8d:30:48:37:b9:8e:33:15:7b:1d:87:
7a:2d:c8:1e:b2:fb:8f:b6:5b:52:78:9e:ff:30:60:
5c:3d:3b:92:c0:64:30:23:16:03:ab:1b:58:7b:79:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:08:47:D3:A4:C1:72:11:92:22:EB:8C:EE:AC:C0:90:DA:92:56:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7B6B4C5B5411F099575ADDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
01:41:41:0f:c7:4c:f3:91:47:a6:7f:4b:38:e4:65:a9:33:8a:
0c:66:9e:5c:7e:1c:c6:83:24:db:31:e5:d1:01:7b:6d:ae:9c:
31:fb:95:99:61:f4:5f:87:29:f9:b1:dd:18:dd:a0:45:2a:ae:
08:57:3a:36:d5:01:04:a8:9c:54:15:6b:11:1e:43:42:38:eb:
17:36:ef:a7:f4:4b:64:b8:d8:49:2c:99:19:d0:0b:bd:45:28:
03:35:0c:c4:37:7e:62:24:05:db:db:60:71:2e:b1:6f:a6:af:
75:57:6a:b5:b8:c1:c1:c1:f3:99:3f:9b:92:d6:4b:59:47:00:
bf:b4:4a:3f:fa:c9:e3:37:a9:db:c2:68:c1:eb:d8:12:c1:6f:
69:cc:34:ed:68:8b:e3:f9:e1:1b:36:cf:ec:31:f9:45:06:20:
41:e3:6c:30:c2:1d:10:b4:6d:f2:d1:df:c6:22:8b:97:5f:fa:
26:b1:75:e2:e9:4f:03:96:f0:5b:6a:4a:12:67:22:26:5e:62:
91:5a:85:72:a7:44:88:3d:00:76:9a:bb:c4:64:2f:0b:b7:0e:
ee:d6:20:0d:42:88:30:a7:d5:7b:a1:1c:b5:90:74:82:4c:d2:
9b:ec:05:a0:6b:44:dd:ad:b4:5d:83:77:17:91:77:63:8a:1b:
e0:64:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:14 2025 by rpki-client