Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/913CD8185CAC11F089F514A4DAE4EC9C.roa
File: 913CD8185CAC11F089F514A4DAE4EC9C.roa (raw, json)
Hash identifier: +1kjFyOzKfu8p5/OKteNoiaV9v+t4s5/43A55UetX84=
Subject key identifier: 49:8D:F3:7C:D4:DA:FF:60:62:E9:82:63:7E:BD:77:B8:20:FF:BE:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016391
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/913CD8185CAC11F089F514A4DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 10:07:49 +0000
ROA not before: Wed 09 Jul 2025 10:07:44 +0000
ROA not after: Thu 07 Aug 2025 10:07:44 +0000
asID: 200373
IP address blocks: 156.228.95.0/24 maxlen: 24
156.228.96.0/24 maxlen: 24
156.249.137.0/24 maxlen: 24
156.249.138.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
156.253.167.0/24 maxlen: 24
156.253.168.0/24 maxlen: 24
156.253.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91025 (0x16391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 10:07:44 2025 GMT
Not After : Aug 7 10:07:44 2025 GMT
Subject: CN=686e3f75-14c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:56:1f:a3:a9:7b:6e:52:27:21:5e:e4:4b:
eb:97:83:e7:01:3c:f7:4c:cb:2a:b5:e2:32:55:01:
38:a5:42:4b:9b:00:fd:55:fb:30:7b:62:e6:31:6b:
0d:5f:62:c4:61:91:a5:97:b9:98:80:32:18:bd:09:
7d:e2:f8:f0:8d:5f:fb:39:1a:58:57:55:f9:b4:db:
de:82:31:8d:79:14:d3:2e:5a:00:37:33:b5:d1:9a:
01:42:85:b0:c8:5e:93:3f:78:63:15:ff:69:e6:e1:
ef:72:5a:08:45:33:97:99:77:cb:4f:5b:d0:73:8b:
5d:97:e7:96:05:11:6c:10:66:7d:8c:b0:ab:d5:58:
f1:4d:07:95:a5:a2:84:b8:5a:32:71:48:77:a7:ed:
33:a5:b3:ed:4c:71:82:26:c3:23:51:ca:80:ec:8a:
b1:53:f9:42:87:9c:bd:df:23:e7:9c:60:44:df:4a:
24:58:34:e5:ca:fa:93:0d:fe:12:0f:ed:7c:86:ec:
f4:ce:f0:11:e0:16:cf:53:82:75:37:f3:c0:d8:e3:
33:fa:21:20:87:7c:0e:11:b1:2f:58:9c:36:ba:b0:
c4:3c:92:24:43:da:fc:cb:f8:ed:77:e9:4d:9c:ac:
9a:1c:6b:e7:66:47:59:8f:3f:97:76:67:b0:b2:f1:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8D:F3:7C:D4:DA:FF:60:62:E9:82:63:7E:BD:77:B8:20:FF:BE:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/913CD8185CAC11F089F514A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.95.0-156.228.96.255
156.249.137.0-156.249.138.255
156.253.164.0-156.253.169.255
Signature Algorithm: sha256WithRSAEncryption
14:18:c0:ed:ac:e2:9a:b0:1b:52:be:1c:58:89:3f:34:36:e8:
dd:59:ea:32:9b:17:f2:3c:67:1a:75:b3:0c:1a:35:d5:29:64:
28:b7:81:dd:c5:9a:10:e9:7f:88:2c:79:91:eb:7c:b5:a9:18:
f0:fc:51:77:3e:74:2e:e4:8d:3e:b4:0a:ec:73:82:f5:e9:85:
d1:36:7d:3e:f8:6e:c8:03:70:3b:c3:97:e8:74:d4:c9:40:81:
8a:47:93:1e:21:27:8a:6b:40:12:75:9b:d7:d2:74:1d:97:ab:
c9:4a:aa:a1:66:42:62:28:e8:82:6f:55:6e:ee:d4:82:4e:1e:
71:ac:9d:06:3a:43:c2:ad:3f:89:7e:4c:8c:0d:07:f0:46:5f:
da:4b:da:82:a5:0d:31:d0:50:ea:b8:94:f5:f2:bd:11:c0:c9:
f5:06:2f:a7:ec:ca:73:4c:2a:cc:6f:7c:e2:09:11:4f:83:23:
4c:a1:16:29:b3:c1:02:e2:b7:aa:90:d3:03:a7:fb:62:ed:0e:
44:f2:20:66:6d:7c:a6:67:62:ff:d5:1d:d5:c6:51:5c:99:23:
73:54:fb:b7:e7:00:a2:07:e7:6f:76:79:1f:82:2e:d6:0b:f8:
e9:b1:be:7c:c8:f5:73:3b:fa:43:3f:55:fe:95:b2:e4:e5:a6:
78:f5:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:26 2025 by rpki-client