Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C412D8860A111F0B1FE84B9DAE4EC9C.roa
File: 9C412D8860A111F0B1FE84B9DAE4EC9C.roa (raw, json)
Hash identifier: b2k0/LaopIY5C5rQmapWSkvNg3bkoyT7eyv0D8IM34U=
Subject key identifier: 9C:80:1C:22:B9:B9:48:13:A3:B9:EB:F2:A1:3F:1E:5E:5A:6A:46:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01651C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C412D8860A111F0B1FE84B9DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:59:28 +0000
ROA not before: Mon 14 Jul 2025 10:59:23 +0000
ROA not after: Thu 24 Jul 2025 10:59:23 +0000
asID: 54801
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91420 (0x1651c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:59:23 2025 GMT
Not After : Jul 24 10:59:23 2025 GMT
Subject: CN=6874e310-b093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:70:a6:5f:c6:ac:bc:3d:28:a4:0f:88:d6:
5e:a3:22:b5:6c:a4:8b:05:c0:d8:12:1a:90:d5:d2:
f9:8a:b9:35:b3:c2:16:6e:61:6c:aa:1e:57:05:aa:
c8:8f:be:da:bc:61:c9:43:23:88:3e:f0:43:87:f0:
1c:bd:18:07:0b:d3:6e:01:19:52:35:1e:d8:bc:dc:
64:04:50:44:5e:ac:f2:93:f7:bf:9e:f3:69:01:b1:
4e:55:7c:b4:5e:43:81:03:5f:f7:8b:15:0c:ef:81:
45:e8:4a:ac:39:6a:38:e9:8b:c4:3e:de:4f:02:28:
25:4c:92:be:04:d7:4d:20:33:b1:d5:48:05:0a:83:
ff:08:c7:bb:86:4b:b4:31:df:3a:41:d1:cf:25:38:
e0:12:43:2e:93:0b:66:74:d3:89:f2:c9:9d:b1:fd:
d5:d2:34:91:e1:2f:3a:0d:83:9b:54:52:1f:95:dd:
86:24:dc:5a:00:a3:aa:d9:17:70:a4:79:e4:4f:19:
c5:4c:a8:f4:84:54:af:32:79:cd:bd:4c:70:56:05:
d2:24:dc:ab:1d:ae:ab:45:74:f0:0d:60:c9:05:f5:
70:41:9b:9f:41:da:87:05:af:4b:7d:bd:6b:6d:77:
8c:e2:7d:a7:6a:3d:7f:ff:f6:57:0a:68:fa:81:b1:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:1C:22:B9:B9:48:13:A3:B9:EB:F2:A1:3F:1E:5E:5A:6A:46:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C412D8860A111F0B1FE84B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ab:17:e9:2c:f7:ed:80:b2:3d:69:e1:98:3d:cc:a8:5a:94:
cf:e5:e7:0a:b4:ee:65:39:46:fe:46:62:cd:db:8b:22:bb:e6:
d4:45:75:09:e5:89:58:bb:5c:c1:94:5e:b0:34:46:b4:4f:5f:
fe:c2:c5:fb:1f:a5:93:5c:3d:dc:ec:46:d3:1a:42:df:00:a2:
de:01:f5:6a:3b:aa:f7:1e:c3:e2:db:f4:19:98:5a:5f:eb:06:
bd:da:0d:f3:05:08:13:2f:19:a2:ea:49:47:dc:84:10:9b:06:
ee:93:a9:59:d4:e6:cc:6c:1c:8c:e4:63:cb:ab:62:24:c9:e2:
f4:c8:0b:85:aa:59:38:9b:3a:35:02:da:62:7b:ac:02:47:48:
3b:36:fc:e8:26:89:24:15:d0:f3:32:6a:d9:5e:ea:9d:c2:e0:
1e:a8:17:75:0b:8c:4a:94:f0:5b:35:b8:a2:5a:be:70:7c:d9:
0e:61:51:10:a6:9b:7e:e5:86:67:c8:45:5d:80:47:2b:0e:44:
e7:f1:d6:22:97:c8:de:4e:c3:ea:af:6b:87:c8:e5:51:35:b3:
ea:d4:f1:d9:b5:39:ca:ca:07:a9:c8:07:3a:be:fd:cf:a6:fb:
11:f3:4d:1f:4a:69:d7:24:08:0e:c4:9d:7f:2e:18:9d:ea:43:
23:64:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:33:16 2025 by rpki-client