Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5505072580C11F08723B281DAE4EC9C.roa
File: A5505072580C11F08723B281DAE4EC9C.roa (raw, json)
Hash identifier: kz0Akx9iq9tcE5O7ax0PtTxvEOXgK7wusNqCb/EZBM0=
Subject key identifier: B8:C1:4C:0D:B9:37:32:C9:D7:4E:D9:A0:7F:6C:5D:AD:6E:F6:A1:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016086
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5505072580C11F08723B281DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 12:52:59 +0000
ROA not before: Thu 03 Jul 2025 12:52:54 +0000
ROA not after: Fri 25 Jul 2025 12:52:54 +0000
asID: 203020
IP address blocks: 156.233.196.0/22 maxlen: 24
156.238.172.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.243.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90246 (0x16086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 12:52:54 2025 GMT
Not After : Jul 25 12:52:54 2025 GMT
Subject: CN=68667d2b-4137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:23:10:73:04:a8:0b:14:9a:69:cc:5b:24:
40:4b:98:fd:02:24:e5:e9:5d:f2:70:61:8e:3b:90:
ea:30:a2:4c:b4:fe:9a:e3:e3:4b:d8:de:57:10:06:
ea:a5:a1:0e:66:ac:c2:ab:ea:be:4d:21:87:6a:35:
c7:a9:07:99:5b:d8:61:f3:ef:d1:a9:56:b4:73:e6:
5c:7c:4a:d2:4e:e6:01:e5:90:62:c6:31:ce:66:bc:
fc:37:5c:01:0b:27:d2:b7:0b:cc:3b:b9:f2:18:2b:
16:95:53:c2:45:04:03:50:e5:0f:13:e3:8c:7e:6f:
56:0a:ac:37:13:a6:e5:99:d7:47:19:5c:b0:0a:43:
fc:3c:9c:f2:0d:46:bd:c8:6b:0b:9b:c2:1c:c8:12:
d2:f0:ee:44:2e:d3:83:51:ce:aa:58:7a:20:8d:68:
5f:49:0e:d4:d8:78:fd:d0:c1:8d:80:23:d5:53:57:
80:c7:f4:96:8b:1b:c5:58:00:d8:97:41:2c:cb:4e:
30:65:c6:c4:a2:67:c5:97:11:d3:0c:df:eb:81:c0:
fa:a2:60:5a:40:89:57:cc:53:63:40:02:63:20:f4:
28:41:8e:34:b6:d2:38:1b:5f:5d:2a:96:65:86:8a:
cb:1a:f6:2e:2e:15:84:45:4a:71:94:34:f7:fd:01:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:4C:0D:B9:37:32:C9:D7:4E:D9:A0:7F:6C:5D:AD:6E:F6:A1:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5505072580C11F08723B281DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.196.0/22
156.238.172.0/22
156.239.136.0/22
156.243.88.0/21
Signature Algorithm: sha256WithRSAEncryption
20:0d:31:a2:37:a2:05:0c:c3:7e:5f:71:7a:cc:38:38:bd:77:
35:1f:f0:7d:2b:45:a2:ff:f9:2c:20:03:59:23:e4:a8:12:2b:
9a:aa:2a:82:f5:43:31:9f:f3:56:c2:ac:7a:fe:77:d2:22:02:
02:c0:fc:7b:47:d6:67:57:08:4a:3a:10:04:60:fe:db:6a:9f:
a0:78:a0:2f:28:1d:65:ec:8e:e1:12:5b:38:e7:99:5c:bb:7a:
09:9b:f4:b7:e2:1c:40:51:19:e5:60:d7:8b:e6:12:8d:e0:d3:
d7:58:20:ef:ae:05:52:7a:f5:88:7a:d0:55:93:52:70:4b:02:
77:dd:22:32:68:a6:c8:7d:0a:71:e8:b5:19:6d:04:63:50:86:
9f:5c:54:7e:bb:d9:9e:aa:16:25:4e:08:5e:a7:bf:a1:13:40:
04:f6:12:f3:68:fa:61:9d:a5:10:cd:a9:c4:78:6f:f6:34:27:
66:66:00:77:e5:f9:fd:73:2e:91:7b:ab:86:2a:0a:c1:8c:83:
3d:b9:55:63:3d:ad:00:ee:98:39:bf:be:8a:69:e9:2c:a0:94:
e0:3d:10:c4:60:e7:8d:5e:e7:18:ed:6b:da:6a:d1:fc:6d:93:
13:c9:c1:9d:fe:5f:6a:d1:f3:1a:29:16:c8:6b:f6:f2:38:a0:
e3:a6:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:14 2025 by rpki-client