
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6553C9A5B8511F099ACFC96DAE4EC9C.roa
File: A6553C9A5B8511F099ACFC96DAE4EC9C.roa (raw, json)
Hash identifier: s0BhYoEILaYJRq8WU9/ihMMg7vwonfNxGQ4ZzACpAoI=
Subject key identifier: CB:0A:6C:80:61:9A:BF:8E:19:EE:0E:DA:47:55:03:6E:8B:AA:81:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016358
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6553C9A5B8511F099ACFC96DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 22:56:43 +0000
ROA not before: Mon 07 Jul 2025 22:56:38 +0000
ROA not after: Fri 26 Jun 2026 22:56:38 +0000
asID: 137263
IP address blocks: 156.225.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90968 (0x16358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 22:56:38 2025 GMT
Not After : Jun 26 22:56:38 2026 GMT
Subject: CN=686c50ab-37af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:ff:86:f4:a1:90:28:b4:92:b8:18:31:18:
8c:93:f9:18:e6:03:f5:83:70:2c:ef:5c:3c:e8:a8:
6e:0a:fe:1a:21:94:c9:67:77:c1:23:f7:86:3e:e6:
8e:a0:f9:f2:0e:cd:9b:4e:88:d3:07:d3:9c:37:ac:
e7:06:68:48:8e:34:60:40:e4:80:40:d9:fd:06:85:
0d:2d:fb:40:32:c3:62:b4:6f:4a:ac:20:f5:6b:89:
96:5b:1c:19:74:39:8f:aa:c1:5e:ff:93:fc:7f:52:
e4:3b:e0:d7:bc:02:d2:0a:2f:92:06:e0:28:19:b1:
a4:c2:f3:36:ab:12:17:42:72:35:06:46:de:e9:a6:
39:46:dc:30:ae:db:94:81:6e:fa:ef:9f:db:e9:8c:
8c:ba:d6:15:57:f8:f1:b5:20:2f:69:3f:03:9b:d8:
8a:59:2c:e7:36:17:79:22:bd:19:35:6c:5b:72:06:
c5:b1:7b:96:1a:8c:6c:b0:b8:34:48:45:1c:fe:78:
32:f1:96:b5:64:51:63:a2:df:61:1a:cb:df:dc:80:
83:15:33:1d:92:eb:bc:87:38:3d:eb:d9:e5:6b:d0:
5a:ae:e7:aa:a8:da:3c:f4:97:ad:e2:3c:75:d6:00:
af:c1:91:b3:6b:a5:15:6a:e4:a9:47:14:4a:81:0e:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:6C:80:61:9A:BF:8E:19:EE:0E:DA:47:55:03:6E:8B:AA:81:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6553C9A5B8511F099ACFC96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8d:10:74:72:14:bc:33:bc:54:5d:11:30:1f:11:37:6c:9e:
fa:20:81:83:ef:c1:9d:69:09:ae:be:47:db:d2:18:5f:cc:2a:
af:ec:7c:a7:8a:ec:c2:1c:3b:9e:22:7e:ca:64:49:66:8c:f6:
00:07:05:ef:fa:f7:bc:41:6c:df:e1:51:fd:9f:64:e8:44:45:
77:b4:cb:fb:2c:9b:a4:96:ec:84:e8:59:23:a4:5c:63:e3:4f:
46:40:49:41:5a:31:14:21:86:ed:d8:00:a5:4b:9a:93:19:98:
75:80:a3:56:0e:6a:36:c2:8f:8e:2e:d0:a5:4a:8b:b6:77:6e:
c0:3c:83:37:8d:45:b3:b8:61:78:77:42:f8:99:13:40:02:59:
0c:f1:73:23:92:8a:5a:af:31:4d:12:32:c0:22:b4:b5:23:c8:
5b:62:0b:48:2e:e9:01:f6:de:88:6e:6b:29:8d:71:3c:02:24:
b4:00:cf:2e:28:32:1f:0c:7f:24:7d:48:aa:0d:ff:fc:60:c9:
b3:ac:15:18:04:82:93:0e:3e:73:f1:a2:d9:2d:fa:50:e3:8f:
0e:70:7d:f7:c8:be:bd:e4:68:d4:1b:84:45:2a:97:72:47:6d:
af:f5:48:48:88:11:6a:e9:6b:3c:19:5c:80:21:67:c5:c6:4b:
fa:13:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:02 2025 by rpki-client