Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A856F64C5B1B11F0BEE814EFDAE4EC9C.roa
File: A856F64C5B1B11F0BEE814EFDAE4EC9C.roa (raw, json)
Hash identifier: g/39N5gjjBrT5wjkmUgDy5uWcW4cXJGzcIOMn94T7mw=
Subject key identifier: FB:86:41:41:53:85:CF:7C:3C:92:6B:FF:A4:8A:C1:D7:09:B7:91:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A856F64C5B1B11F0BEE814EFDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 10:18:00 +0000
ROA not before: Mon 07 Jul 2025 10:17:55 +0000
ROA not after: Sun 10 Aug 2025 10:17:55 +0000
asID: 40779
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90872 (0x162f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 10:17:55 2025 GMT
Not After : Aug 10 10:17:55 2025 GMT
Subject: CN=686b9ed8-f4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:40:0b:57:90:b8:4c:31:1b:00:28:24:49:
2f:e7:54:8d:e8:9b:0b:83:56:a9:49:cc:73:6b:2e:
35:dc:e6:71:70:5e:91:e0:8a:18:c3:65:26:1a:3f:
ea:88:bc:a7:33:e6:df:43:b6:20:29:e9:37:3d:1b:
4a:12:3d:6a:1c:fe:e3:4e:2d:bd:f8:91:9b:c7:64:
8f:7c:cf:ab:e2:0d:ea:0e:29:de:6e:da:da:1f:d0:
e2:c3:c3:f1:12:21:d1:f6:7a:81:2b:c9:78:53:0b:
33:63:3b:39:4d:f9:da:01:79:c6:18:01:30:bc:b8:
f0:fb:5e:f9:c7:4e:54:07:10:12:3a:0f:01:e6:af:
38:21:e3:a1:5b:85:4e:32:d5:b1:34:ba:3c:30:1f:
f6:82:cf:1b:67:e5:f3:0c:db:4f:08:da:72:9c:8d:
b4:b7:62:3a:02:75:a5:24:06:13:fe:ec:7e:4f:08:
0e:d2:c6:c9:95:6e:ee:89:7c:77:29:1b:56:b5:4f:
c7:8b:ee:af:0c:5c:1f:6e:1b:06:c6:80:24:b5:50:
70:ce:89:d6:bb:0e:06:be:a6:a0:81:50:f3:2d:31:
dd:58:68:62:9e:f8:61:c4:fe:cc:1a:a0:a8:b1:de:
14:cb:f4:39:b2:2a:60:1a:d3:ef:e6:aa:68:39:c9:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:41:41:53:85:CF:7C:3C:92:6B:FF:A4:8A:C1:D7:09:B7:91:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A856F64C5B1B11F0BEE814EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:df:6b:ce:ca:56:d1:3f:c9:04:93:9c:ed:1d:ba:6c:75:0f:
a3:a5:cf:eb:22:f2:4f:48:27:7f:53:cb:ea:e8:02:f4:ee:80:
cb:49:22:3c:a7:f0:51:bd:fa:81:a2:0e:a9:5a:91:73:04:a5:
99:4b:89:56:34:e9:95:8e:7e:8a:a1:ce:d6:0c:b2:a6:50:d5:
25:45:b6:90:04:36:af:65:5a:77:b3:5e:89:af:54:ae:8e:55:
c6:76:cc:3b:d9:ad:6f:ab:ec:67:7c:96:43:8b:83:26:83:9d:
14:dd:ea:1a:a1:70:ca:f6:fe:59:f0:72:77:83:74:01:81:4a:
f0:06:f5:57:bb:1b:c8:6c:5e:4a:79:d0:ce:01:8d:ea:ee:92:
ca:4e:1f:40:e3:1c:6b:a2:2e:35:c5:84:ca:de:2b:19:de:03:
6e:2c:b1:35:89:93:a9:af:b6:c9:69:d9:42:83:43:c2:0a:17:
03:0b:96:34:24:43:b4:c9:96:2b:d4:d7:08:c4:1c:33:d9:4d:
be:8f:2b:48:17:3d:fc:c8:55:c3:59:36:b2:89:bd:62:62:a5:
e2:00:a7:d2:ef:89:76:b3:1d:fa:21:76:8f:fe:4e:11:36:ae:
40:a7:37:83:c0:cc:0b:0b:10:f2:5a:60:1d:4c:56:f1:e7:5f:
f1:96:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:38:16 2025 by rpki-client