Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CB425C609E11F0A5ADEBA6DAE4EC9C.roa
File: B3CB425C609E11F0A5ADEBA6DAE4EC9C.roa (raw, json)
Hash identifier: mwNyVaFJOHej/K/lkpSSRCUHJqFSr5c3wnh5whMYwjw=
Subject key identifier: 1D:0F:9E:FE:66:8A:CF:0F:F9:8B:B9:93:2D:76:F6:BC:2F:9E:9C:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016512
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CB425C609E11F0A5ADEBA6DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:38:39 +0000
ROA not before: Mon 14 Jul 2025 10:38:34 +0000
ROA not after: Mon 25 Aug 2025 10:38:34 +0000
asID: 401615
IP address blocks: 156.231.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91410 (0x16512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 10:38:34 2025 GMT
Not After : Aug 25 10:38:34 2025 GMT
Subject: CN=6874de2f-7920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f6:cd:d5:37:ca:99:7b:fe:9c:ac:86:7a:d6:
9f:12:d5:1a:2a:b0:93:b5:f3:39:61:30:b4:a7:6c:
e3:f6:4c:04:0a:34:ae:3f:f2:76:29:58:f3:d1:c5:
a5:b0:5a:19:82:f1:2a:5b:49:4f:e6:26:2e:30:77:
72:89:21:9f:2a:4b:68:90:64:87:6a:c3:61:cc:99:
c7:66:00:2f:8c:b3:58:da:48:65:2f:24:6e:96:35:
52:8b:e4:2e:34:ab:e4:82:d0:0f:29:f4:70:ba:c7:
79:1f:b8:2f:40:1c:4c:70:80:5d:db:86:96:df:e0:
71:b6:2e:3d:43:31:7b:fe:0c:d8:ce:96:e7:cc:02:
b0:b1:4d:dc:9b:24:9e:ef:38:e8:41:33:1d:5f:6a:
9c:65:7a:87:e3:10:e0:93:f2:aa:e0:3a:d0:ab:f3:
92:4a:bb:e6:31:c9:5f:c2:76:e7:be:eb:a2:2e:1c:
7e:36:3d:4f:38:dd:51:5b:c2:35:24:f4:bc:8b:b7:
4c:c5:e8:65:94:de:68:de:0a:ca:8e:e1:70:8d:c8:
08:29:8b:b6:47:9e:05:a2:fb:d0:44:e6:a0:fe:e1:
f6:70:aa:51:e2:68:09:99:00:98:50:88:78:b5:cb:
78:e9:08:07:9e:3a:ce:17:aa:17:38:06:e1:ea:eb:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:9E:FE:66:8A:CF:0F:F9:8B:B9:93:2D:76:F6:BC:2F:9E:9C:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CB425C609E11F0A5ADEBA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/23
Signature Algorithm: sha256WithRSAEncryption
90:51:6f:c0:2c:e0:a7:ea:fb:9c:60:e0:53:f0:65:ab:e6:f0:
96:f2:59:bb:8e:c3:40:7d:e7:05:f3:dc:e2:c3:36:39:67:40:
c7:e0:e3:77:d4:11:38:e4:ab:79:0c:9e:8e:11:89:03:0c:f5:
c9:c7:68:b2:c6:22:0e:fd:13:eb:de:b1:49:fb:87:ba:ea:ea:
54:5f:23:e1:e6:65:08:03:f9:3f:46:db:10:59:c1:fe:37:bb:
13:80:4a:de:29:77:4f:e5:81:cd:4f:1b:f0:af:2f:90:1d:d1:
4d:43:a6:a3:e6:42:e5:a1:52:84:83:c6:bb:54:c1:58:a4:7e:
d6:07:c2:9b:c1:c3:f2:76:a7:2b:3b:8f:91:d3:40:7f:a4:69:
ff:29:3e:68:27:88:26:a7:79:d6:14:b6:d1:eb:6d:1b:00:93:
32:9a:d9:e0:28:84:41:13:ca:1a:d8:ef:0b:88:66:21:dc:ca:
d8:b0:77:5e:45:56:9c:53:ba:0a:dc:32:02:b3:eb:9b:ed:42:
57:bd:d0:7d:57:39:54:ab:d8:17:3b:40:c8:8e:36:50:7c:4d:
88:40:0e:25:61:30:a2:cd:e9:19:41:5d:b1:9c:30:cf:e7:48:
46:ab:b1:05:62:ca:fb:ab:af:58:ad:e2:e7:d5:6f:5c:bf:c7:
78:95:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:38:43 2025 by rpki-client