Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9A109F85E5711F0830081CCDAE4EC9C.roa
File: B9A109F85E5711F0830081CCDAE4EC9C.roa (raw, json)
Hash identifier: mTBfHWeH2QNVgQoHa05jOpftUMu5Y21Y5AO4aQEsnA8=
Subject key identifier: C1:97:3B:06:F3:62:F8:29:D2:AF:BD:66:29:BD:E2:58:22:7A:1B:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9A109F85E5711F0830081CCDAE4EC9C.roa
Signing time: Fri 11 Jul 2025 13:05:32 +0000
ROA not before: Fri 11 Jul 2025 13:05:28 +0000
ROA not after: Fri 01 Aug 2025 13:05:28 +0000
asID: 3257
IP address blocks: 156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
156.228.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91309 (0x164ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 13:05:28 2025 GMT
Not After : Aug 1 13:05:28 2025 GMT
Subject: CN=68710c1c-e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:39:3f:75:92:ac:1d:66:0d:7a:95:27:f6:
16:4f:3e:9d:fb:18:90:b9:9b:c9:ca:aa:09:55:ab:
65:2b:97:ec:5c:1e:f4:37:85:c2:ef:bb:c2:30:42:
a1:20:fa:e1:74:5b:41:1c:d4:5e:09:77:5a:53:1e:
77:49:98:c0:01:25:a0:41:d1:54:48:cc:3a:99:06:
7f:16:61:ee:86:39:fb:1e:17:35:ad:f9:9b:3d:4d:
96:89:61:a1:df:dd:9b:0a:c9:0d:e0:b9:e4:3b:72:
01:10:39:3b:8f:00:0e:b9:4a:84:cb:d8:7f:ac:b3:
30:40:16:ca:ab:f2:f8:e1:67:1c:2b:0a:66:a8:6a:
8c:53:c1:01:ca:16:3a:e4:c1:72:d8:04:f4:c0:3b:
61:43:6f:43:5b:f9:43:61:16:ce:bd:7f:6e:0b:68:
53:62:f9:d2:b5:e5:73:3b:19:34:a5:22:a1:3c:87:
fe:66:4b:fc:de:38:cf:30:49:c7:b0:6a:08:ca:5a:
4a:49:9a:4d:ba:f1:97:b1:12:42:1b:bb:0a:c0:01:
a6:c0:86:e0:fa:8b:32:10:df:4d:79:1c:dc:17:1c:
f8:d1:fc:26:1c:be:62:47:15:13:34:ef:e8:6f:6f:
47:2c:73:67:2b:d2:96:50:e4:fb:36:6e:94:d1:cd:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:3B:06:F3:62:F8:29:D2:AF:BD:66:29:BD:E2:58:22:7A:1B:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9A109F85E5711F0830081CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.7.0/24
156.228.9.0/24
156.228.16.0/23
Signature Algorithm: sha256WithRSAEncryption
59:c9:4e:34:4b:6a:39:08:67:fd:d5:1d:20:6c:06:55:c3:4b:
6e:10:9c:7e:b4:01:74:51:30:e2:2e:09:58:89:27:16:65:9b:
15:a6:73:1b:e2:4c:1a:d1:7b:8f:16:db:02:bd:bb:87:e9:52:
ff:f3:a0:20:a9:fa:4d:a7:fa:5d:44:e5:99:d3:f8:f5:1f:32:
34:43:14:88:b4:a2:58:a0:ed:a1:d2:4d:82:22:8f:08:3d:7e:
f1:e8:8f:66:d5:4e:07:d3:7a:bc:a4:c9:2f:53:97:4b:7f:ac:
32:bd:de:32:19:6e:1d:78:2e:ba:fc:5d:92:d5:53:d7:86:79:
13:e4:7e:5a:47:98:17:33:61:80:84:b8:51:df:38:70:c7:6f:
76:71:32:b4:43:6d:f3:fc:cc:5e:88:01:0b:83:fe:b6:d3:63:
67:90:29:40:2c:91:c1:82:eb:0d:ca:67:72:7c:a9:b9:0e:a4:
18:c2:16:18:f6:e1:6a:f6:c5:da:3a:8c:fc:34:78:97:90:a7:
1e:92:4c:3a:ef:b0:32:5d:c3:76:22:55:44:f6:3e:2f:23:8f:
3c:ec:e9:5b:b4:d9:36:62:3c:f4:97:8c:7a:4a:44:fa:fa:d5:
46:61:9a:a1:fe:03:75:82:78:d6:b5:18:f4:c7:79:ce:52:94:
1d:45:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:30:31 2025 by rpki-client