Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07D7A165B7A11F09D5EF8D2DAE4EC9C.roa
File: C07D7A165B7A11F09D5EF8D2DAE4EC9C.roa (raw, json)
Hash identifier: Em0x5BZXH2Gohicmf80jtmNIdHSvq/pljSt7JQqB+p0=
Subject key identifier: A5:43:C9:A2:09:23:29:2A:19:C5:3B:BF:FD:0B:B4:11:76:E0:FD:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016350
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07D7A165B7A11F09D5EF8D2DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 21:38:43 +0000
ROA not before: Mon 07 Jul 2025 21:38:37 +0000
ROA not after: Fri 17 Jul 2026 21:38:37 +0000
asID: 399195
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90960 (0x16350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 21:38:37 2025 GMT
Not After : Jul 17 21:38:37 2026 GMT
Subject: CN=686c3e63-15f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:26:a0:d9:32:03:3a:12:fa:5a:37:7f:84:
76:34:eb:83:f5:85:7f:49:1c:d2:e5:8c:16:a0:c6:
e9:32:a5:ec:0d:3e:f3:44:a5:f6:be:1a:57:32:7d:
6f:96:c5:47:8d:fd:fd:d7:7f:e4:ad:b1:1d:58:56:
b5:c4:ba:3b:d7:d9:04:e7:ff:69:4f:9f:fc:75:cb:
90:a2:68:ae:93:51:9c:6e:a2:b5:41:63:f5:cf:4e:
9d:c8:62:f5:84:d3:5b:31:9f:29:ee:f2:f1:8b:e1:
65:60:29:82:31:27:c7:1f:16:74:40:a2:3e:1e:06:
50:95:e4:10:ee:40:2a:31:79:e7:77:28:73:8b:dc:
02:c9:2d:1f:2d:a5:b7:b7:29:80:a4:1a:5d:d1:fb:
71:bb:31:16:21:0c:dc:3c:32:b8:b3:85:4b:7a:bb:
a1:aa:fb:53:ad:62:70:57:00:14:61:a0:57:46:de:
3d:4a:42:44:77:6a:31:f7:78:a3:dc:03:c1:20:e1:
67:ec:81:50:b2:31:36:2a:90:cc:69:08:04:2a:70:
d1:dd:c2:d7:54:ec:6b:ec:0c:a0:48:7b:8e:73:3c:
7e:5a:7c:e2:5c:72:38:d0:c0:22:6b:97:2c:96:95:
00:fd:9a:13:89:68:7a:7a:6d:d7:56:aa:2c:eb:e3:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:43:C9:A2:09:23:29:2A:19:C5:3B:BF:FD:0B:B4:11:76:E0:FD:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07D7A165B7A11F09D5EF8D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
2c:f5:d2:27:8b:03:37:f4:dd:71:f1:86:cb:c5:8d:ed:f2:93:
7a:4a:46:b8:c2:32:77:1d:b5:9f:8e:4c:1b:3e:7a:00:b5:e6:
35:d0:44:42:85:ca:e3:81:02:91:55:89:c0:97:40:b0:80:f9:
77:d0:45:07:9f:80:43:27:3b:7d:05:69:e1:5c:8a:de:a0:b7:
d0:cd:05:6d:a7:53:24:a6:ff:3d:be:df:0b:53:e6:94:08:c4:
79:a8:27:1b:1d:34:8d:ee:11:2b:62:1c:3f:f7:00:f4:3b:31:
57:a4:6f:a2:a1:84:ef:ef:bb:d9:dc:d7:4f:dc:c6:62:ec:a1:
43:df:89:6d:f5:0e:60:c5:0f:fc:d7:7f:33:bd:e7:a1:41:dc:
c4:10:13:a1:d5:a9:c4:65:e8:28:df:67:a9:6e:54:17:55:af:
42:7b:27:fd:ff:c6:6d:79:b3:df:16:67:37:4e:fe:9d:a1:4b:
99:b2:02:c9:80:82:53:03:5b:8a:17:e3:67:9c:e3:4a:a2:6e:
44:67:10:5d:d3:44:c8:e6:5c:64:6f:c6:2c:4c:c8:56:b0:55:
7f:63:5a:d0:d9:e0:60:ef:c0:e3:a3:be:4f:33:ef:d5:fc:60:
3b:9a:55:54:ae:4a:ff:98:5e:5b:e1:fd:5e:13:ef:e3:3f:0e:
22:3b:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:25:42 2025 by rpki-client