Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70DC2C6608511F0A1C8CE87DAE4EC9C.roa
File: D70DC2C6608511F0A1C8CE87DAE4EC9C.roa (raw, json)
Hash identifier: nkCN+zcaRd8kzubAd8+DhI4+YwIacnlLaJegv1c/uvo=
Subject key identifier: 53:0A:8E:BD:AB:29:03:BF:16:01:09:DD:DB:79:80:FB:7E:8D:86:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70DC2C6608511F0A1C8CE87DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:40:41 +0000
ROA not before: Mon 14 Jul 2025 07:40:36 +0000
ROA not after: Sat 16 Aug 2025 07:40:36 +0000
asID: 215748
IP address blocks: 156.254.116.0/24 maxlen: 24
156.254.117.0/24 maxlen: 24
156.254.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91378 (0x164f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 07:40:36 2025 GMT
Not After : Aug 16 07:40:36 2025 GMT
Subject: CN=6874b479-3d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:4f:c8:8c:bb:e5:c7:3a:b1:a1:10:c7:b1:
15:e5:e4:a0:b0:36:0b:23:c6:ab:2e:89:66:0f:a8:
2a:61:0a:36:7d:1a:af:11:0d:d7:9d:d2:78:34:11:
f4:8a:19:23:38:56:67:33:a6:c2:79:d7:bc:32:4b:
0c:38:c4:fb:e0:b5:36:56:9c:4d:33:b3:61:1d:55:
cc:12:c7:dc:e0:89:64:78:67:ce:f4:c5:21:1e:db:
47:25:6a:11:e4:8e:aa:8f:74:38:13:fa:06:c9:7f:
f7:85:c9:47:d4:60:54:87:76:94:da:a6:69:0c:5a:
c0:2a:33:63:a0:ce:58:20:a2:90:e0:58:3c:94:96:
7d:f9:a8:0d:49:fc:fa:ac:bf:dc:b5:ff:9f:aa:0b:
51:39:50:9d:e4:f8:3a:d2:3a:0a:18:d9:47:9c:e8:
9e:40:8d:51:5a:03:70:5a:c8:a3:63:83:03:58:a0:
f6:e4:57:9a:e2:fe:1b:86:dc:94:7d:fc:ee:25:56:
26:00:26:9f:30:c8:30:92:3b:cb:34:d9:b9:49:83:
43:18:7e:fc:24:cf:8e:8a:c8:12:fe:bb:01:ac:97:
27:36:81:0f:db:b2:89:b6:a3:97:f5:4e:ae:7d:54:
4b:ff:e7:08:8c:d0:6e:c3:e8:97:72:e2:3c:45:24:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0A:8E:BD:AB:29:03:BF:16:01:09:DD:DB:79:80:FB:7E:8D:86:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D70DC2C6608511F0A1C8CE87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:1a:c9:14:02:d4:57:42:65:d1:7b:93:c5:05:da:30:5c:8d:
9f:fe:b0:3a:36:26:22:fc:82:79:33:2c:b5:66:06:1b:5b:51:
1b:56:5e:6f:bc:e4:aa:1e:61:bf:89:1d:ac:e5:cd:cf:0b:82:
f7:23:c7:09:1f:b7:9d:0f:b5:41:35:91:62:b1:2c:92:bf:f6:
1f:e7:bc:92:bf:4d:2f:3f:d8:55:ef:06:d9:e1:55:61:5b:dc:
05:07:00:06:32:b3:09:d3:f8:61:1d:b8:5f:17:b1:df:18:19:
51:72:ab:3f:7a:2a:b9:b1:fa:ac:56:e7:ed:a8:ce:ba:0e:ef:
1f:2e:30:b7:72:54:5b:12:9c:ca:b4:8a:43:8c:ad:ec:34:d6:
01:60:59:be:6e:e8:44:0d:06:8b:55:7a:93:b4:5f:10:df:46:
1b:b7:01:56:04:1b:67:f0:97:09:e9:75:c7:36:47:cd:8a:ff:
1a:3e:c6:9e:15:89:d1:9a:28:8c:4a:5a:94:e7:b2:22:db:0a:
41:b3:22:9e:d8:b3:94:d1:b5:b4:d4:96:50:cb:a7:c9:bf:ff:
86:bc:09:03:45:ee:44:99:d8:7d:64:10:0e:6e:ec:56:b0:9d:
f1:5b:a3:e0:1e:fb:02:88:f5:1a:eb:45:fe:c3:f1:44:8c:a4:
c4:e3:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:46 2025 by rpki-client