Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7A332D4625611F0A5FC97D5DAE4EC9C.roa
File: D7A332D4625611F0A5FC97D5DAE4EC9C.roa (raw, json)
Hash identifier: aq6zpuI7lpVEoghJk7ghtJVFMu7gc40xLZKRXAXAC3Q=
Subject key identifier: 97:F1:9F:C7:62:AD:B8:D1:6C:AE:68:2B:1F:95:AD:EC:51:28:49:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0165A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7A332D4625611F0A5FC97D5DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 15:09:18 +0000
ROA not before: Wed 16 Jul 2025 15:09:13 +0000
ROA not after: Fri 25 Jul 2025 15:09:13 +0000
asID: 135377
IP address blocks: 156.232.92.0/24 maxlen: 24
156.232.93.0/24 maxlen: 24
156.232.94.0/24 maxlen: 24
156.232.95.0/24 maxlen: 24
156.232.96.0/24 maxlen: 24
156.232.97.0/24 maxlen: 24
156.232.98.0/24 maxlen: 24
156.232.99.0/24 maxlen: 24
156.232.100.0/24 maxlen: 24
156.232.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91561 (0x165a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 15:09:13 2025 GMT
Not After : Jul 25 15:09:13 2025 GMT
Subject: CN=6877c09e-aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:b3:af:e5:64:bc:4d:3a:29:62:1e:c7:dd:
22:99:13:ec:e3:f4:f8:45:b0:91:75:bd:b2:f5:e5:
21:a7:52:7e:79:90:cb:3f:6a:77:00:79:be:45:8e:
d8:7b:86:0e:c0:90:d3:66:91:b2:ba:c2:25:52:56:
80:af:d5:40:3b:fd:5d:1a:9b:29:29:37:c5:6b:61:
64:c2:5e:ab:76:3f:ad:cf:3d:a7:5b:b5:ca:7e:e2:
e7:60:73:e4:fa:5a:10:13:25:7b:92:b0:47:ea:d2:
00:9b:6d:cc:63:06:e4:ca:5f:8e:58:e9:ae:b8:d2:
de:80:5c:d9:97:0e:df:1e:33:79:98:82:a6:52:2d:
c3:55:98:35:92:2d:e2:57:ff:0a:aa:54:8d:6c:1e:
82:76:1e:39:d0:95:3b:f0:41:a8:af:78:57:90:3b:
a4:68:42:27:21:73:70:9e:8f:30:48:36:99:6f:56:
e8:e8:fd:ee:fc:c0:32:32:13:b5:5a:6a:3f:89:dd:
11:e9:98:c4:a0:c8:5d:b2:b6:20:c8:7a:37:ae:5f:
28:d8:b0:ae:b7:2b:44:b1:d4:b2:f9:8f:f6:03:7e:
f2:ce:72:67:40:5d:cc:eb:9c:fc:f8:06:a1:ff:77:
ea:cb:d8:81:21:30:90:56:55:77:50:be:e9:1e:41:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:9F:C7:62:AD:B8:D1:6C:AE:68:2B:1F:95:AD:EC:51:28:49:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7A332D4625611F0A5FC97D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.92.0-156.232.101.255
Signature Algorithm: sha256WithRSAEncryption
14:0b:02:92:a2:33:d6:dc:9c:bd:33:7e:01:b2:f2:79:d2:86:
65:ef:38:05:44:ff:97:a4:ae:42:a3:ef:40:c9:d8:c8:c8:cb:
4e:b7:c4:90:39:bb:79:93:63:51:0f:e9:a3:93:e3:98:c7:be:
b2:a2:94:c7:95:f3:dd:7f:80:73:55:42:f7:00:20:08:6a:54:
b9:2a:16:09:02:c9:07:84:ae:02:fc:5a:e5:9f:7f:07:35:7c:
5a:82:37:fd:41:39:05:5c:48:24:71:5d:0b:73:fa:51:8e:fd:
4b:0f:8a:39:79:ac:1c:61:f3:e8:b1:4d:0b:5f:49:e1:e3:29:
19:99:19:20:86:08:e6:6c:d0:aa:18:5e:d2:e3:79:1f:5f:ac:
53:1d:0b:bb:8e:6f:7e:55:13:b2:1b:58:55:92:4a:74:72:9d:
5c:34:02:ea:61:99:e4:9c:f9:fb:51:ad:a8:d7:20:f2:7a:6f:
3b:30:a3:5d:a1:42:d8:b4:23:58:e4:ed:8c:8a:0f:77:70:21:
e4:a0:71:ca:7c:83:2f:14:10:32:2b:ed:f5:26:24:b9:4c:9a:
76:96:14:60:1d:f3:63:f1:fa:5a:d7:83:a5:8f:20:06:66:0e:
35:31:3a:64:73:7d:07:61:ea:64:42:81:7b:09:48:56:79:67:
26:e3:ac:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:44:17 2025 by rpki-client