Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5178322575A11F08FA55AF5DAE4EC9C.roa
File: E5178322575A11F08FA55AF5DAE4EC9C.roa (raw, json)
Hash identifier: ahJ25PPY6v+Ew0r0UpsZTJsdzsZCxCTmsQjhkXjAPj8=
Subject key identifier: A2:97:85:65:F7:96:5F:7D:B1:D1:EF:4D:00:96:C8:8B:1B:5E:CA:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016034
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5178322575A11F08FA55AF5DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 15:40:35 +0000
ROA not before: Wed 02 Jul 2025 15:40:31 +0000
ROA not after: Wed 13 Aug 2025 15:40:31 +0000
asID: 394432
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90164 (0x16034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 15:40:31 2025 GMT
Not After : Aug 13 15:40:31 2025 GMT
Subject: CN=686552f3-5a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:ec:bd:68:e0:53:7d:f1:3f:d3:68:40:a1:
4e:67:59:69:e0:77:af:fe:90:a7:fa:9a:b0:80:ee:
0b:d2:a8:51:ab:5d:96:81:ba:49:1e:4f:97:89:d3:
5a:79:cb:1c:72:4b:35:e4:28:47:1e:1f:17:c7:bb:
28:d0:b2:a6:5e:e6:7e:67:90:d1:c1:d6:67:be:35:
0b:38:c8:04:81:1a:96:45:fb:70:05:d2:ad:60:b3:
60:fb:b8:61:52:3e:7f:cd:be:c1:73:4b:57:0c:60:
b6:81:20:05:84:a7:ed:58:ed:5b:16:0e:40:49:26:
73:be:b9:09:b9:8f:e7:6d:cf:a3:99:0f:39:2a:de:
63:50:29:8c:38:4a:52:65:32:d2:52:3c:ac:c6:06:
82:62:01:57:da:ac:9b:4b:d3:e7:e4:8a:a5:46:e7:
3a:86:dd:87:c1:fa:7b:21:09:88:71:72:58:9c:65:
d1:13:6c:bf:8d:04:15:35:51:05:e8:ed:dd:5f:4f:
6c:68:7f:48:fa:73:38:d9:f2:0f:37:33:10:41:e2:
1a:67:ee:e2:ba:d4:9d:49:7c:0f:bd:ae:ba:79:75:
1c:3a:d1:b8:b0:7c:b3:81:ea:d9:ea:29:8c:0e:e5:
7f:85:b9:78:3e:1a:9c:b8:d8:ea:19:b0:bf:37:2f:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:97:85:65:F7:96:5F:7D:B1:D1:EF:4D:00:96:C8:8B:1B:5E:CA:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5178322575A11F08FA55AF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
2f:ac:7e:df:6f:a2:e2:d7:37:51:cf:77:cd:da:86:2b:dd:b6:
c9:00:b8:1a:61:7f:f3:24:99:d7:1c:b1:44:68:2f:94:03:ea:
76:e3:d1:42:08:de:a9:e2:ec:f7:d5:ca:51:33:e6:1a:3e:53:
17:5d:d0:2b:cd:93:46:47:51:d0:6b:01:6e:4d:4c:57:36:4c:
1d:a1:4a:46:4c:0c:85:08:7c:cf:9c:01:31:a3:29:67:e9:90:
10:d4:09:8a:e1:87:ae:90:1e:10:14:25:4d:27:f2:d2:11:38:
d2:60:56:7f:42:31:d9:df:c3:8f:58:7d:20:1c:9e:a3:11:91:
86:4a:e7:86:ec:37:c7:9a:c6:c9:69:ff:30:cf:c8:08:97:3e:
84:54:6b:6b:75:33:54:d8:e2:9b:ad:cf:2e:36:8b:a7:d0:03:
15:c0:52:02:1e:da:5d:b1:96:14:43:49:df:79:67:fb:1a:72:
f8:ab:f2:00:75:07:dd:a4:35:4c:5c:7b:f6:89:ab:9a:2c:90:
77:b7:a9:40:79:4d:97:a0:c1:70:43:a1:b6:c3:bc:60:c1:1e:
9c:86:98:94:4e:ba:ee:84:b4:66:bc:67:50:59:98:32:ed:28:
60:87:e8:ad:94:f5:30:c8:34:97:2f:bc:46:60:e0:40:d1:74:
49:a3:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:41:57 2025 by rpki-client