Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFB9B4E0590611F0948881D8DAE4EC9C.roa
File: FFB9B4E0590611F0948881D8DAE4EC9C.roa (raw, json)
Hash identifier: zL1F6y5oeTB5Smi/zCp5pEk9Hqm59ARH6FEL8hSdn7o=
Subject key identifier: CE:1B:ED:3D:F0:82:FD:C8:F5:94:EA:57:86:C5:27:8C:3D:A5:B9:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016132
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFB9B4E0590611F0948881D8DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 18:45:05 +0000
ROA not before: Fri 04 Jul 2025 18:45:00 +0000
ROA not after: Fri 17 Jul 2026 18:45:00 +0000
asID: 398993
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90418 (0x16132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 18:45:00 2025 GMT
Not After : Jul 17 18:45:00 2026 GMT
Subject: CN=68682131-7515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:e2:b7:91:14:d8:a6:0b:de:c2:fa:d3:c9:
c6:7d:5f:f6:3a:fd:34:06:d8:a0:4d:a5:62:63:74:
2b:8a:05:7f:e3:32:f5:64:b8:b5:19:dc:14:5b:2e:
6a:d3:67:93:88:1f:e2:8b:d6:b6:51:53:99:e3:c9:
98:9d:7d:b4:30:87:a6:f1:dc:3f:15:d0:7f:3e:2b:
a7:53:a0:2a:91:62:fc:e0:12:3e:2f:22:a5:5b:30:
ff:95:47:92:cd:1f:0c:aa:98:b6:21:54:d7:6c:ae:
57:6a:40:a9:9e:55:a4:0f:3b:21:ed:24:90:77:ed:
27:9a:8b:7d:f3:8e:95:2c:c4:40:1e:f2:c8:ba:ad:
12:e6:ad:2b:fe:ee:92:d5:27:f2:3f:cd:7b:7a:8f:
8b:65:c0:a0:e8:44:85:f6:b8:af:22:27:1e:db:13:
60:5b:1d:64:b1:fa:7b:c9:ff:8c:ab:55:32:79:2f:
a0:cf:8a:03:b5:ed:60:3e:bd:59:2f:74:f7:21:f3:
23:a0:64:17:82:fc:85:4b:50:40:51:ad:d8:a1:a3:
cb:cf:d9:ae:62:ce:b1:0c:d9:d4:0f:93:7d:f8:0b:
61:3b:b9:88:e7:c8:7c:83:10:f2:83:64:b2:1d:1e:
e7:cc:2b:f4:cd:d9:a3:f3:0c:86:07:a9:99:18:71:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1B:ED:3D:F0:82:FD:C8:F5:94:EA:57:86:C5:27:8C:3D:A5:B9:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFB9B4E0590611F0948881D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
76:43:98:50:cb:72:76:a4:52:71:ce:7d:96:34:1b:bb:2a:21:
53:a6:05:a4:a3:b6:a8:31:eb:a5:27:1f:6e:df:5b:8a:1a:8f:
c9:fa:8d:05:fa:18:ce:87:f9:1e:46:06:05:05:d1:a9:8d:d2:
ff:bd:c5:b9:ab:a5:b9:53:6f:5c:dd:d9:ea:0a:d8:da:dd:6a:
87:89:7d:ef:7a:55:72:c0:1d:cd:48:33:e0:d6:b2:b6:fb:fe:
46:4c:ee:f8:20:84:2a:92:d4:7b:55:e9:25:09:0a:ec:4f:98:
1f:6b:c1:79:dc:7c:af:4e:57:d3:01:8b:55:4b:68:32:6c:57:
c3:56:d3:dc:94:c0:9e:28:48:32:1c:f0:f4:91:07:29:4b:64:
65:13:41:1c:e9:99:85:2f:55:4a:26:ac:5e:05:0f:9b:f7:52:
d0:d2:1c:21:a4:69:be:c4:58:17:e9:8a:fa:42:7b:9f:13:95:
6b:8e:f7:9f:dd:71:e6:80:00:f8:c3:d5:c5:06:66:f8:82:c3:
e9:cf:8a:d7:50:8a:db:8a:47:50:a9:97:4f:21:ce:67:41:47:
69:62:41:fe:f0:ad:9b:82:78:00:aa:e0:49:cd:ec:6f:b3:bf:
70:55:3e:94:d1:0b:35:d1:f6:63:39:43:fa:34:fa:8a:1c:bc:
a1:42:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:40:16 2025 by rpki-client