Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46D8B18687E811F0A88192E3DAE4EC9C.roa
File: 46D8B18687E811F0A88192E3DAE4EC9C.roa (raw, json)
Hash identifier: nul+vD6novYSCMG3HmAPSPEDpMe/pcWu02TJnEO7v6w=
Subject key identifier: 2A:7B:88:B4:9A:3B:F8:C6:9A:F1:28:E5:4F:53:BD:55:2B:C3:DC:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017656
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46D8B18687E811F0A88192E3DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 10:33:34 +0000
ROA not before: Tue 02 Sep 2025 10:33:05 +0000
ROA not after: Fri 19 Sep 2025 10:33:05 +0000
asID: 140869
IP address blocks: 156.225.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95830 (0x17656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 10:33:05 2025 GMT
Not After : Sep 19 10:33:05 2025 GMT
Subject: CN=68b6c7fe-cae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:4b:8b:f9:c0:80:5a:41:93:e8:65:f1:38:
d2:0e:6b:c9:78:df:c6:53:17:69:44:0e:5c:d8:5d:
49:06:37:02:47:46:c1:eb:36:97:cb:fc:72:b3:e7:
5a:d5:51:44:3a:d1:16:fd:cf:8b:63:f0:28:23:a6:
9a:5f:87:a1:7d:63:90:47:45:98:1a:56:52:83:cd:
ea:c2:10:0c:18:c9:09:9f:42:61:9c:38:ae:0e:5a:
b8:ef:65:57:7a:19:67:44:97:47:00:53:3d:2a:cc:
8d:fb:45:a1:5e:1a:bc:83:de:40:9c:c9:6d:6f:15:
77:1a:49:bd:9e:a6:c9:e8:20:2d:18:b9:00:ee:21:
c8:90:3a:da:85:09:16:17:17:0d:59:0d:6d:66:d5:
d8:e0:30:d9:b8:f7:d7:97:98:9d:41:35:40:da:9d:
ea:9e:5b:44:ee:c7:dd:14:b3:cb:a0:ff:19:5b:40:
bc:3a:db:e2:dc:0b:38:e8:09:23:c6:f7:c6:cc:98:
6f:c4:10:cf:92:3c:2d:e0:6f:ef:ff:90:fa:f0:4c:
ee:e0:91:70:34:a2:af:b8:55:ad:79:c8:a7:29:d3:
72:60:ae:c9:3d:26:0a:05:12:fa:cd:b3:f6:c6:2c:
e6:ad:b4:47:9c:a3:44:f8:56:a7:42:a2:46:a6:fe:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:88:B4:9A:3B:F8:C6:9A:F1:28:E5:4F:53:BD:55:2B:C3:DC:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46D8B18687E811F0A88192E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:ef:0d:ff:5d:38:30:c2:ee:44:80:50:e9:41:d2:d1:43:86:
51:83:89:7b:6d:48:f5:23:09:2f:7b:9e:e4:b8:47:17:52:39:
53:c2:f8:ac:08:f6:66:d4:c2:8c:7d:53:1e:dc:e3:08:7d:37:
71:29:c9:eb:38:97:54:d7:91:ef:f3:7d:ec:8a:e8:0d:70:ea:
c5:57:bb:68:8c:b8:42:e0:92:72:2f:f5:e5:8c:33:c7:3a:e6:
f8:f0:cc:a4:84:80:0e:c6:da:5e:2b:1f:bd:97:3c:7e:26:bb:
95:a8:04:b9:4c:62:e1:d0:5d:a7:c0:c6:3d:e2:3f:98:20:bf:
a9:2d:51:a2:3c:d7:7c:bd:87:59:42:04:ed:0f:55:17:31:3a:
8d:42:2e:fb:88:7e:0f:e5:94:96:86:83:51:b4:ec:f9:b2:de:
f8:2c:20:19:4c:e9:ac:89:d7:80:33:95:11:c4:c9:dd:d9:22:
8a:45:20:61:10:24:82:93:6e:77:01:92:a1:87:c9:36:fd:ec:
c7:99:1e:ad:fb:f3:22:6c:d7:58:e2:ec:70:8b:c4:16:40:3d:
8d:f8:f8:a4:17:89:d5:b1:fb:2b:c2:16:6e:b8:b9:c4:2c:3b:
41:11:0e:54:99:d1:0e:a7:7b:d1:a5:86:cf:f9:2e:96:2d:14:
f4:2c:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:28:35 2025 by rpki-client