Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67B96F22871F11F0B3B668C3DAE4EC9C.roa
File: 67B96F22871F11F0B3B668C3DAE4EC9C.roa (raw, json)
Hash identifier: PX1yW928Eo1j8nfG94Xk2ALJZo8tHDtm+Y+1+4oDeFg=
Subject key identifier: 6B:98:E4:76:5B:E4:0C:13:86:A5:3E:1C:98:27:EE:EA:4D:0F:48:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01754D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67B96F22871F11F0B3B668C3DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 10:35:41 +0000
ROA not before: Mon 01 Sep 2025 10:35:35 +0000
ROA not after: Mon 06 Oct 2025 10:35:35 +0000
asID: 21859
IP address blocks: 156.225.8.0/24 maxlen: 24
156.225.9.0/24 maxlen: 24
156.225.10.0/24 maxlen: 24
156.225.11.0/24 maxlen: 24
156.226.164.0/24 maxlen: 24
156.226.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95565 (0x1754d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 10:35:35 2025 GMT
Not After : Oct 6 10:35:35 2025 GMT
Subject: CN=68b576fd-7e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:72:de:b2:12:c4:f7:a0:0f:9f:db:6c:77:
14:ce:33:28:2e:2c:99:c2:1b:f3:df:96:3c:eb:0f:
66:87:a0:6f:0f:d8:e9:4c:dd:01:da:cd:22:fe:54:
15:47:be:80:a5:a2:8b:e9:ae:ef:93:45:da:88:75:
4b:2d:b4:b5:f0:5d:34:96:f0:d4:c7:44:52:fc:61:
35:a8:ef:a3:6c:dc:ea:d6:0f:66:c9:b7:2d:74:3e:
53:29:58:17:b7:b6:57:7a:b7:eb:39:02:ee:cd:2b:
86:2d:bd:55:c6:0b:90:74:22:43:ce:c2:ae:a4:48:
0e:31:ab:a4:a0:4c:7e:9c:ed:47:19:1f:5f:0a:f1:
c9:0b:0f:18:c1:43:aa:4c:f2:c0:ee:d3:3a:93:24:
e1:1e:7a:8a:f0:0f:22:7a:7f:8f:f1:7d:5b:1c:87:
c0:a7:f7:7a:b8:ba:4e:df:16:f1:e2:4c:d6:cd:d1:
a4:f6:2a:86:44:30:8f:23:3b:b8:5d:88:d0:1e:54:
4a:0d:a7:c2:77:5a:6d:91:02:a5:97:83:61:5b:45:
77:76:7f:48:60:4c:76:7b:7e:38:1a:e8:c9:90:e2:
b0:6f:bc:a1:73:62:c8:d8:a9:63:96:e8:ad:42:8e:
dc:73:ff:bb:8b:a3:ff:4c:ad:dc:83:15:71:de:72:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:E4:76:5B:E4:0C:13:86:A5:3E:1C:98:27:EE:EA:4D:0F:48:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67B96F22871F11F0B3B668C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
156.226.164.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:29:f1:fa:fd:9f:2c:69:b7:48:0d:7a:1b:57:86:6e:2a:63:
2b:9a:47:8a:e2:44:e6:84:45:81:d3:77:a9:6a:13:96:2e:c1:
71:73:33:9d:09:56:9f:1b:f5:8c:0f:53:64:fa:03:7b:4a:9c:
5d:14:c1:6f:88:18:87:3f:7a:2d:f2:99:18:2d:dc:46:7a:2a:
53:f4:68:ea:09:13:2c:c7:e8:15:0b:6c:5c:87:6b:bc:00:e9:
b9:2b:9f:e7:2f:9a:84:78:cf:4c:de:59:87:bb:74:d2:ff:86:
4a:1c:4f:7e:35:b5:c6:37:5b:3b:53:3c:54:d0:87:e3:70:62:
47:6f:98:27:1b:e8:34:cc:26:60:c3:f2:8e:b3:1b:c2:e4:8e:
34:7a:c6:de:43:97:72:88:c1:0e:dc:da:a4:bf:b5:19:0e:b2:
23:91:af:14:60:62:91:ec:c7:e6:c6:35:a6:ac:b4:3b:c7:53:
b3:3b:4f:0d:a0:00:be:2f:c2:33:b1:aa:6f:1d:9e:6f:c2:b2:
40:1f:2d:3a:ef:9c:ed:04:d3:55:31:fb:70:67:a2:36:19:31:
73:38:5d:79:da:9c:99:ab:ab:52:b4:fa:62:e1:e8:f4:73:36:
0c:7e:46:fe:ed:36:28:4d:fe:14:85:6c:8a:34:c2:5c:22:69:
cf:ad:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:16:19 2025 by rpki-client