Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7421088285FE11F0994F27D2DAE4EC9C.roa
File: 7421088285FE11F0994F27D2DAE4EC9C.roa (raw, json)
Hash identifier: H946EcEgc3aZjikHobHdGOO75B9JofyPCNnkCr6XdeQ=
Subject key identifier: C5:D8:46:89:35:8A:DC:D2:73:09:6A:AC:FD:6F:03:ED:5F:63:E6:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017454
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7421088285FE11F0994F27D2DAE4EC9C.roa
Signing time: Sun 31 Aug 2025 00:07:17 +0000
ROA not before: Sun 31 Aug 2025 00:00:12 +0000
ROA not after: Sun 07 Sep 2025 00:00:12 +0000
asID: 54801
IP address blocks: 156.225.76.0/22 maxlen: 24
156.242.12.0/22 maxlen: 24
156.245.144.0/22 maxlen: 24
156.245.204.0/22 maxlen: 24
156.249.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95316 (0x17454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 00:00:12 2025 GMT
Not After : Sep 7 00:00:12 2025 GMT
Subject: CN=68b39235-921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:43:e0:49:a2:8a:db:bc:a7:85:eb:89:8c:
4f:7c:9b:fd:05:19:d9:11:45:2e:e6:87:83:44:e2:
c4:d7:e5:ad:96:7f:e7:ae:3a:5d:08:42:0c:a0:e5:
bf:5f:bd:de:ef:93:6a:b1:2f:1a:46:84:50:ab:0e:
fe:bb:bf:2c:42:99:49:10:d7:72:68:ab:3e:e8:b1:
6e:92:00:8c:1b:54:ca:97:8a:00:fa:1f:34:e6:e3:
d0:e7:7a:13:bf:6e:24:e0:4c:ba:2f:ad:65:f3:e7:
d3:61:51:6b:06:3f:4c:40:dc:99:0c:8c:63:0e:be:
82:b1:47:81:0a:95:d2:e0:5f:8d:74:f8:95:da:8b:
5f:e3:8f:da:12:94:26:4f:18:6c:2e:6b:b3:9b:76:
72:6c:8f:7c:d4:96:b5:7b:b6:e3:d3:03:5a:65:21:
7f:ed:fb:70:41:6e:08:5a:d2:fb:d0:40:ae:0f:01:
22:5c:59:c8:e2:39:b2:04:50:8e:22:2f:3e:31:37:
4c:38:80:a3:d8:a2:25:b3:8e:14:b2:4b:02:8c:f0:
5e:5b:6a:85:71:74:c1:98:4d:90:17:4c:2d:d3:62:
da:c4:c7:f3:7b:9a:02:13:68:e5:4a:d3:7f:20:cd:
ec:39:1b:67:0d:17:fb:0c:c6:25:da:7f:36:69:09:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:46:89:35:8A:DC:D2:73:09:6A:AC:FD:6F:03:ED:5F:63:E6:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7421088285FE11F0994F27D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
156.242.12.0/22
156.245.144.0/22
156.245.204.0/22
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
40:1c:5d:10:2d:ea:fd:ab:3d:97:59:39:aa:3f:d2:73:c8:2d:
70:b2:91:7d:bb:7a:93:4b:2e:b7:3b:cd:4b:db:54:be:4a:ff:
63:bd:00:99:f9:a6:ca:e7:a5:1a:51:67:f8:12:39:d7:3a:dc:
90:5a:c1:9d:10:6e:4b:7e:76:00:40:30:3e:0b:b9:6e:cb:dd:
63:5f:77:d2:b4:67:6f:d9:fd:1d:96:b9:f1:67:ce:d7:9e:7a:
b4:82:ce:b2:b4:7a:32:46:99:21:da:0a:63:5f:2c:43:2d:a8:
28:6a:3b:7d:65:19:8e:7c:ff:4b:16:97:13:22:20:3f:bb:f5:
85:50:c7:67:18:8b:da:d5:f6:64:f6:65:3f:d9:3f:af:22:48:
f5:c3:82:a0:d5:1b:61:df:1f:b0:9b:52:0b:bf:bd:fc:41:bb:
1b:59:91:3e:75:0e:32:2e:68:fe:ef:3d:8f:99:19:98:eb:f4:
27:60:b7:da:0c:52:f6:6a:e4:ee:16:d7:9b:e0:d0:25:d0:96:
15:ac:52:08:87:36:3f:b2:12:b3:e5:26:a5:01:d6:47:83:90:
74:53:50:52:2c:f0:fe:fa:fb:dc:be:0c:95:86:81:b8:ce:1d:
76:19:6f:45:1a:fb:0d:6a:fe:f8:9b:af:0e:9b:71:bc:d2:a9:
63:4b:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:20:44 2025 by rpki-client