Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9461AC5C59B511F0BA5201CFDAE4EC9C.roa
File: 9461AC5C59B511F0BA5201CFDAE4EC9C.roa (raw, json)
Hash identifier: JU26FcMK/bXX9ezqqnmej+ri9tCa7Vffgc4cm5nbkOM=
Subject key identifier: 26:5B:78:68:AE:C7:40:4C:FA:15:AA:28:B2:E2:7B:93:22:BC:12:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0161C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9461AC5C59B511F0BA5201CFDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 15:34:47 +0000
ROA not before: Sat 05 Jul 2025 15:34:41 +0000
ROA not after: Thu 04 Sep 2025 15:34:41 +0000
asID: 54600
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90561 (0x161c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 15:34:41 2025 GMT
Not After : Sep 4 15:34:41 2025 GMT
Subject: CN=68694616-a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:b7:24:79:18:b1:8a:1e:16:31:fb:02:0e:
19:b9:53:3c:d5:30:c1:ea:de:e4:b1:60:6e:c8:bc:
97:da:2f:8c:33:c9:b2:f6:d1:9c:07:8f:15:b7:ba:
99:b6:6a:0f:11:68:32:2f:6d:d4:c9:ec:a3:67:42:
a5:c0:b0:98:69:f5:43:f9:98:ab:36:61:e4:91:ed:
15:70:82:6d:04:51:52:2f:9e:fe:38:b8:76:25:b7:
ef:7d:44:e4:da:db:54:a1:f8:54:b8:ff:57:c6:7d:
68:07:91:08:aa:58:00:de:dd:96:1e:b3:cf:e4:1d:
a3:c2:06:35:a8:bc:76:e4:8d:5b:83:8a:14:ec:c0:
5d:24:04:17:61:b0:1d:b5:ec:b0:0b:81:f1:a2:2b:
f4:ba:83:e6:72:2b:dd:5f:92:0c:d7:53:f0:4d:53:
da:27:d0:75:25:65:a4:0c:93:08:5f:7e:47:e3:23:
83:66:1f:10:10:f4:70:4c:1d:38:76:ea:0a:87:69:
50:e1:5b:10:f8:f7:e3:65:33:37:e4:43:4e:68:c4:
03:10:14:e8:dc:cf:3c:72:ab:23:86:72:54:6b:9d:
b8:9d:52:75:30:3a:50:ee:4b:c5:48:95:72:41:d3:
3f:dd:dd:b0:f8:ef:c8:3f:0a:46:92:58:b9:c0:ed:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:78:68:AE:C7:40:4C:FA:15:AA:28:B2:E2:7B:93:22:BC:12:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9461AC5C59B511F0BA5201CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0-156.229.223.255
156.239.24.0-156.239.53.255
156.252.96.0/19
156.252.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:74:f1:21:ac:e4:4c:73:85:96:33:ea:63:12:b0:1d:ca:58:
03:40:29:ee:36:66:0c:56:85:2c:b9:29:d7:a4:4d:ca:62:af:
05:ef:d5:97:5e:d3:ec:fa:ac:fb:75:03:ba:61:92:96:0b:00:
7e:ab:9f:59:ba:69:b0:96:78:dd:73:f5:96:30:15:54:9b:a4:
55:96:9e:72:09:a3:de:58:73:38:ba:29:c3:89:2a:d5:67:b9:
f4:92:ba:8e:32:7f:2b:01:69:04:aa:61:f6:40:6c:f3:8e:9a:
f1:9b:5f:94:f8:cb:ba:78:75:4c:a5:ab:06:7d:33:6e:34:33:
61:91:e3:da:2c:99:a7:29:32:88:50:f6:4a:ff:3e:68:74:c0:
bd:31:e2:a3:6d:54:f0:fb:24:4c:6b:e6:63:f8:22:88:3a:34:
b2:9c:e0:dd:ee:aa:f4:36:bb:a5:87:ce:b0:e4:7a:0b:26:72:
6f:2b:ec:72:bf:ce:27:08:0c:50:84:49:9e:0b:c4:14:a3:92:
63:46:a9:55:1f:49:c0:99:fc:18:92:e2:54:06:ca:fe:5d:bc:
1d:72:db:93:26:e7:fe:48:f6:b9:91:04:9a:3e:5d:a9:23:78:
66:42:49:6b:fe:3b:74:c2:0e:9f:d3:8e:47:e8:e1:de:60:45:
eb:46:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 01:49:21 2025 by rpki-client