Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07C8D0683FF11F0865093DFDAE4EC9C.roa
File: C07C8D0683FF11F0865093DFDAE4EC9C.roa (raw, json)
Hash identifier: JcNO+x+dSDIBQI9UQrfRMlKvzy7orMX5d6DuJhjLuTU=
Subject key identifier: FE:55:DE:EB:D9:7F:31:80:F3:28:77:71:BB:32:3A:BB:44:9E:CF:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017281
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07C8D0683FF11F0865093DFDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 11:11:32 +0000
ROA not before: Thu 28 Aug 2025 11:11:27 +0000
ROA not after: Wed 08 Oct 2025 11:11:27 +0000
asID: 44559
IP address blocks: 156.238.33.0/24 maxlen: 24
156.246.21.0/24 maxlen: 24
156.246.31.0/24 maxlen: 24
156.249.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94849 (0x17281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 11:11:27 2025 GMT
Not After : Oct 8 11:11:27 2025 GMT
Subject: CN=68b03964-bea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:91:10:d0:55:6b:0f:dc:0a:35:dd:bf:0c:
f7:44:e0:38:9f:ea:5b:38:cb:d5:a3:83:6c:7e:6b:
85:b5:e0:c9:61:00:0c:44:ff:09:cb:68:15:06:74:
6a:f2:1a:fc:35:97:1b:9a:f2:92:0f:df:38:ea:b8:
8a:c7:03:59:39:3d:25:28:0b:1d:f0:02:cc:10:80:
77:9c:b5:3f:38:4a:09:27:c3:80:9f:76:e7:85:da:
c3:34:41:5c:2c:e3:0b:f8:26:d4:56:1e:4b:dd:f4:
2f:58:4f:db:16:e4:6b:f6:2e:64:7b:c8:4c:e7:b9:
a5:64:29:19:1e:b1:28:5e:3d:89:4d:b2:53:ed:60:
d3:1a:c8:9e:7d:f4:10:a5:59:1e:dd:56:77:32:bd:
64:44:71:42:23:e1:96:38:73:14:59:84:3d:5c:2e:
1d:3c:1c:0b:44:c3:1c:fe:23:a5:9f:85:4c:c2:82:
9b:14:a7:c2:91:19:c5:71:58:bf:1c:8b:d1:b7:4c:
21:95:90:5d:4c:53:05:64:db:62:a4:c5:c3:c3:5e:
73:d8:9c:5c:31:f4:b9:a9:9f:1a:85:db:c3:6e:f8:
0e:31:79:b8:ab:b3:8c:2f:3c:a9:5e:b5:9b:8d:08:
56:41:c0:98:1c:15:3d:9e:5d:7a:ca:c2:43:59:d2:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:55:DE:EB:D9:7F:31:80:F3:28:77:71:BB:32:3A:BB:44:9E:CF:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C07C8D0683FF11F0865093DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.33.0/24
156.246.21.0/24
156.246.31.0/24
156.249.114.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ab:1f:24:e9:a1:b9:bc:aa:a1:f5:f6:c1:28:46:72:28:e1:
e8:27:da:29:71:a4:22:ac:85:21:38:a3:74:bf:d7:a1:22:8c:
8e:40:5b:23:da:07:30:dc:0c:89:ba:1e:6e:2d:64:b0:ee:39:
bc:3f:e0:81:fd:b7:72:4c:a2:4e:c0:4e:42:b7:42:4b:0d:c8:
bf:bf:2b:aa:0a:80:b6:53:78:12:f2:cc:1d:73:0b:25:61:06:
bc:7d:3b:11:90:4d:30:76:28:0f:55:b9:7c:11:8f:9a:f1:ac:
0a:0f:38:2f:87:60:a7:ee:91:2f:64:f1:16:fd:3a:2d:a1:24:
eb:38:4d:50:9b:23:a7:10:85:20:5e:f2:82:ac:dc:16:7a:d0:
a5:d4:a0:6b:1d:e7:eb:fd:90:8f:f3:12:49:8f:73:04:bd:fd:
f6:44:2e:d3:ff:91:56:b0:e7:72:46:65:d9:3a:91:76:fc:5e:
82:a3:01:77:2b:c6:94:27:28:86:de:72:ce:7a:75:e2:6d:b7:
c1:3e:41:27:67:fe:02:aa:aa:52:88:29:88:56:3a:60:db:a9:
32:d9:a4:a9:9e:eb:43:41:a5:29:6d:07:20:4c:e3:d6:dd:78:
86:fd:7f:63:cc:40:90:a3:ed:b6:ae:fb:73:1b:0b:75:a5:55:
03:72:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:19:49 2025 by rpki-client