Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0186C4A0689011F0894D82EEDAE4EC9C.roa
File: 0186C4A0689011F0894D82EEDAE4EC9C.roa (raw, json)
Hash identifier: YMyLevFv1guTuZfZyD5RLoBblsmL7M+rmpL/hjyid/g=
Subject key identifier: 44:FD:93:EB:3A:82:8A:30:57:9E:92:C0:DD:B8:44:0D:2C:B8:B9:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016779
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0186C4A0689011F0894D82EEDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:13:36 +0000
ROA not before: Thu 24 Jul 2025 13:13:31 +0000
ROA not after: Fri 05 Sep 2025 13:13:31 +0000
asID: 48031
IP address blocks: 156.236.22.0/24 maxlen: 24
156.236.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92025 (0x16779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 13:13:31 2025 GMT
Not After : Sep 5 13:13:31 2025 GMT
Subject: CN=68823180-b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:48:15:60:00:5c:32:a3:d9:fb:3c:56:a8:
73:e4:e9:51:98:ea:a2:83:0c:ee:21:6b:34:26:da:
11:2b:af:73:56:eb:bc:9c:26:26:bc:99:f0:04:2c:
d6:53:07:c8:3c:6f:5b:60:ee:61:f2:b5:3d:e2:a3:
90:7b:5b:56:99:d1:0f:ce:a3:ea:b5:29:66:34:96:
56:56:a5:2c:9b:52:5e:5e:2a:bb:9d:f3:e3:68:ff:
05:04:f9:77:88:61:0f:db:69:ae:19:56:f8:77:3b:
78:34:1f:f0:cb:d2:dc:00:2f:50:91:81:f9:1b:7e:
81:62:52:c0:91:80:ab:62:1c:39:61:dd:5e:6c:77:
59:77:e4:c1:20:04:2b:d2:66:6d:a5:00:ff:9a:84:
79:36:15:77:80:06:3b:cb:38:4d:27:b2:c3:b9:27:
d4:25:b0:c1:10:bf:e0:bf:e2:7e:a6:58:7d:42:61:
f6:f8:20:f7:b7:50:79:d0:c7:67:da:6b:79:17:88:
9e:86:1a:db:11:d8:2a:84:90:da:69:8d:49:7f:21:
5a:3a:51:5d:3e:dd:d2:75:2c:0d:d1:a9:11:fc:20:
86:ed:05:0e:56:44:a2:7c:e4:c1:08:f3:eb:f0:be:
53:99:13:b9:4c:94:18:99:95:34:19:27:a0:2e:a6:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FD:93:EB:3A:82:8A:30:57:9E:92:C0:DD:B8:44:0D:2C:B8:B9:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0186C4A0689011F0894D82EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.22.0/23
Signature Algorithm: sha256WithRSAEncryption
68:1f:ee:30:aa:36:07:b6:bf:0d:18:8c:5d:c3:76:42:fb:55:
b5:30:ba:20:1c:44:ef:e5:0a:14:ed:ef:47:da:49:8c:0c:36:
40:61:ae:c9:d8:24:45:8b:61:de:02:d9:4e:c4:a3:7b:87:f4:
44:aa:56:2a:34:b1:77:ae:01:df:cc:b6:79:17:ea:18:df:35:
5a:bc:01:22:ed:96:fe:8f:ff:4d:6b:16:f9:4c:3e:46:df:8a:
06:b1:eb:ca:74:94:5d:72:4f:f9:12:48:5d:b7:88:be:0f:6e:
b2:ab:d9:a6:2a:cb:0b:25:e6:67:fb:5f:ec:d0:8f:1b:43:e6:
9e:bd:d5:e8:c2:66:8a:86:94:a8:87:bf:96:7f:32:40:ee:ca:
4a:4f:19:64:24:2b:61:42:5f:3a:48:19:f4:07:58:a6:75:9b:
be:12:30:f8:23:36:64:68:e0:a9:7d:ac:6c:96:38:0f:cc:19:
b8:4b:b0:3d:99:ab:13:b0:5a:9f:e1:4e:86:9e:5e:4d:30:f2:
6a:b5:03:9d:60:66:96:17:b2:23:d8:0b:19:7e:7d:8d:4d:f1:
a7:56:ea:35:90:98:a4:ad:75:0c:bf:fb:67:33:27:18:ad:f3:
a6:23:7f:ba:14:8a:1f:94:47:f4:25:e4:d6:cc:3e:83:4d:7f:
d3:c0:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:17:08 2025 by rpki-client