Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/198D7398688911F09D8245C3DAE4EC9C.roa
File: 198D7398688911F09D8245C3DAE4EC9C.roa (raw, json)
Hash identifier: SSY7YC4A8H+BexQ/SJzGaCtzPI4Qp+FEE3Naj8fJ1UE=
Subject key identifier: 37:50:EF:16:4A:E3:74:78:A1:F1:CA:E5:6C:E7:A8:CD:94:84:37:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016767
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/198D7398688911F09D8245C3DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 12:24:10 +0000
ROA not before: Thu 24 Jul 2025 12:24:05 +0000
ROA not after: Thu 04 Sep 2025 12:24:05 +0000
asID: 269816
IP address blocks: 156.248.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92007 (0x16767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 12:24:05 2025 GMT
Not After : Sep 4 12:24:05 2025 GMT
Subject: CN=688225ea-dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:27:5e:5c:f4:0f:a6:72:07:4e:75:a1:a3:
c1:37:43:c3:08:e9:b5:b9:9a:3c:85:ac:6e:c7:a5:
d1:29:a5:56:aa:e6:03:15:01:8e:1d:1a:01:ba:ee:
63:3e:49:f0:96:73:18:88:b3:b4:6f:18:9c:57:8b:
e2:05:23:ad:c8:fb:ee:e7:fd:92:89:15:f3:98:c3:
35:75:88:35:30:30:a1:43:28:70:a2:01:96:47:24:
18:e6:a4:24:85:39:23:96:43:16:a5:6a:a9:2e:d1:
23:a7:b0:7e:b6:52:78:ff:c4:1c:1a:ee:86:7a:f3:
db:04:32:f7:4c:c9:c7:9a:07:9e:d8:82:49:d9:4d:
5a:b5:b0:56:11:02:c4:70:d3:45:85:e6:68:47:9f:
28:3e:18:a2:1a:3f:52:0c:73:4c:d4:93:fc:12:2e:
a4:b7:9b:b1:24:0a:41:96:97:60:e5:f6:89:e8:c7:
43:d6:9f:4c:f3:a8:94:22:a1:fd:41:06:d8:30:8e:
76:5a:df:1d:52:13:ba:4f:31:26:06:ac:0f:7a:df:
e1:a4:21:70:ec:8c:fa:c7:30:fa:b7:f9:da:db:54:
c0:3d:20:48:00:22:95:ff:6d:17:94:c6:1e:10:d8:
47:3c:13:73:0f:39:a6:d2:63:ac:14:66:2f:3a:7a:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:EF:16:4A:E3:74:78:A1:F1:CA:E5:6C:E7:A8:CD:94:84:37:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/198D7398688911F09D8245C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.160.0/19
Signature Algorithm: sha256WithRSAEncryption
25:f7:f7:98:38:7e:ba:65:9b:98:6a:d4:ae:7a:f0:68:32:41:
64:4f:99:b6:31:8e:be:7b:d8:88:0c:d0:32:0e:f5:04:12:08:
ad:66:e9:5e:2b:9c:b6:14:37:a5:05:ef:9c:f5:a4:9a:95:10:
e0:68:ec:01:69:d4:e0:95:e2:95:8d:33:b7:d3:f1:f0:ae:58:
2d:2b:3d:48:a8:2d:71:ff:14:57:bf:2c:7c:94:5f:dd:43:c3:
bb:fa:34:7d:84:e9:fe:15:3b:d8:9e:f0:08:49:62:eb:38:58:
e3:00:51:fc:9f:c8:5d:3c:a5:1d:b0:de:e5:b2:fa:01:d4:17:
31:2f:17:d4:f6:28:4c:25:df:25:0b:45:47:d4:b3:a6:bd:a2:
42:44:0b:80:4d:ca:3a:02:53:08:c3:a0:96:fb:93:1f:cc:ea:
8c:03:22:72:f5:a2:0c:9a:34:f6:c8:a6:48:a3:bc:5d:9f:91:
62:3e:b0:4c:b9:11:8f:d6:fb:d2:46:3d:3c:cd:8a:c9:7f:7f:
ba:47:2e:e7:92:3a:2d:d9:ab:7a:0e:71:12:93:50:b8:42:65:
c9:49:76:ac:62:44:3a:a1:1b:59:ac:8f:e9:5c:af:60:2c:e8:
d4:55:54:2a:a6:60:d8:01:cb:ab:02:28:11:48:2e:01:35:4d:
6c:de:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:49 2025 by rpki-client