Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3349EA966B9A11F089EF6CBEDAE4EC9C.roa
File: 3349EA966B9A11F089EF6CBEDAE4EC9C.roa (raw, json)
Hash identifier: fvL16ZSi+hbylgoxHwaJl+V82yhTOevIfS4Kav4XLhs=
Subject key identifier: B9:4A:0F:B8:E4:F5:2E:B4:51:FF:E7:CA:56:02:E2:FF:F9:24:D5:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3349EA966B9A11F089EF6CBEDAE4EC9C.roa
Signing time: Mon 28 Jul 2025 10:04:08 +0000
ROA not before: Mon 28 Jul 2025 10:04:03 +0000
ROA not after: Mon 01 Sep 2025 10:04:03 +0000
asID: 62513
IP address blocks: 156.225.32.0/21 maxlen: 24
156.225.40.0/24 maxlen: 24
156.225.43.0/24 maxlen: 24
156.225.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92138 (0x167ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 10:04:03 2025 GMT
Not After : Sep 1 10:04:03 2025 GMT
Subject: CN=68874b18-ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:b1:32:44:0b:b7:38:9c:3a:3b:9f:6c:98:
e7:72:23:fe:dd:95:c5:bb:4b:20:d3:28:3d:0b:5e:
fb:ef:17:c1:ed:13:7b:1f:63:86:e1:f4:9a:d9:3e:
c1:ef:20:51:28:6d:f5:0b:25:60:cb:2d:2e:23:a9:
44:eb:be:32:dd:bf:6a:8e:82:a3:38:4d:98:c4:81:
b4:32:9b:c5:70:93:67:a9:b1:a6:fa:69:fd:2e:3c:
94:12:18:bb:c7:81:29:a1:cf:95:ce:c3:28:ba:1b:
98:db:74:79:a5:e5:0e:d2:8c:b4:1f:04:dd:5a:4d:
01:fc:d1:3d:ff:a8:49:bd:d7:de:24:2e:c4:1b:d7:
ff:e0:78:14:e1:52:1b:a8:34:32:dd:ef:b0:44:92:
68:31:c1:4a:d7:8e:2d:d3:4b:70:e7:04:d5:61:98:
41:8b:89:11:13:d3:4a:c4:2d:c0:4f:9f:9f:9b:52:
9e:da:08:93:27:eb:2d:77:49:a7:8c:07:bd:37:79:
cd:46:87:c7:1a:c3:94:98:24:d1:7c:fa:70:13:08:
90:f8:10:b1:3d:e6:e3:a8:e2:d9:f0:d3:3a:83:b5:
61:2a:3c:96:a9:93:d2:0b:7b:8f:aa:6c:a4:21:b7:
85:3e:6c:86:e0:13:d0:ba:c1:11:88:34:6d:5f:37:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4A:0F:B8:E4:F5:2E:B4:51:FF:E7:CA:56:02:E2:FF:F9:24:D5:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3349EA966B9A11F089EF6CBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0-156.225.40.255
156.225.43.0-156.225.44.255
Signature Algorithm: sha256WithRSAEncryption
aa:19:e9:44:55:da:ae:66:c5:52:85:20:c5:ae:7c:d8:a3:d0:
a7:19:43:1b:14:a1:03:db:c0:de:fd:a7:9b:4c:3f:d7:bd:ef:
b7:ee:53:aa:db:0a:88:0d:9d:27:de:39:b4:eb:c8:44:13:db:
72:01:d9:b2:63:aa:27:b9:0a:e6:e4:58:dc:d3:e5:e9:e3:94:
ea:64:d0:1a:b7:ab:71:6a:87:a4:7d:b7:2d:8c:bc:87:fb:c6:
7b:7c:7f:8c:88:50:1d:5b:93:00:b9:4c:e0:dd:12:7c:f2:e9:
e7:70:63:50:97:63:83:05:92:ca:d4:d6:82:4e:06:b3:50:8a:
e0:9a:02:35:67:0b:93:cb:29:fb:b9:b7:19:11:14:5b:ab:77:
de:3d:92:4b:6f:9a:08:1d:48:66:b0:ba:00:5d:b4:74:42:fa:
0e:5e:b8:13:a9:45:9a:21:a2:77:a1:8b:79:77:cc:0d:9b:0a:
0a:a9:bd:bf:be:82:82:84:88:74:a0:d1:15:26:fc:1d:ac:5d:
43:f4:62:9e:c9:64:9d:80:44:df:74:ee:c8:5f:55:30:a6:a9:
72:ac:46:ab:48:7c:92:38:a7:cb:26:5b:9f:ca:d7:96:03:d5:
83:a4:64:48:64:61:97:be:ec:23:fd:28:28:d0:cc:b0:e0:c6:
52:3d:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:57 2025 by rpki-client