Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3921BB22687711F084ACE7CFDAE4EC9C.roa
File: 3921BB22687711F084ACE7CFDAE4EC9C.roa (raw, json)
Hash identifier: o1+2Vs/QZU/rtf90i4w5DsbJ/boOU+bxwXxf7rQJyX0=
Subject key identifier: AD:26:8B:80:FB:87:21:9C:8D:25:E0:A9:95:0B:DF:EB:13:00:D9:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016730
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3921BB22687711F084ACE7CFDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:16:12 +0000
ROA not before: Thu 24 Jul 2025 10:16:07 +0000
ROA not after: Mon 03 Nov 2025 10:16:07 +0000
asID: 133748
IP address blocks: 156.225.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91952 (0x16730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:16:07 2025 GMT
Not After : Nov 3 10:16:07 2025 GMT
Subject: CN=688207ec-7cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:c1:d0:5c:05:2e:fb:66:1a:00:ba:59:d4:
dc:88:8c:c3:90:37:65:02:ed:5b:84:e7:f4:23:ec:
cc:8e:89:78:79:6a:1c:a7:84:ef:b4:33:c1:dd:a8:
97:fc:70:6e:cf:b0:f4:1e:43:d3:1a:d8:ed:cb:f2:
d2:a8:0f:75:82:13:2c:f9:a0:bb:3e:d5:b4:03:42:
f4:dd:e9:26:19:cf:3f:da:fc:63:0b:b3:d2:33:89:
27:bf:4b:cb:5d:3d:99:a2:1f:a3:a1:cd:be:ce:0b:
33:56:6f:c9:9d:d3:0a:a2:51:1c:91:c5:c9:51:37:
69:9a:e0:bb:ce:b0:39:f2:d3:02:9a:e0:d3:6f:97:
fd:87:85:cc:e9:1c:63:e0:62:00:2c:e9:2c:e4:d0:
bb:9c:e7:94:f8:ab:47:73:a3:0a:92:56:25:dc:6b:
b6:cb:43:b8:91:97:78:4c:5c:bb:f2:e0:4e:d3:d1:
01:3f:db:97:09:16:3c:60:41:97:a1:4d:7e:12:ce:
69:69:0c:60:49:16:12:d3:54:5a:59:48:67:73:32:
5a:cc:f0:d8:46:41:92:a0:91:ab:d0:98:d0:dd:2c:
2e:fc:13:16:3a:3b:36:49:87:72:ce:17:03:60:e6:
16:7d:b3:5b:5f:05:f3:a7:c8:02:a6:de:18:29:54:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:8B:80:FB:87:21:9C:8D:25:E0:A9:95:0B:DF:EB:13:00:D9:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3921BB22687711F084ACE7CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.48.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9d:c9:a4:c8:81:4e:81:0f:17:a7:8d:a1:24:50:38:81:4b:
81:fd:c0:d1:76:0d:27:28:f5:e1:15:93:84:58:3e:86:54:3a:
07:f0:ef:e4:44:4f:ab:8d:f5:62:32:59:5d:39:ae:e8:c0:aa:
86:6d:e8:9c:c2:ba:96:7d:5d:e1:36:0e:ec:75:ce:76:2f:5e:
f8:a2:72:1c:37:68:6b:00:68:51:04:0a:1e:d2:a0:ea:55:7f:
73:47:cb:b0:7e:c8:24:ea:11:c7:ac:46:eb:f6:21:22:c4:62:
7b:f2:e3:00:89:03:fa:74:0d:bb:e7:1a:b4:e2:ff:05:bf:16:
d3:e6:41:31:c5:1b:94:06:24:9b:4c:60:65:16:82:3c:e4:ef:
6a:82:44:c9:3c:2e:03:f5:00:4e:99:e0:d3:11:e3:36:f3:f7:
e6:03:bc:d8:6a:c0:c5:8a:fa:a2:19:24:f3:be:44:50:06:5a:
a9:9c:97:a4:ec:2e:fa:18:a5:1a:80:91:b1:0c:7a:fa:b1:06:
a2:18:bf:ef:6a:8a:96:33:71:c4:42:e4:14:96:82:80:b4:bb:
e4:71:c7:80:d6:45:11:7a:e5:a3:ff:0e:1c:f3:cc:47:ad:1f:
4e:50:8a:d2:8b:26:59:2b:9f:61:d2:4b:6a:bf:37:66:79:43:
18:84:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:17 2025 by rpki-client