Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E02614666BF11F0AA41D8A0DAE4EC9C.roa
File: 3E02614666BF11F0AA41D8A0DAE4EC9C.roa (raw, json)
Hash identifier: feLNyuigJBEE/8h5IOFCYuSP8oFCTWzdpFhZ26M/PVI=
Subject key identifier: 4E:E2:BB:B8:DF:6E:68:4D:D2:BF:ED:DC:B1:35:67:2E:F0:E4:35:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016667
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E02614666BF11F0AA41D8A0DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 05:46:42 +0000
ROA not before: Tue 22 Jul 2025 05:46:37 +0000
ROA not after: Tue 26 Aug 2025 05:46:37 +0000
asID: 395793
IP address blocks: 156.228.62.0/24 maxlen: 24
156.228.210.0/24 maxlen: 24
156.228.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91751 (0x16667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:46:37 2025 GMT
Not After : Aug 26 05:46:37 2025 GMT
Subject: CN=687f25c2-b8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:ea:6c:9e:79:1d:c3:87:72:ec:76:f3:42:
03:57:dc:17:bd:70:05:3c:32:c6:2a:e3:38:c3:19:
4e:84:38:ae:0d:ac:0b:b6:6f:cd:27:85:69:72:3f:
f7:34:38:1e:14:ad:09:7b:f2:e4:d9:fd:e8:36:a8:
d0:fd:81:54:a8:ac:4e:6f:0a:ae:ae:5b:c6:13:ee:
7a:82:c2:26:09:c3:f6:04:cd:69:b2:3f:d9:67:26:
13:14:9d:32:8e:38:08:85:87:e9:b8:a5:74:de:2d:
28:66:47:73:e5:60:b2:db:3d:06:31:31:b9:06:4e:
f2:d0:41:91:a5:00:99:9c:3e:4e:fd:d1:56:c4:f8:
f6:9f:19:2e:72:58:b3:88:4b:35:ba:ff:90:02:ee:
15:1f:0f:1e:04:83:90:eb:54:9d:b2:a7:8d:53:23:
78:6b:7a:ba:97:43:da:cb:d6:d6:d2:36:c8:41:e9:
9d:fa:84:e2:01:20:2d:a5:c5:67:94:d3:3d:4a:33:
f3:47:a9:e7:d6:f1:69:72:50:fb:30:6f:47:11:86:
d7:b2:02:2e:2a:af:17:a0:46:bd:51:32:34:ff:a7:
d1:d2:71:58:d2:c1:21:ef:6c:c0:2d:39:cc:9a:13:
37:87:41:97:cc:11:b5:8f:e0:a7:44:e0:69:ac:85:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E2:BB:B8:DF:6E:68:4D:D2:BF:ED:DC:B1:35:67:2E:F0:E4:35:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E02614666BF11F0AA41D8A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.62.0/24
156.228.210.0/23
Signature Algorithm: sha256WithRSAEncryption
06:73:11:20:a6:4d:86:36:9e:e7:b3:b0:71:10:3c:55:93:52:
ef:ac:7c:00:dd:0e:b4:54:00:59:c8:99:0e:fb:05:5b:19:01:
b1:9a:85:18:78:72:3a:10:00:7e:f7:c7:78:b4:76:68:dc:2c:
db:1e:06:bc:c8:fb:c5:43:5d:54:08:77:a2:53:f5:a4:27:74:
c0:86:23:ed:ab:7d:46:b7:a7:e9:df:c9:5b:16:f1:59:bf:2c:
b1:b8:b8:f8:a3:ea:4c:81:78:e8:9f:cc:42:1c:9a:66:22:44:
f4:ea:be:53:91:a4:98:95:95:9a:a4:c4:08:4e:d8:40:c6:11:
e4:04:35:ff:ac:bc:ce:7b:28:2c:0b:f9:41:88:e6:2b:37:b8:
cf:43:e9:0c:66:69:46:86:d7:62:45:bf:d4:6b:af:e9:c3:32:
ee:69:2d:40:43:da:9b:e5:cd:9f:8c:e5:72:eb:e5:be:bf:4b:
92:e0:8b:bf:5f:1c:96:0b:ea:34:3e:77:4c:8c:b0:13:12:22:
53:36:30:3e:75:0d:3c:47:ef:38:7a:f4:ae:d4:58:17:ee:8f:
4a:af:a7:33:8a:46:da:59:da:be:ce:0e:a6:cd:81:48:31:e5:
b3:18:b4:40:21:75:ec:79:36:3b:30:04:2a:2a:89:60:ce:c7:
35:28:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:34 2025 by rpki-client