Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/485B4AB267DD11F08C92F0DFDAE4EC9C.roa
File: 485B4AB267DD11F08C92F0DFDAE4EC9C.roa (raw, json)
Hash identifier: 7T1Jvz0BRUcO/w5uc7tx4zEZ3twLsJcFrDlgZsLiYuY=
Subject key identifier: 40:EE:A1:88:46:EB:E5:37:A7:9B:C0:49:B7:4E:82:76:5D:A9:37:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01670C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/485B4AB267DD11F08C92F0DFDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 15:54:15 +0000
ROA not before: Wed 23 Jul 2025 15:54:10 +0000
ROA not after: Fri 26 Sep 2025 15:54:10 +0000
asID: 63139
IP address blocks: 156.225.123.0/24 maxlen: 24
156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.227.9.0/24 maxlen: 24
156.227.15.0/24 maxlen: 24
156.229.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91916 (0x1670c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 15:54:10 2025 GMT
Not After : Sep 26 15:54:10 2025 GMT
Subject: CN=688105a7-ca17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:2b:3f:86:de:2f:b9:a2:cd:b4:97:c2:7a:
a0:81:42:39:df:6e:37:c7:5c:2f:7e:a9:01:3d:86:
dc:66:30:5a:48:d1:88:ac:9d:fe:f5:df:a0:5d:33:
c8:3e:43:aa:e1:14:5e:2e:14:cd:85:4f:d5:21:0a:
91:a6:ac:11:7f:bd:73:b9:ee:da:ba:31:71:66:85:
87:bd:4d:51:23:74:86:2b:50:16:4f:77:98:36:60:
7a:e9:ee:16:2e:75:fc:3d:2d:e0:c6:32:e5:33:6d:
3d:7e:96:66:f0:cc:9d:a0:b4:62:50:2f:93:be:d5:
58:bb:69:0a:aa:5e:05:7d:74:39:22:06:06:98:72:
ac:b3:30:34:94:12:52:69:25:2a:71:98:ea:da:f7:
d7:2c:84:8c:3f:75:8a:f0:6a:a9:5c:ae:65:f2:89:
ca:65:e9:c1:ed:e1:79:21:42:88:31:3c:2f:0b:a9:
98:2c:46:3b:f7:8c:a5:39:7d:2c:26:97:f1:85:dd:
77:b2:34:0c:8b:21:c0:83:3f:4c:39:e2:3b:4a:4e:
f5:a3:c3:29:5b:16:cf:24:f5:e8:19:18:67:3f:3b:
88:5f:1f:b1:fe:01:42:27:97:97:b7:c4:b1:41:12:
a3:96:bc:bd:19:f7:94:5f:ac:61:14:4f:96:87:73:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:A1:88:46:EB:E5:37:A7:9B:C0:49:B7:4E:82:76:5D:A9:37:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/485B4AB267DD11F08C92F0DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.123.0-156.225.127.255
156.227.9.0/24
156.227.15.0/24
156.229.46.0/24
Signature Algorithm: sha256WithRSAEncryption
18:26:fa:00:d0:e1:a4:9f:c6:10:ea:c6:8c:bb:bc:e1:03:45:
69:ff:a8:f0:a4:6c:38:5a:55:91:e0:56:5e:97:89:bd:a0:a1:
7d:ed:4a:3b:99:77:e4:74:13:85:02:50:95:c5:c3:5c:5d:72:
9c:57:12:44:be:c3:2b:96:37:d5:86:86:d3:09:ed:2f:3a:2b:
05:92:97:fa:05:d3:fe:0a:83:96:1b:99:b0:0d:00:2f:94:5f:
58:b8:ee:20:64:22:cf:d0:a2:42:39:ee:5f:13:8d:a5:5b:ee:
6d:e2:fb:8d:88:44:be:f9:b7:5a:02:11:90:ab:d6:72:11:f2:
e6:50:8a:f4:e5:2f:ee:b3:19:f5:aa:65:a2:b6:86:8c:51:82:
a4:2f:09:bb:0a:68:44:e8:8e:03:fd:37:e8:81:b9:33:ed:9d:
ed:dd:96:80:8f:d8:24:91:e4:f0:52:5b:b0:70:cb:dd:e8:06:
a0:59:4c:43:bb:53:17:cb:73:6e:4c:0a:e0:3c:55:74:c6:c8:
dd:e1:34:1a:e4:89:dd:d6:25:11:17:7e:31:56:aa:eb:45:1e:
75:74:68:6a:01:a3:77:53:fc:5c:c8:0c:36:4d:91:18:3f:6c:
4c:5b:fd:4c:47:0b:13:e8:24:56:2e:23:7b:a4:bd:d0:60:07:
ef:d9:e2:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:51 2025 by rpki-client