Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49484ACA66E211F0BFB53981DAE4EC9C.roa
File: 49484ACA66E211F0BFB53981DAE4EC9C.roa (raw, json)
Hash identifier: lmpQMas8b06CvV1E32grgQ+w5O8yRCwC3d60y8I86LA=
Subject key identifier: 57:74:F6:F4:D7:58:C3:E3:0B:F3:C5:4B:39:C8:CA:30:1F:DE:BA:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01668D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49484ACA66E211F0BFB53981DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 09:57:33 +0000
ROA not before: Tue 22 Jul 2025 09:57:27 +0000
ROA not after: Fri 29 Aug 2025 09:57:27 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
156.229.160.0/21 maxlen: 24
156.231.111.0/24 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91789 (0x1668d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 09:57:27 2025 GMT
Not After : Aug 29 09:57:27 2025 GMT
Subject: CN=687f608d-427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:c0:5e:57:4c:ff:b4:85:6a:1d:90:db:85:
9d:d9:b0:ab:35:5f:e2:38:3b:13:fa:e8:71:05:42:
f2:66:cc:b3:1b:f8:2f:f7:75:50:2c:37:f1:e9:17:
eb:e4:88:f8:ec:b9:3a:07:01:b1:bb:27:02:49:cd:
c5:be:9b:02:d5:b0:18:02:6f:6b:19:84:b8:7a:87:
06:b8:47:1c:7d:77:0c:76:58:34:45:a3:34:28:74:
cf:47:92:89:e6:9f:84:4e:8a:4a:3a:2f:4f:d5:05:
a5:13:44:1e:70:a3:5e:c4:cc:5a:1d:87:e9:93:bc:
93:d8:e1:4d:2b:51:06:5e:1b:4c:dd:de:1e:5b:c9:
b8:1a:20:9f:cd:24:28:a0:54:6a:6f:d2:1b:46:c2:
0e:1d:d1:8b:96:89:ae:ce:bd:bf:15:fa:e3:a3:54:
7e:86:44:0f:b0:3e:ec:1c:5c:6b:60:36:d8:d5:36:
72:a2:60:dd:f7:9f:a4:fd:97:19:e2:50:db:1b:70:
1f:c1:e2:7b:96:1f:44:92:41:f8:75:48:a5:23:fa:
78:a2:ac:3a:64:6c:f8:f1:fd:e4:91:61:4d:e3:19:
05:ec:db:d2:ac:77:81:65:3c:ee:13:de:0b:46:50:
64:33:fd:20:f2:98:eb:ea:9a:27:4f:90:91:03:ab:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:74:F6:F4:D7:58:C3:E3:0B:F3:C5:4B:39:C8:CA:30:1F:DE:BA:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49484ACA66E211F0BFB53981DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
156.229.160.0/21
156.231.111.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a8:a3:50:71:4c:33:44:1c:ad:0f:96:03:8d:81:ee:e5:d6:
60:98:4f:dc:59:a8:43:b2:66:98:a9:20:98:e4:bb:68:62:a5:
9b:3a:e9:d9:26:b4:51:64:81:a6:8d:0d:57:38:c1:e9:b7:46:
88:62:e6:46:7b:14:3f:0c:c8:b9:e0:88:65:29:b1:d9:35:10:
b1:73:de:6d:57:66:75:90:01:65:22:7c:14:92:84:47:8e:72:
8b:b0:84:e4:c9:25:64:a5:05:dc:7c:b8:ed:bc:4e:4b:0b:27:
68:d8:06:9a:30:29:47:b8:57:a5:7d:0c:02:aa:0b:09:d0:84:
76:43:5e:d1:96:87:87:62:07:3b:84:55:cf:db:49:35:3a:db:
78:cd:6a:9c:f6:05:e7:83:e3:ca:39:e9:76:74:c8:1b:51:a8:
d8:03:86:b2:15:32:fc:ca:28:1f:e1:89:25:7f:f2:93:0d:b4:
f5:ba:a3:7f:2f:f8:48:b2:06:2b:d2:bc:11:a5:1f:e1:3c:63:
aa:fe:12:48:43:f0:b8:7b:4d:59:88:79:df:c6:58:a9:7a:7c:
7b:3b:10:ac:63:b6:5c:4f:e1:e8:98:77:11:94:cb:7d:36:1d:
d8:1b:ac:69:64:5a:e3:3f:de:5b:ae:47:e3:a5:3a:37:b3:ae:
f7:b5:7d:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:55 2025 by rpki-client