Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ADAC90C66BD11F0B08E9497DAE4EC9C.roa
File: 7ADAC90C66BD11F0B08E9497DAE4EC9C.roa (raw, json)
Hash identifier: C3lVAuduDFk1jzAsAFcakgXkFMqAOb0EH+loNGnW4j4=
Subject key identifier: 92:10:E6:59:1A:BC:02:55:71:60:1A:39:19:CC:89:38:0D:5C:E6:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016663
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ADAC90C66BD11F0B08E9497DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 05:34:05 +0000
ROA not before: Tue 22 Jul 2025 05:34:00 +0000
ROA not after: Mon 25 Aug 2025 05:34:00 +0000
asID: 203
IP address blocks: 156.233.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91747 (0x16663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 05:34:00 2025 GMT
Not After : Aug 25 05:34:00 2025 GMT
Subject: CN=687f22cd-1d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:3b:73:35:22:45:c7:dc:36:a2:f9:c5:ab:
e0:82:5d:d1:27:4c:50:9e:ee:6e:b1:a1:ec:52:85:
7e:38:81:c0:cc:61:52:ca:af:8f:13:bb:8f:c3:12:
77:5f:1d:30:e4:e2:fa:48:3c:dd:6d:3d:d8:29:eb:
8a:b8:6c:8c:12:2b:9d:06:29:a5:81:56:06:c2:5c:
a5:54:1e:76:a3:ed:41:ec:a4:e2:fd:92:1f:a0:1f:
8d:e6:d0:18:ec:21:19:9d:0d:6f:c1:9b:0f:cb:74:
66:1f:c1:de:00:c1:b0:96:7e:47:56:15:60:4f:12:
cf:2c:5c:43:3a:40:c4:0b:f6:f4:07:80:db:b9:30:
e7:ad:c4:f3:82:8c:80:b8:52:cc:63:95:8f:9b:7f:
3c:c2:5d:3b:a9:f0:26:84:18:d3:bc:fd:db:e0:b4:
75:a9:0b:5f:28:c4:b4:39:d2:cf:cb:8c:ef:59:41:
2f:1f:33:45:7f:7e:e9:99:35:e3:2c:34:ed:b3:6c:
1c:3b:2d:60:99:06:9d:73:57:27:4a:81:88:82:ab:
7a:19:26:76:ab:d6:5c:27:c1:26:04:e3:39:d2:63:
8c:51:d0:10:06:75:52:dc:2c:d7:85:40:3f:2b:ba:
eb:6c:c6:d2:ae:9e:0c:ab:15:a5:69:b0:98:4a:6e:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:E6:59:1A:BC:02:55:71:60:1A:39:19:CC:89:38:0D:5C:E6:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7ADAC90C66BD11F0B08E9497DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:53:21:38:5b:9e:d7:4d:77:c5:89:0e:35:22:4e:c1:0d:cf:
e9:3d:b0:ec:64:3c:ff:08:a3:ae:48:a8:ab:28:3a:15:ef:29:
7d:a9:69:79:98:e1:a4:9e:78:c4:ba:f5:c7:f6:0b:3a:20:49:
8f:87:61:3c:a5:59:b8:c0:ef:c1:89:e3:80:f1:7d:3a:e0:1c:
63:a3:57:71:88:e9:41:06:74:6c:9b:69:e1:02:db:21:0e:81:
bb:5a:c6:ef:ab:cf:e7:0c:c5:89:74:fb:9a:32:c6:03:3f:80:
56:c6:71:82:a6:78:1a:7e:e2:9a:e1:b6:c1:43:fb:e6:1c:ad:
c2:7c:d2:be:ed:45:10:51:96:23:ab:ec:85:24:6f:02:d2:17:
9b:c1:78:b1:6a:23:cc:db:72:60:bb:ec:41:69:02:3e:f5:56:
53:12:e0:89:50:d8:9c:7a:6d:3f:10:b5:2b:64:c5:f0:ea:a5:
39:f1:0a:fd:db:fe:9f:ea:02:3a:30:ef:48:c1:a5:81:9a:fe:
ab:62:be:f6:ef:0e:c2:3c:a3:ce:1e:ef:6a:37:24:d4:99:ed:
df:0b:9f:2a:5d:9c:b4:92:bf:aa:2c:1c:af:60:f1:32:95:41:
2f:1f:a8:55:cf:50:33:f2:4e:ab:ca:2e:c3:ce:82:36:cb:05:
c3:be:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:12 2025 by rpki-client