Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EFE0FD266CF11F0B3DAB388DAE4EC9C.roa
File: 7EFE0FD266CF11F0B3DAB388DAE4EC9C.roa (raw, json)
Hash identifier: AV563LXW+VBBlsdJzLXZQm1aSXrk3SaFwkJNpcdIbXA=
Subject key identifier: 9A:B0:6D:FC:FD:1A:2E:A7:B1:52:F4:66:7C:5F:B2:59:EB:0A:E4:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016683
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EFE0FD266CF11F0B3DAB388DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 07:43:03 +0000
ROA not before: Tue 22 Jul 2025 07:42:56 +0000
ROA not after: Thu 28 Aug 2025 07:42:56 +0000
asID: 140475
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91779 (0x16683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 07:42:56 2025 GMT
Not After : Aug 28 07:42:56 2025 GMT
Subject: CN=687f4107-aeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:27:66:b9:da:57:07:c4:02:c0:52:f3:c3:
c1:5e:1c:23:60:f1:90:ac:4f:66:8b:b8:48:87:a1:
2c:3d:b0:f8:ec:7a:cd:8c:b2:a2:cf:6d:15:33:70:
59:de:89:01:84:a2:37:f4:fc:36:05:ec:a2:18:1e:
58:52:a4:78:ae:c0:95:2f:d5:bf:f7:5e:4d:1f:ff:
00:ed:b4:03:56:93:e4:ba:2d:48:ae:25:48:63:30:
f3:38:86:c7:e0:f8:ac:4f:aa:2c:bc:cf:52:b9:7f:
70:77:db:a6:11:c7:f2:9a:d1:b6:af:26:7f:7d:9f:
17:c9:a7:aa:32:bf:52:b6:34:d3:bc:33:91:93:41:
5e:cd:da:af:bc:92:8f:70:07:a3:41:78:1f:51:bd:
22:f9:de:18:11:a5:62:e1:2b:23:0a:73:36:bf:bc:
1c:14:da:5b:9f:07:47:3f:dd:94:3e:68:50:ea:bd:
20:3a:bd:ea:53:b6:09:6f:52:8e:c3:e7:46:87:9d:
6e:87:1d:3b:91:6c:dc:15:1d:dc:03:85:e6:d7:6e:
cc:c9:05:6e:c9:44:d7:ed:65:b0:71:39:88:cc:2e:
11:33:98:2a:a4:f0:93:d8:b2:31:98:01:51:73:4c:
d9:7f:e3:03:69:b0:f3:0a:41:a1:68:1f:e6:9d:2a:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:6D:FC:FD:1A:2E:A7:B1:52:F4:66:7C:5F:B2:59:EB:0A:E4:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EFE0FD266CF11F0B3DAB388DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
06:91:e1:60:07:a6:59:9d:a7:33:15:34:9b:df:ef:b5:97:ce:
bf:6a:f0:ae:51:5d:98:68:7f:27:3b:f0:77:87:7d:97:11:3a:
62:8b:d9:b6:8c:cb:f7:8c:7a:48:44:ea:18:e1:dd:84:6f:21:
88:d2:22:96:49:0f:4c:6e:3b:09:d5:9c:74:6a:e2:59:3e:5e:
55:40:83:2f:5b:c2:44:82:9c:c9:d8:cc:47:fd:b8:28:f7:3c:
3e:31:7b:1d:2e:4a:e3:7e:41:9d:74:96:2a:12:c8:24:48:99:
74:10:54:7c:a3:eb:03:81:18:83:04:33:03:8c:04:23:b3:8a:
99:2c:f4:79:c2:55:27:c7:18:2c:46:df:cb:d9:d1:c4:f0:71:
7b:69:ef:24:ef:de:26:11:6c:25:63:5e:06:a8:f3:5d:a3:c1:
02:07:b6:42:58:03:96:04:1a:1b:42:46:b5:08:b7:3b:1d:ae:
c2:4e:83:5a:03:17:f0:2a:d8:d2:71:94:0c:46:00:8b:e6:b2:
71:0c:ab:fb:6c:e0:08:ef:cf:de:12:ec:ef:6c:c8:ec:8b:a2:
c0:15:9f:25:09:63:65:e4:1d:84:60:38:c0:ea:8f:71:a3:72:
0d:60:db:47:70:0e:52:50:5d:31:68:27:56:08:b8:fb:9d:ba:
8c:74:50:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:25:27 2025 by rpki-client