Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F33706E6BB111F0941B9DD2DAE4EC9C.roa
File: 7F33706E6BB111F0941B9DD2DAE4EC9C.roa (raw, json)
Hash identifier: 9qppbZFTQf/esp+nPt6bg9QC/lE0Ya8nH1dUIj1gW5k=
Subject key identifier: D1:E7:8D:76:4C:54:A5:67:67:BA:99:B8:41:A7:79:F5:FB:D9:55:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F33706E6BB111F0941B9DD2DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 12:50:54 +0000
ROA not before: Mon 28 Jul 2025 12:50:49 +0000
ROA not after: Thu 04 Sep 2025 12:50:49 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92158 (0x167fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 12:50:49 2025 GMT
Not After : Sep 4 12:50:49 2025 GMT
Subject: CN=6887722e-22b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:fa:2b:f8:f1:aa:9c:60:4d:d6:68:00:1a:
7c:4c:eb:c5:13:69:f3:e4:f8:c5:66:41:a8:bb:b8:
a7:7f:c3:db:45:10:ab:0a:0a:21:c5:c6:88:0f:f6:
74:e2:22:7f:59:4c:d6:4d:86:c1:d1:bd:bc:6a:c0:
51:99:11:99:43:46:a5:f3:1c:16:05:da:f9:81:9b:
0f:4e:75:88:3e:23:df:9e:19:7f:de:e3:db:0b:17:
32:46:ff:89:f5:65:40:ae:e1:8f:2c:ad:19:4c:dd:
cc:46:16:c3:ee:90:ed:77:61:46:a7:ca:08:9c:a2:
ca:40:ef:4a:fb:dc:8b:c2:c1:43:ee:aa:94:1a:24:
62:a3:a8:21:89:d1:9f:f7:e3:6d:50:6d:28:45:2f:
03:20:21:60:e3:a1:a2:ac:5d:76:98:b7:bd:61:ed:
72:f4:01:38:ad:3c:61:4f:1e:ce:f7:7e:06:84:13:
e5:9c:3e:53:1e:42:c0:f1:77:d9:f8:09:2c:f5:32:
d9:de:44:c5:53:3e:0f:b0:ed:6e:25:34:f8:6f:50:
0b:f4:05:1f:0d:c0:94:52:5d:83:63:6c:9c:67:6a:
a8:33:c7:f2:7f:df:0e:9b:6a:fe:99:6c:e8:fe:44:
e0:66:cd:ff:e8:7f:fa:93:6a:bb:d1:5f:9c:f1:85:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:8D:76:4C:54:A5:67:67:BA:99:B8:41:A7:79:F5:FB:D9:55:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F33706E6BB111F0941B9DD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d6:6f:3e:45:f9:7f:37:0c:c8:0e:31:2e:df:0f:cf:6b:e3:
13:5c:3a:f6:b8:7a:5a:3f:e1:90:6d:12:6e:ac:3b:47:47:b0:
fb:87:d6:4f:96:18:a7:d5:0f:0f:fb:35:fe:87:e1:d3:96:db:
0c:67:98:65:4d:ea:cb:39:64:53:dc:95:7c:75:19:7e:9f:05:
49:83:6b:94:7f:df:9f:14:97:c5:19:e0:9d:73:5a:9a:3f:92:
f8:73:8f:e6:50:44:51:26:47:82:0e:54:9b:5a:3c:4f:f9:37:
26:56:ca:41:9f:04:7a:a7:e1:c4:07:a8:aa:61:17:07:73:ae:
1d:ad:ef:35:53:c0:fc:87:85:a9:7c:5e:63:6f:36:03:8a:b2:
06:ef:cb:5d:90:29:64:6a:b1:a1:66:39:66:2b:bd:63:92:4f:
68:58:d5:1a:6e:7e:cb:1c:77:0e:5b:59:45:c9:91:10:d6:5a:
a0:48:a9:63:3b:63:b8:3f:dc:6d:99:01:0e:c4:43:3a:2d:a5:
93:dc:1c:d1:16:0e:5a:ce:e6:0c:d1:01:45:dc:06:66:d1:c3:
09:a0:e1:79:37:20:4e:08:c2:48:c1:f8:e7:37:67:6c:90:20:
25:f5:9f:9f:d4:e6:ba:7d:5c:d3:d9:39:c4:6c:b2:e2:0a:76:
4e:56:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:41 2025 by rpki-client