Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEED164C6D1511F083029DE7DAE4EC9C.roa
File: AEED164C6D1511F083029DE7DAE4EC9C.roa (raw, json)
Hash identifier: 1pKffOGUcKZ3myDy0tV+ft+M4LmmGAIcFPQjEf7IF/Y=
Subject key identifier: E7:D2:F5:BB:57:71:34:90:9D:F6:B3:32:D4:19:19:7C:FB:EB:03:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01681A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEED164C6D1511F083029DE7DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 07:20:35 +0000
ROA not before: Wed 30 Jul 2025 07:20:30 +0000
ROA not after: Sat 30 Aug 2025 07:20:30 +0000
asID: 152705
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92186 (0x1681a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 07:20:30 2025 GMT
Not After : Aug 30 07:20:30 2025 GMT
Subject: CN=6889c7c3-6833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bc:7f:c7:18:5f:2f:79:ca:f9:6f:e2:d2:1a:
b9:ac:3a:9b:91:6e:15:1d:e0:e7:91:30:a0:af:32:
c0:a6:74:0f:d0:ad:5e:c3:3b:e6:cc:0d:29:6a:a4:
6c:a6:a8:2e:57:a4:db:e8:4e:ad:ff:7f:9a:67:4b:
65:c4:cb:ae:f1:3a:09:35:d3:0e:66:1e:1b:91:9d:
46:f7:54:0a:e6:de:b1:a5:dd:2e:17:06:9b:d3:76:
5c:a7:8a:a0:b4:c3:13:98:b2:6f:fa:12:0a:38:6a:
00:ed:ee:12:fc:e9:38:f7:88:34:9a:5c:e3:18:24:
da:cb:08:00:f3:c3:b7:4a:cb:6b:dc:32:ad:99:a7:
49:43:70:c0:ee:f7:ac:72:aa:aa:3f:59:4c:d4:b3:
16:18:bf:ec:34:ec:a3:c1:05:00:df:16:69:a5:17:
61:32:5b:14:f7:1c:85:4b:80:72:25:39:a0:1a:33:
bb:50:40:3e:a1:e6:d0:51:ff:8d:90:f7:86:0e:58:
45:0e:68:9c:0e:e5:fb:ac:90:55:ae:2b:8b:db:cf:
25:b5:5b:6b:a8:08:0d:8c:c4:36:4d:c5:be:fc:11:
df:4c:5d:61:3f:9b:fc:60:18:bb:bd:81:34:15:bf:
51:fd:eb:73:05:df:33:2c:d1:e0:a2:b2:14:67:50:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:F5:BB:57:71:34:90:9D:F6:B3:32:D4:19:19:7C:FB:EB:03:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEED164C6D1511F083029DE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:d4:8e:de:6a:a1:f6:9f:ca:91:37:62:82:c7:30:20:67:c9:
4e:99:2c:8f:6b:6c:a6:16:6e:fd:9e:ce:f8:4b:c8:4b:48:e9:
ba:58:cc:97:4d:6b:71:d8:8a:d2:64:09:b9:7e:fd:e8:f0:75:
b0:0d:4a:a9:27:15:b1:01:b5:27:97:29:a4:56:de:e4:91:da:
ba:ab:5d:9d:c8:b1:73:60:94:60:78:dc:61:ce:b8:80:e3:dc:
2c:a4:79:04:ca:52:62:25:09:b2:41:af:2f:2f:57:a7:6e:09:
06:44:78:da:ba:56:c8:f6:d6:91:39:aa:ec:60:1d:c1:df:41:
1a:32:0e:a1:cd:93:15:3f:b7:38:ce:04:44:f7:98:df:2d:5b:
b1:ff:97:a3:4b:80:29:8f:16:7b:b8:0f:55:5e:d1:34:b6:40:
b5:6b:d6:a4:2e:27:9c:50:40:d1:59:2c:e4:c9:cf:0f:77:08:
07:15:22:a7:e9:d0:3a:cc:7e:d2:ae:11:f9:a0:e7:79:38:f7:
00:dd:57:0a:ec:8d:68:5f:86:e1:9e:eb:37:22:40:99:10:cc:
09:ad:e4:47:87:1f:d8:f3:d1:31:6c:ef:6b:dd:75:44:a8:95:
04:3a:df:e0:a4:c8:37:2a:b4:2c:b3:83:78:58:8c:20:0f:82:
b7:02:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:24 2025 by rpki-client