Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B712E66FBA11F0A919EC96DAE4EC9C.roa
File: D3B712E66FBA11F0A919EC96DAE4EC9C.roa (raw, json)
Hash identifier: Q/khVNHDezpYTyTNyfAO+dD+LalTEjhgziqAYXHIy6I=
Subject key identifier: 69:A4:ED:C7:DC:F8:30:7C:0D:EB:9D:27:51:43:4C:B5:24:72:33:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B712E66FBA11F0A919EC96DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 16:07:46 +0000
ROA not before: Sat 02 Aug 2025 16:07:41 +0000
ROA not after: Tue 09 Sep 2025 16:07:41 +0000
asID: 200373
IP address blocks: 156.242.32.0/20 maxlen: 24
156.242.51.0/24 maxlen: 24
156.248.80.0/21 maxlen: 24
156.249.56.0/21 maxlen: 24
156.249.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92334 (0x168ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 16:07:41 2025 GMT
Not After : Sep 9 16:07:41 2025 GMT
Subject: CN=688e37d2-e324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:f8:3c:1d:e8:92:49:38:2d:60:40:0f:93:
fb:0d:05:14:ef:67:c9:6a:42:49:84:70:0f:fa:19:
72:e6:31:1b:5e:64:ff:9c:42:20:a2:02:8d:dc:fe:
8b:68:70:3d:d8:42:dc:e8:91:b7:57:84:e5:90:9a:
1c:ec:2c:71:eb:47:84:42:9e:32:db:6d:46:b0:f4:
60:6a:7f:e1:5b:3f:f5:4a:57:49:74:80:b5:d5:9c:
c8:cc:46:bf:7f:2b:c4:d1:1b:bc:3a:9e:1f:68:ef:
59:f0:1e:dd:0e:ee:3f:8c:fb:c5:13:e9:95:47:53:
8c:43:17:e3:df:2d:c5:e4:8d:84:b5:95:8f:6d:5c:
9e:51:ea:f2:3c:44:e4:87:8f:5a:f1:f4:85:34:2a:
ed:d0:4c:c5:b8:44:88:02:ee:0c:94:62:c3:43:04:
e3:0a:4d:03:c4:6d:69:ad:40:89:6f:aa:e3:1e:e6:
c7:26:79:b4:3e:50:ad:7d:57:35:f4:02:9b:0b:cd:
27:b7:3b:a1:5a:d1:40:b0:54:d6:91:47:6d:bd:7a:
5c:7f:de:5a:3d:5f:93:ee:ee:fe:ca:a9:c1:bd:8d:
9b:7b:09:a9:59:13:41:7a:37:16:56:6b:1d:d2:46:
03:c4:91:ea:05:d1:52:09:d8:d7:27:fe:40:07:bc:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:ED:C7:DC:F8:30:7C:0D:EB:9D:27:51:43:4C:B5:24:72:33:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B712E66FBA11F0A919EC96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.32.0/20
156.242.51.0/24
156.248.80.0/21
156.249.56.0/21
156.249.124.0/22
Signature Algorithm: sha256WithRSAEncryption
49:ac:50:1d:fd:7e:82:5c:6a:0f:e9:66:e3:0e:06:28:28:2b:
08:f0:c1:df:5a:cd:c0:4a:ef:85:46:00:66:77:6d:e5:0a:46:
3a:b5:62:5a:10:24:fd:74:62:df:13:5b:07:cc:48:91:fb:b1:
69:cf:be:f4:13:c0:f2:7f:5f:f8:81:ac:75:7f:f6:1f:47:e1:
ac:9a:44:cc:36:04:f4:d4:5d:16:41:ce:4e:7b:bb:7e:a7:b7:
d9:bc:7f:d9:d5:3b:ab:37:cb:5a:9f:9d:0e:0f:df:7f:a2:c4:
0d:55:5d:48:97:b1:47:b3:17:4b:c3:cd:3d:34:67:55:21:7c:
1b:d8:ec:c4:0d:f0:5a:29:fc:49:10:29:e5:1f:4c:3d:9d:b8:
ce:81:49:ac:f4:09:3f:cb:17:b1:5e:04:ca:eb:6c:ce:44:17:
85:b9:2c:19:dc:f4:95:f5:dd:3b:12:2b:5c:5c:a5:c7:27:c3:
ad:00:b0:13:d1:b9:35:c6:30:a7:48:5b:fa:83:36:76:f1:8e:
d4:52:1c:54:41:96:f6:29:53:b9:8e:af:e2:bc:63:de:a7:98:
ad:83:9c:81:d0:10:09:86:b1:08:06:6c:70:c4:f2:80:bf:ce:
92:f7:ab:32:b4:c0:a6:7a:a7:b4:d3:af:38:1f:15:fb:92:4b:
ae:8f:14:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:03 2025 by rpki-client