Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4CB0D566D1411F08FDCF1E2DAE4EC9C.roa
File: E4CB0D566D1411F08FDCF1E2DAE4EC9C.roa (raw, json)
Hash identifier: lpzDUMiuaND2aTEcv7NbWZS0zxil7X3J0fm+fOKua0I=
Subject key identifier: 35:7A:7C:5A:10:A6:CF:66:11:09:A2:52:68:95:8C:A3:B3:D4:09:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016818
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4CB0D566D1411F08FDCF1E2DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 07:14:56 +0000
ROA not before: Wed 30 Jul 2025 07:14:51 +0000
ROA not after: Sat 30 Aug 2025 07:14:51 +0000
asID: 134365
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92184 (0x16818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 30 07:14:51 2025 GMT
Not After : Aug 30 07:14:51 2025 GMT
Subject: CN=6889c670-3c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:58:81:67:bc:71:45:d4:20:34:12:4e:51:
72:65:ea:b5:4b:3e:16:12:b2:81:9f:0b:10:a4:f7:
3b:c0:ea:86:2e:86:6e:55:47:64:2f:ea:b2:74:3e:
88:a1:d1:5f:eb:2b:85:eb:80:34:ca:76:4d:5c:a3:
3e:a8:32:1e:8f:15:58:08:06:f5:79:a9:9c:20:6b:
ad:8f:67:3a:7c:56:dd:9f:c1:45:6b:e8:3d:04:c5:
33:7b:62:0b:8f:99:61:26:e7:ce:f8:9a:06:0a:3f:
90:f3:1b:4f:77:b1:01:e1:12:64:89:e7:69:e6:2c:
54:7a:2c:fa:d7:7a:41:2c:50:6a:e0:ea:7f:af:77:
da:27:d4:ed:80:f7:37:14:f8:80:77:24:8f:19:93:
5e:c8:45:93:24:5c:b5:08:21:65:57:b5:f1:10:11:
c7:89:11:7a:83:e1:86:68:b7:0e:6f:fd:df:24:dc:
7b:8a:b7:11:b6:fa:13:18:b5:23:c5:46:64:14:72:
2c:8a:50:4e:60:11:d5:35:75:d3:31:48:d4:8c:e1:
aa:fb:64:94:af:2f:a2:79:df:a7:de:81:69:78:f5:
76:a5:20:c7:29:0d:7d:66:0c:4a:67:6f:7a:80:33:
5e:18:eb:8a:c8:77:72:fa:f1:99:ec:b7:55:7b:7d:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:7C:5A:10:A6:CF:66:11:09:A2:52:68:95:8C:A3:B3:D4:09:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4CB0D566D1411F08FDCF1E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:95:07:7b:41:f2:37:2a:05:aa:18:a8:5b:85:27:55:b0:35:
f2:b0:91:90:41:7f:83:6b:96:3b:71:51:05:c7:88:80:00:63:
b2:b3:62:c9:18:2f:8e:1b:ca:33:69:43:fa:0f:20:26:d1:b8:
a0:57:f4:77:3e:55:ef:8b:29:5a:27:3d:c5:f5:f2:4a:46:51:
2b:60:89:40:0e:50:be:2e:14:f4:11:1d:7a:6c:45:98:59:6d:
c7:55:d3:7d:66:2d:90:ea:66:b7:5c:c3:ae:21:50:1d:f4:48:
63:15:ce:3c:d0:1e:b2:80:66:b6:6d:dd:fe:ce:f9:f6:db:98:
e4:1f:80:d7:26:2e:c5:af:85:dc:c0:f6:9f:d2:da:fc:15:e3:
b0:a6:76:b6:7f:86:cd:57:2c:c2:0f:f9:90:a6:a7:75:e3:46:
c2:f1:31:7f:b2:de:4c:7e:2c:65:e6:e4:16:1c:59:58:1e:93:
9b:51:a3:1f:46:e1:59:55:f0:6f:5e:9d:6e:36:12:06:27:bb:
53:35:58:b3:53:13:04:fd:4d:13:62:62:c3:57:f2:52:4c:92:
f4:eb:c5:ea:a9:fd:98:bc:79:66:08:06:81:0f:eb:1b:83:b3:
59:aa:39:d0:d4:bc:e6:3d:81:07:16:5d:cb:41:5e:df:a8:be:
8e:be:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:57 2025 by rpki-client