Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA988DCA6F9511F0A9BA7FABDAE4EC9C.roa
File: EA988DCA6F9511F0A9BA7FABDAE4EC9C.roa (raw, json)
Hash identifier: yaLT4ilN9CPFdbfEld5BH/KwqomfizWuv3GooA3ASak=
Subject key identifier: B1:98:8C:0C:3D:0D:2F:6D:A8:BD:D7:10:43:CC:E6:6D:78:05:8D:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016878
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA988DCA6F9511F0A9BA7FABDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 11:43:33 +0000
ROA not before: Sat 02 Aug 2025 11:43:25 +0000
ROA not after: Sat 06 Sep 2025 11:43:25 +0000
asID: 139646
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92280 (0x16878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 11:43:25 2025 GMT
Not After : Sep 6 11:43:25 2025 GMT
Subject: CN=688df9e5-a74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:f9:5c:b1:bc:56:21:a8:09:00:64:a8:63:
c0:57:41:c4:c6:cd:9e:52:a0:f2:34:ac:08:25:47:
fd:42:9c:36:df:7c:15:c9:94:88:3a:ba:60:76:00:
3b:fe:e4:d4:b9:8d:c1:6e:ef:36:72:03:63:cc:00:
33:c3:be:19:3f:20:54:5a:15:ed:0f:d3:fc:e2:97:
ea:40:31:7b:f8:81:2a:a3:62:aa:18:7b:5b:58:d4:
12:ec:cb:9b:df:84:27:e3:a0:e8:ad:89:7f:e4:d7:
d3:93:64:04:1f:6a:81:d4:51:fa:ca:7b:59:8d:b4:
2a:b2:22:32:36:59:7c:d3:64:91:ad:01:e5:71:7a:
7f:60:e6:2a:80:0e:90:9f:5b:71:13:62:10:3e:e8:
6c:d0:d7:8a:82:76:e1:ca:01:cf:02:32:c0:0b:09:
a0:78:da:8d:6b:b0:d8:3c:a8:92:61:51:0c:43:6d:
81:d1:89:5b:ae:9a:69:c1:36:d7:9b:51:4d:8e:c9:
58:04:6f:f4:81:c9:38:d9:a3:af:17:63:16:f8:9e:
24:d4:58:aa:21:f0:52:8b:6c:6d:d4:b0:b1:26:c4:
51:06:16:da:4c:3f:5d:40:71:79:01:95:af:02:9b:
97:54:32:72:52:66:0e:a1:eb:db:4c:83:19:36:25:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:8C:0C:3D:0D:2F:6D:A8:BD:D7:10:43:CC:E6:6D:78:05:8D:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA988DCA6F9511F0A9BA7FABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:11:a2:2b:53:76:f6:e9:68:39:42:fe:a1:1b:a7:41:36:f9:
4d:68:cf:58:5e:7d:fe:ca:ab:11:8a:0f:fd:8d:4d:f2:2b:d7:
a7:2e:3c:cb:22:1b:19:83:37:fc:38:cf:15:9a:5f:83:e1:87:
a8:15:2c:6b:c1:55:39:6d:a2:a5:73:87:1c:f0:01:d6:1b:9a:
07:02:f4:3e:80:73:a3:fd:35:b4:2e:6c:44:94:4a:0a:71:ec:
96:af:e8:12:fe:3c:d0:bd:db:81:c1:5d:23:74:b6:c6:3f:96:
36:db:66:51:33:d4:82:7b:8d:84:77:8d:14:ee:78:12:7a:9e:
52:22:4a:d8:be:34:6d:b2:9d:35:6c:f3:80:22:97:57:75:8a:
ef:7e:7f:64:5e:ce:25:09:a5:c8:cf:9c:50:52:ea:7b:4d:e0:
ce:06:9b:95:0d:0d:44:87:59:81:40:d1:c4:69:53:37:d7:43:
a7:8d:18:ed:94:b3:62:76:66:b2:2b:17:a9:b5:23:3b:43:ac:
38:33:47:96:ed:8c:97:bd:7c:ed:d7:b9:d4:75:ba:79:bf:33:
f4:7c:d3:09:db:c1:17:8d:e3:e9:a7:82:bb:1f:7b:81:6e:fd:
ef:0e:f6:31:5d:fd:a8:f4:8a:aa:85:c5:9b:77:cd:73:b5:d7:
66:f3:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:41 2025 by rpki-client