Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB32C746B9A11F0BD76FAC3DAE4EC9C.roa
File: FEB32C746B9A11F0BD76FAC3DAE4EC9C.roa (raw, json)
Hash identifier: 56uje42x6stLR8BKOvZQWnm7vJlMRhXErPl3yGNShso=
Subject key identifier: 99:05:00:12:25:5B:4A:AE:EA:DB:0B:43:52:11:72:2D:C8:29:11:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB32C746B9A11F0BD76FAC3DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 10:09:49 +0000
ROA not before: Mon 28 Jul 2025 10:09:44 +0000
ROA not after: Mon 01 Sep 2025 10:09:44 +0000
asID: 213707
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92140 (0x167ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 10:09:44 2025 GMT
Not After : Sep 1 10:09:44 2025 GMT
Subject: CN=68874c6d-6b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:5c:db:5b:e1:d6:68:83:e2:25:f1:3e:38:
93:98:d4:05:31:f8:85:c3:7f:b9:e4:05:39:1a:07:
11:d2:1a:36:43:b7:65:9e:8e:12:fe:7c:b3:b1:74:
ed:45:b1:41:bd:1b:6b:bf:14:3a:83:a3:5a:86:07:
52:d8:b0:e6:43:dd:91:97:ee:5b:30:72:9f:9b:56:
3e:5f:e5:8c:9b:52:1e:ad:b9:ac:1d:84:bc:d0:18:
2f:9d:22:08:69:05:71:21:85:d3:d3:ac:33:96:d7:
7c:56:14:cc:0c:b2:bc:39:1c:ad:a6:b9:1c:0d:41:
aa:57:97:84:e4:1e:8a:fb:18:47:d3:99:7c:94:a1:
90:b1:d2:c4:e1:b2:d5:6b:5d:0b:65:53:63:20:7f:
1a:a8:b8:6f:ce:38:99:e9:1e:28:58:44:e1:e0:87:
f9:14:86:40:97:2b:e3:67:ad:f5:95:01:ce:d0:8a:
4c:27:5f:96:a1:c5:a2:41:cb:ff:e7:21:0e:5a:57:
f9:5f:29:53:79:f9:dc:f2:b9:7c:b1:28:04:d8:20:
01:6f:91:c1:13:19:5e:a8:96:aa:2d:5e:e5:5b:a4:
91:be:c7:92:3e:99:9b:40:df:2d:6f:9b:18:ba:b2:
d0:75:3e:2f:0d:da:8d:1f:10:c0:fb:3d:56:da:1b:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:00:12:25:5B:4A:AE:EA:DB:0B:43:52:11:72:2D:C8:29:11:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEB32C746B9A11F0BD76FAC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9c:72:c8:a6:8e:5e:a9:42:e3:cf:87:bf:2c:e0:b5:ed:e3:
3e:1e:b0:20:0b:a1:d9:3c:76:1c:28:e4:55:ce:be:c3:3e:f0:
88:87:54:f4:d5:2e:81:ff:09:61:3a:3c:ae:5b:c8:2b:77:c9:
e2:3d:fe:6d:99:e9:89:6e:1c:55:c9:25:a4:07:16:f7:96:1c:
a9:c9:d9:11:1f:17:fd:1e:be:dc:35:ff:2a:8a:dd:46:0d:9d:
89:eb:eb:96:b8:e3:ed:b7:e6:7c:78:e5:8b:a8:16:a4:fe:75:
de:72:df:56:ff:dd:6f:ee:8d:de:c8:76:a6:23:60:ab:c7:83:
21:72:28:04:be:79:28:00:2d:96:01:31:c0:0b:ab:02:0b:31:
81:9d:21:31:57:dd:2b:05:a3:3c:c0:23:0d:e6:45:78:c0:f9:
03:b8:cb:02:e9:2f:e9:24:b6:be:83:df:ee:63:76:c6:99:05:
3d:9e:86:2d:39:aa:96:d4:64:79:17:79:7f:9d:e9:e1:ca:2e:
4d:2b:7c:ac:bd:79:cb:8f:1a:04:2f:0e:28:90:8a:09:ec:8c:
05:a9:02:c3:40:8b:c0:40:42:c5:3f:ca:41:17:d3:2f:f9:fd:
e0:4e:cc:6c:07:ad:7a:a1:2c:ac:84:ed:22:3b:94:db:8a:28:
59:3b:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:57 2025 by rpki-client