Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0622C4F07E8411F09656DF90DAE4EC9C.roa
File: 0622C4F07E8411F09656DF90DAE4EC9C.roa (raw, json)
Hash identifier: cLR8YbwHQD2KAZ4tlz9W7xtaRD7fNlAHZTzWbdgQ4RI=
Subject key identifier: EC:0D:D0:AB:0B:82:04:35:50:C4:C0:3D:3B:E9:65:57:0A:0B:F9:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0622C4F07E8411F09656DF90DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 11:43:16 +0000
ROA not before: Thu 21 Aug 2025 11:43:11 +0000
ROA not after: Mon 08 Sep 2025 11:43:11 +0000
asID: 138985
IP address blocks: 156.238.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93731 (0x16e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 11:43:11 2025 GMT
Not After : Sep 8 11:43:11 2025 GMT
Subject: CN=68a70653-5130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:2a:2b:90:3e:67:07:a4:8c:3d:64:b3:31:
f3:62:9d:f1:c5:6b:42:1d:45:6d:6f:53:7a:18:c8:
e9:e2:34:3f:3b:3d:ed:50:0d:f9:8b:9f:68:a2:26:
9e:ab:df:a7:83:3b:38:2c:99:84:04:b4:fb:2c:f5:
30:7f:c8:2b:42:54:6a:13:eb:a7:80:9f:d4:c8:cd:
7c:d0:d4:7b:ca:4a:34:3b:21:e9:f7:79:f1:db:86:
7d:93:f1:eb:49:a5:07:ce:f8:5e:2a:1d:6b:11:16:
26:57:86:50:c9:71:b5:ec:ca:4f:20:d0:1e:76:42:
c2:a6:4f:8d:4a:07:f5:1c:1f:50:94:ad:d8:f3:2e:
7f:b5:db:59:e7:2e:93:e2:cc:a6:c6:ab:d9:26:f0:
45:77:b0:51:4e:e7:67:6e:1b:19:0a:92:21:45:93:
43:03:9b:bf:80:9a:70:6b:76:95:9a:66:4e:0a:03:
d5:42:51:1a:87:db:ab:c3:39:47:11:d4:e8:f3:ff:
3c:f0:5b:98:d0:b1:8d:2f:94:f9:69:c2:61:9a:ed:
a1:ac:1f:f9:ef:dc:6e:7b:e0:c6:22:42:76:e0:8d:
f7:21:a3:98:5c:7a:b3:52:a6:5c:5b:93:cf:8c:a8:
91:ac:00:59:ae:81:4f:07:56:cd:c2:9e:58:ca:84:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:D0:AB:0B:82:04:35:50:C4:C0:3D:3B:E9:65:57:0A:0B:F9:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0622C4F07E8411F09656DF90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.81.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a1:d1:27:0e:4d:6c:0d:d2:5c:13:b7:3d:46:50:ea:2c:85:
e8:1d:8d:b6:d7:b7:b2:2c:60:68:cf:2a:28:cd:e8:8c:d7:e7:
ff:db:c3:3a:4c:8a:80:11:45:5b:39:0d:98:4d:1b:7e:1c:39:
59:62:7d:4f:c8:53:da:60:4c:16:23:32:db:42:cc:4d:53:fa:
93:b0:a5:d9:e7:76:d4:1f:25:3a:ff:b9:0f:71:e0:82:ce:1c:
76:2b:5c:2b:4f:f0:99:50:6e:0d:2f:73:23:ff:f4:55:0a:a5:
76:ce:bc:0e:ec:9d:9a:9b:6b:71:a0:54:5c:b5:d2:34:41:b5:
33:d6:87:42:7f:a1:fc:a8:81:69:f9:0a:b3:fc:4e:b5:0a:4b:
63:1a:3b:9e:c5:72:15:36:e0:d4:22:13:d3:f7:2f:9d:69:b0:
3f:07:51:43:6e:4d:d8:04:72:1c:79:4c:8e:07:ed:85:8b:30:
2e:49:dd:f8:89:eb:b8:20:95:d6:4c:a9:f3:34:f8:1a:de:83:
3c:4a:8f:34:6b:dc:1e:7b:3e:e1:24:ec:f4:d3:57:01:96:8c:
b4:40:5b:ad:e8:ec:ed:a2:ad:1d:73:b5:c6:0c:03:a4:e1:2f:
42:bc:4b:c5:b5:72:9b:88:22:4e:52:70:13:e7:2c:8f:f8:5b:
3d:c2:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:59:31 2025 by rpki-client