Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12664ECA753E11F0A5E44584DAE4EC9C.roa
File: 12664ECA753E11F0A5E44584DAE4EC9C.roa (raw, json)
Hash identifier: 020rZTcVCRmuIZdlgwyyNExVVJkH7L0SkzTlfrSe06U=
Subject key identifier: F7:23:1E:95:F2:9F:AF:59:9E:DE:5E:B7:7A:64:87:C4:58:F4:1B:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12664ECA753E11F0A5E44584DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 16:29:51 +0000
ROA not before: Sat 09 Aug 2025 16:29:46 +0000
ROA not after: Mon 22 Sep 2025 16:29:46 +0000
asID: 40779
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92678 (0x16a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 16:29:46 2025 GMT
Not After : Sep 22 16:29:46 2025 GMT
Subject: CN=6897777f-6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:64:70:4a:70:98:6c:da:c6:9a:f0:fa:a5:
02:32:6d:de:61:50:ae:da:f1:7f:45:01:f5:84:3f:
19:9e:3c:a9:5c:d6:69:6d:f3:7f:93:b9:b6:bc:b9:
fa:cf:d1:a5:06:9c:db:8c:ad:2f:75:1b:a2:4c:98:
80:0b:2b:49:e1:ca:8d:ca:ca:c4:57:95:01:6f:16:
78:75:ac:0a:79:5a:69:b8:9a:aa:a8:5b:f6:16:e2:
d6:1c:2b:3f:56:90:b6:97:9a:58:27:8d:23:b5:3b:
a7:61:36:d8:d0:61:ad:88:0c:c6:e0:e9:61:b1:1c:
76:c0:63:e9:15:b6:a2:bf:36:c9:8f:c1:80:13:e1:
25:b7:37:b2:22:e8:ed:79:97:93:5c:79:3c:1a:63:
86:5f:33:ae:37:1d:80:c6:7b:47:e4:26:7a:1e:a9:
9e:ff:ec:8a:fe:37:66:f4:20:32:46:5c:69:c3:dd:
22:f0:34:af:65:02:9c:71:62:ac:eb:3e:16:d0:4a:
4f:95:33:c1:13:99:6f:68:05:20:29:74:cf:15:a4:
c8:cf:da:b8:33:74:dd:a4:3e:a6:91:32:c2:bf:0f:
18:94:8d:64:16:31:67:8e:9d:7b:66:69:42:00:1e:
be:e1:3a:ad:e3:0b:94:00:3f:9d:cc:57:e0:f0:58:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:1E:95:F2:9F:AF:59:9E:DE:5E:B7:7A:64:87:C4:58:F4:1B:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12664ECA753E11F0A5E44584DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
21:77:13:6e:c2:c2:65:f7:2d:fe:26:8b:da:ff:c7:02:4f:7f:
e1:5b:e9:ee:03:ba:6b:c7:75:97:ef:02:28:02:8d:a2:d6:ea:
90:da:9b:be:8b:65:3c:8d:ef:d6:e5:15:b1:f6:8c:ad:43:32:
20:db:73:01:1d:c3:7d:da:f5:2d:ef:60:af:d8:59:4c:01:83:
c5:52:47:8a:a8:10:f2:ce:a3:9a:bb:0f:b8:11:b2:4a:7b:9c:
79:b6:ef:ae:a0:d3:53:2a:d5:bd:50:05:be:2c:e1:f9:d2:dc:
a8:7e:8f:bd:59:47:fe:b8:b4:06:63:f3:fd:7f:e3:70:91:94:
fb:7b:85:5e:81:db:53:dc:2d:40:75:4a:f2:6f:08:08:b4:51:
e5:6f:3f:39:4e:f4:2b:b5:c2:8f:1d:06:d4:53:3c:d3:9a:1c:
53:21:f3:d7:12:d1:64:b3:54:46:9f:62:ca:9d:c5:07:15:f1:
50:13:4d:78:50:ba:27:be:c2:38:22:8f:33:30:d0:87:f3:f5:
13:9c:45:ae:47:16:91:b4:f0:5f:c5:f3:7d:0a:4a:fe:a4:0c:
9f:9d:1c:01:14:41:e9:f6:c6:27:33:fc:3e:b2:10:e1:d4:07:
29:12:35:0f:9c:14:e7:1d:65:92:2e:f8:de:a6:8f:06:ba:36:
ae:5f:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:18 2025 by rpki-client