Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/650B7504782E11F0B30248B3DAE4EC9C.roa
File: 650B7504782E11F0B30248B3DAE4EC9C.roa (raw, json)
Hash identifier: 8CoMjZvby9f4yO6+uhssSiFgzAgAe6DGVk3enVeKh2s=
Subject key identifier: 57:4B:5E:64:AE:E4:00:0B:56:24:61:C4:DA:33:DC:AD:11:89:4C:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016ABB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/650B7504782E11F0B30248B3DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 10:15:11 +0000
ROA not before: Wed 13 Aug 2025 10:15:06 +0000
ROA not after: Sun 21 Sep 2025 10:15:06 +0000
asID: 30781
IP address blocks: 156.233.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92859 (0x16abb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 10:15:06 2025 GMT
Not After : Sep 21 10:15:06 2025 GMT
Subject: CN=689c65af-6868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:22:80:d3:05:d0:cf:14:08:f8:e4:9c:fc:
e3:35:36:3f:fd:ab:a3:94:ae:51:a8:1c:5b:bf:66:
bd:fe:70:ec:95:cf:f2:f4:4c:b6:c0:57:b5:83:0d:
24:1b:10:9f:be:11:6e:52:e4:3c:7a:b4:e2:38:48:
53:a5:0d:9e:7b:d6:98:7e:2d:92:8f:d5:3a:46:ff:
8b:01:f3:c0:62:19:00:53:db:06:9d:88:3a:cc:a5:
98:cb:ba:48:59:47:d0:ef:9b:46:8d:58:95:73:a9:
77:2d:29:64:0e:fb:5e:26:bd:c3:a1:8f:52:2a:8f:
7d:54:3c:78:6f:68:4d:d1:f5:7a:a8:bb:be:1d:e7:
52:f7:f5:fb:57:75:cb:1b:db:8a:88:bd:f2:95:3d:
fb:32:23:89:86:d4:69:c6:e5:34:7e:fe:e6:4a:39:
b2:77:bc:60:47:36:a1:01:10:7a:f0:95:6d:25:96:
9d:1a:f9:44:8b:85:9a:9e:0f:83:c6:ba:02:aa:82:
25:6f:20:a3:f7:08:b8:25:56:2e:f4:bf:14:8b:3c:
ed:44:8d:57:1d:e8:82:04:c6:a2:1c:79:32:53:c6:
54:10:ab:fd:15:b2:88:94:34:0e:a3:38:e9:f3:20:
8c:5c:e0:0e:0c:d4:31:35:3b:01:17:79:b8:3d:47:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4B:5E:64:AE:E4:00:0B:56:24:61:C4:DA:33:DC:AD:11:89:4C:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/650B7504782E11F0B30248B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
72:47:5c:95:02:24:d2:34:14:53:b9:9e:97:ab:12:fc:5c:11:
94:3c:d1:90:ee:e6:5b:d6:ca:d5:8e:03:11:5a:85:4c:0c:be:
11:24:7e:fd:c8:63:9c:5e:de:71:91:ab:be:83:e7:a5:c6:d2:
7c:72:c4:84:93:33:66:7e:13:7c:57:b5:ce:d9:92:40:d4:99:
a7:3b:6b:02:a0:c7:4a:b5:dd:b3:f2:66:df:65:4a:09:4c:ca:
b4:d2:11:10:94:35:c5:6c:b4:62:e2:8c:51:c6:d0:1e:a3:39:
ce:3a:9a:44:62:3e:9e:85:20:fb:a3:1f:90:e3:9b:a9:35:6f:
5e:2c:ec:25:18:25:54:7b:41:2a:b0:b7:d4:b3:58:89:8c:0f:
e1:a7:1a:f4:ad:a4:9f:3c:f5:96:0c:de:ce:8f:47:72:58:ce:
c1:bb:68:70:2b:7f:26:7b:d4:10:94:b7:75:ca:b8:84:3a:cd:
e6:05:02:9a:40:cc:23:48:9f:e8:be:05:19:2a:1e:b1:93:6f:
8e:06:2a:49:19:34:00:1f:51:18:fb:49:3c:ba:79:6f:a4:64:
a4:d6:cb:ac:6e:50:0d:36:e7:78:fa:32:54:6e:db:9b:3b:6f:
20:28:5b:f8:ff:7f:41:f2:a0:a1:0f:ea:32:11:11:43:86:84:
85:8e:51:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:23:48 2025 by rpki-client