Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A86B26C4B8A11F08F97F391DAE4EC9C.roa
File: 6A86B26C4B8A11F08F97F391DAE4EC9C.roa (raw, json)
Hash identifier: NbCl+YFbTZjBdXCpslE23rmwV5YMTZG7LQ53WsL4Jw8=
Subject key identifier: 63:E6:01:9C:55:2E:88:FB:F7:46:80:08:08:4C:09:B3:2B:A9:E0:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A86B26C4B8A11F08F97F391DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 14:50:32 +0000
ROA not before: Tue 17 Jun 2025 14:50:27 +0000
ROA not after: Mon 04 Aug 2025 14:50:27 +0000
asID: 394432
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89278 (0x15cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 14:50:27 2025 GMT
Not After : Aug 4 14:50:27 2025 GMT
Subject: CN=685180b8-861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:65:bc:d1:a5:c1:96:32:5e:ee:2e:ab:7c:
99:11:8a:93:b8:30:fc:7b:96:b0:85:1b:e3:ee:54:
00:96:55:d7:7b:ca:83:fc:04:a3:d6:03:5b:2c:14:
68:46:93:94:0f:92:e4:c3:0d:03:a0:66:db:87:66:
75:0c:a6:44:4a:7e:5c:2c:5b:b1:84:85:ff:f8:45:
b9:0f:b5:25:d2:5c:83:3e:52:50:84:52:db:b4:1d:
28:62:03:b7:a7:7b:48:82:21:0e:50:c4:3d:7d:e2:
3b:3a:01:82:c3:5e:83:e1:46:7e:80:b2:9e:4a:9c:
27:83:20:9f:c7:3d:74:a1:f3:61:9e:93:a9:23:d2:
3c:67:78:f1:58:a6:13:dd:20:2e:01:66:dd:15:28:
79:f0:24:d5:f4:4a:d0:7f:43:9e:cc:3c:bf:87:77:
67:e9:c5:0c:d5:b9:f0:a2:bf:c4:ac:ba:13:84:11:
3b:8a:98:7c:6d:7c:c5:87:9b:7d:11:67:bf:48:49:
ca:b8:2a:f7:76:38:f4:b8:f2:84:22:c0:c9:6f:77:
10:ae:43:21:c5:da:0f:49:c4:b5:34:7e:d1:64:48:
88:1d:cf:04:85:89:37:6c:db:8c:be:ee:ef:cb:c9:
23:be:4f:26:69:8f:4f:a9:09:ff:6f:5e:48:86:b7:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:01:9C:55:2E:88:FB:F7:46:80:08:08:4C:09:B3:2B:A9:E0:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A86B26C4B8A11F08F97F391DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
27:93:a7:f4:71:4e:02:0c:0b:88:04:3f:e3:cf:1b:6d:23:44:
7e:10:a1:11:90:8e:5b:dd:6e:f3:bf:af:b2:ed:24:b1:ea:74:
c3:7c:93:28:28:eb:be:1b:c0:8c:64:d5:c8:52:e3:b4:d6:2a:
a3:ed:c7:2c:1c:b7:62:5f:82:cc:d8:fb:47:8c:eb:0e:c5:f0:
ba:21:83:ab:33:ca:3f:7f:20:4f:b9:5a:8a:7c:b5:66:72:c7:
08:d2:40:c2:49:aa:28:8d:af:10:08:cf:cc:77:36:0b:a9:15:
3c:89:f6:c5:ba:8a:be:fb:c9:f8:df:ef:53:fb:96:f8:dc:14:
8b:4c:66:0f:21:0c:a2:14:f0:08:01:0f:eb:89:9a:5a:0e:4d:
9c:72:1c:28:34:34:09:19:3a:a0:31:b3:a2:0e:ab:e8:bc:84:
f5:09:b9:7d:1b:ef:51:7b:8a:22:8e:d1:1f:1f:8c:15:4e:94:
13:96:05:70:df:0f:1c:e0:e3:ec:46:71:c5:3b:44:c0:89:37:
c2:fe:c6:57:44:23:a5:cb:58:a2:b9:3b:36:66:d8:bc:db:d5:
1f:89:7f:47:7c:e3:24:c6:e0:4f:c6:83:6a:12:84:ff:f3:ea:
f9:d0:67:7d:88:ba:c2:50:0d:2b:f5:1e:ef:f6:80:75:51:6e:
4f:fe:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:24:37 2025 by rpki-client