Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7306212455B811F0A040AED9DAE4EC9C.roa
File: 7306212455B811F0A040AED9DAE4EC9C.roa (raw, json)
Hash identifier: CYcYd/BWsSLZdnBBR/gGDYPhhToBZt4Olu1efqaATAc=
Subject key identifier: BA:AD:03:14:0E:8F:2D:D7:2B:3F:EA:C1:F6:31:CB:14:68:6B:42:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7306212455B811F0A040AED9DAE4EC9C.roa
Signing time: Mon 30 Jun 2025 13:45:14 +0000
ROA not before: Mon 30 Jun 2025 13:45:10 +0000
ROA not after: Mon 04 Aug 2025 13:45:10 +0000
asID: 269816
IP address blocks: 156.248.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90012 (0x15f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 30 13:45:10 2025 GMT
Not After : Aug 4 13:45:10 2025 GMT
Subject: CN=686294ea-eee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:03:ef:c5:b2:df:ef:0c:f1:cc:11:b6:ea:
74:cb:6b:5e:bb:a9:3a:11:42:c3:a1:0c:30:c6:ba:
73:04:31:21:3e:99:5f:bb:3b:6a:11:d2:bb:c8:c2:
a6:78:82:9c:fa:25:65:33:07:4c:89:c0:03:34:73:
ad:b5:cc:2e:43:ad:ab:c2:3a:88:42:bd:ae:f9:57:
dc:52:f0:b5:6c:c6:b2:b5:46:f6:11:be:5d:87:f0:
12:82:b6:f7:ad:67:4b:ff:9e:c1:04:57:c8:15:1c:
6d:18:17:69:22:01:7d:22:59:98:ec:1b:61:ba:b1:
24:3b:95:45:95:1f:12:23:64:00:eb:ac:c1:fd:01:
3f:d8:22:1a:8f:d2:15:dc:15:cc:40:7a:a3:6c:98:
81:7c:15:70:71:4b:66:2a:8a:72:24:c7:73:22:75:
3d:0a:da:06:5e:ef:4e:5b:da:df:2c:5f:db:9c:40:
8b:f3:a3:fc:18:02:2a:11:5e:31:00:9e:ed:21:24:
2a:45:88:0d:58:5a:06:24:69:c3:4b:11:6d:d6:7d:
3d:a9:4a:b5:08:18:5f:66:33:0f:6f:70:fe:e2:a9:
9c:d8:e0:97:5d:80:2f:a0:98:d5:25:9c:4d:54:ca:
d9:ad:2f:60:b8:1c:55:35:e6:cf:07:e9:f5:e9:f4:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:03:14:0E:8F:2D:D7:2B:3F:EA:C1:F6:31:CB:14:68:6B:42:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7306212455B811F0A040AED9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:b2:81:6a:e5:fd:5b:0b:c6:a8:b0:fe:fb:26:e6:f8:34:13:
0b:3f:a9:ef:5e:27:56:09:3e:01:57:bc:5f:40:87:e4:20:7d:
53:5b:c1:2f:4d:ee:b0:80:88:99:4d:06:53:a8:2c:cd:19:95:
f4:aa:e3:3b:58:71:9f:ce:b9:fe:31:0b:5a:0b:31:3a:ac:35:
9d:91:1f:22:54:ff:3d:08:9d:9a:d1:55:29:45:fc:b2:ca:25:
03:f2:a9:2b:28:69:5a:b9:09:16:cc:3b:59:da:54:88:69:a8:
cd:1c:9c:41:dd:34:68:6d:9a:4e:fe:7d:7c:9c:d0:42:2e:4d:
22:48:78:de:26:a7:71:29:b5:fc:a5:ef:ab:a9:4e:1e:11:a5:
91:4c:56:13:99:4a:df:22:55:10:40:a1:7c:8c:fd:9c:56:98:
09:36:be:6c:d4:06:59:b2:d8:bb:0c:90:a2:8a:2e:62:6c:7e:
b5:c1:10:af:7f:9a:f6:96:ad:87:ca:a9:9d:cb:1d:20:e9:06:
c8:a3:39:89:97:06:4d:d2:36:c6:35:db:f0:94:10:9e:f1:a5:
5c:9c:77:a5:86:f9:09:0f:ef:80:f0:f9:f4:47:fe:b7:7f:1c:
0c:51:f8:32:46:22:b1:1d:fb:38:87:ad:88:a8:91:e1:a1:08:
79:c2:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 19:35:14 2025 by rpki-client