Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F565C1A0781411F0A4A9F38EDAE4EC9C.roa
File: F565C1A0781411F0A4A9F38EDAE4EC9C.roa (raw, json)
Hash identifier: wtLc9WJHoglRB8qt7H+LmDj40io5am2XV5qyD7Q6hbA=
Subject key identifier: 2C:B5:04:37:E6:1E:68:B4:BD:0A:1C:C0:4E:AF:50:53:F1:D9:37:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016A91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F565C1A0781411F0A4A9F38EDAE4EC9C.roa
Signing time: Wed 13 Aug 2025 07:13:06 +0000
ROA not before: Wed 13 Aug 2025 07:12:59 +0000
ROA not after: Sun 21 Sep 2025 07:12:59 +0000
asID: 42689
IP address blocks: 156.233.152.0/21 maxlen: 24
156.233.160.0/20 maxlen: 24
156.251.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92817 (0x16a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 07:12:59 2025 GMT
Not After : Sep 21 07:12:59 2025 GMT
Subject: CN=689c3b02-0093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:a0:7c:ee:5b:80:4c:49:b3:f8:de:5c:ec:
fa:34:b8:c5:04:f8:1b:a4:6b:4c:3d:af:c5:f9:de:
e1:1a:89:e7:95:a5:a4:33:56:9a:31:15:f6:6f:39:
ff:6c:a8:4b:49:99:cc:a2:f2:c1:e1:09:9b:cc:a3:
2d:3e:b8:ce:d4:9b:bd:7e:ce:d6:00:1b:a3:bb:22:
26:0d:7e:4e:43:9f:50:41:92:21:5d:aa:16:86:6f:
01:b1:7b:1c:21:bd:dd:60:79:b8:74:59:ac:ca:35:
7b:dc:8a:dd:8c:c4:be:5c:a7:9b:ff:d3:9e:33:70:
44:d3:5e:13:3f:db:af:ad:2c:50:62:86:e9:94:0c:
0e:99:da:3a:ac:b2:43:55:17:61:38:66:d8:41:7d:
b8:da:e9:98:d6:2b:d4:0d:f5:2a:50:ac:3c:20:64:
35:08:6d:b1:39:a4:52:d8:85:86:1f:af:0b:fb:5d:
14:65:91:86:3f:8a:ba:ee:d1:e9:07:89:f0:8a:db:
3d:ce:60:42:f0:be:dd:35:2b:73:47:c5:57:42:65:
10:83:2b:d8:79:98:b4:2f:49:c2:9a:c0:b6:dc:47:
26:29:10:4b:69:75:8b:80:46:e1:74:3c:f9:d6:c2:
74:6a:43:43:58:76:be:32:28:2f:f3:6d:96:e8:56:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:04:37:E6:1E:68:B4:BD:0A:1C:C0:4E:AF:50:53:F1:D9:37:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F565C1A0781411F0A4A9F38EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.152.0-156.233.175.255
156.251.80.0/20
Signature Algorithm: sha256WithRSAEncryption
04:ea:49:49:0e:da:7a:59:ae:ca:98:74:bb:66:d6:c3:12:9c:
39:06:c5:52:a1:96:46:63:da:17:91:1e:8b:ac:da:39:6f:d9:
c3:74:ce:1d:c2:64:cb:75:8c:38:59:26:ce:a6:3c:71:93:cf:
a2:86:52:4f:c0:99:65:89:c2:d5:9a:c7:11:2f:e9:2e:5d:87:
95:b7:dc:01:e5:21:d7:9c:ae:d4:1e:04:4c:15:7b:07:0c:c5:
66:89:6a:c1:d1:5c:2e:fb:85:c4:20:6c:74:d7:cb:ca:78:f2:
25:12:96:bd:fd:a8:01:35:20:76:78:cf:65:2f:3b:61:32:3a:
88:64:a6:72:f1:06:ba:b2:8c:2e:20:93:f8:44:53:04:1e:74:
fe:21:6e:66:9c:5c:3e:8f:46:4b:bc:4c:ec:ce:9e:60:4e:56:
eb:b5:bb:98:03:c6:64:5e:77:49:85:3b:11:68:1e:19:51:7e:
b2:cb:ac:a0:65:5a:f9:fc:fc:7d:f2:f3:ca:c2:8d:1d:06:f2:
cb:c2:aa:a7:0f:5d:a7:25:ad:92:ca:aa:72:26:79:c9:7b:c3:
f1:2d:fa:40:94:a3:91:99:9f:4e:a3:90:a4:f2:9b:d8:68:da:
72:9b:d5:39:e4:bb:15:41:c3:7f:32:26:c8:61:43:a7:55:45:
0e:30:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:20:10 2025 by rpki-client