Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F278E27EAF11F0A77132AADAE4EC9C.roa
File: 00F278E27EAF11F0A77132AADAE4EC9C.roa (raw, json)
Hash identifier: QC+dbedrXGDhoV6FYbfOPRNsOODejXWgKmQyPMfREiE=
Subject key identifier: 8F:B8:ED:32:A4:7F:6F:DA:53:1F:7F:8C:AC:A5:03:23:D4:94:03:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F278E27EAF11F0A77132AADAE4EC9C.roa
Signing time: Thu 21 Aug 2025 16:50:55 +0000
ROA not before: Thu 21 Aug 2025 16:50:50 +0000
ROA not after: Wed 21 Aug 2030 16:50:50 +0000
asID: 17561
IP address blocks: 156.249.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93812 (0x16e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 16:50:50 2025 GMT
Not After : Aug 21 16:50:50 2030 GMT
Subject: CN=68a74e6f-c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:e9:05:f1:10:b0:f7:5b:be:59:8a:b9:92:
ed:39:c4:49:12:1f:c9:05:b5:56:9a:36:bc:a4:90:
f3:10:2d:79:50:7c:fc:d1:40:36:42:b1:58:64:93:
96:1e:fe:1a:95:31:7b:23:0d:87:4e:84:73:fe:8b:
5d:bf:54:cf:0e:8c:b7:f0:c2:1c:da:23:a1:b4:11:
cf:86:60:3e:76:78:6d:2d:33:f8:84:98:e9:9f:5c:
c0:b2:f8:25:c1:eb:40:0d:ce:1b:9f:90:15:71:96:
6b:27:73:f2:0f:05:dd:2f:c3:29:bd:fb:0b:ce:2d:
fa:90:40:47:c9:e7:f7:b0:2a:52:d6:d9:da:ba:88:
bb:a9:72:b3:c5:c4:0f:92:58:be:b5:c6:b0:dc:d2:
aa:85:c8:5b:ca:f1:4a:90:27:4b:35:1d:fe:3b:cb:
6d:9b:25:2e:92:eb:24:00:9c:0d:09:e3:02:f8:58:
79:39:fa:6d:f5:af:f2:c1:b0:2e:5f:0d:55:65:b7:
69:c2:56:15:67:a8:9f:d1:14:c9:52:db:84:60:69:
9b:b6:39:30:9b:e3:f3:cc:93:80:a5:b0:0d:ed:58:
06:4d:84:59:9a:ac:03:7b:f3:17:f8:51:7e:03:e9:
12:54:18:03:6b:b3:51:28:67:43:65:34:c2:06:10:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:ED:32:A4:7F:6F:DA:53:1F:7F:8C:AC:A5:03:23:D4:94:03:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F278E27EAF11F0A77132AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:83:03:64:a0:04:6a:14:90:4b:db:24:a2:40:6d:c3:b6:3f:
b9:0c:66:1c:c4:a9:1e:70:8b:5f:4f:0d:d8:5e:81:d0:3a:f0:
c3:17:7e:18:ee:0f:b7:0d:c0:b4:10:47:7d:d1:b3:67:88:c1:
7f:65:5e:90:12:15:fb:94:87:07:bd:2b:f9:e6:b5:4c:3e:ac:
18:63:bb:f6:ba:3f:18:83:30:88:73:d4:9c:95:c7:fb:6c:a5:
12:a6:3f:58:ee:78:85:58:98:33:f2:5c:79:9c:aa:69:67:f4:
2d:c6:07:0c:96:b1:03:c0:8b:32:9a:5b:81:b1:f9:06:10:9a:
90:0e:d0:f1:b0:1c:9d:5a:42:3a:f9:18:6c:6c:10:14:30:74:
12:65:35:08:e1:45:41:63:fa:80:74:be:8c:2a:87:a5:65:76:
74:ee:b0:2d:f1:60:1a:59:f1:73:8e:f6:88:be:92:83:70:f0:
af:97:56:9c:81:9b:4d:9f:17:8f:7f:50:e0:dd:aa:0b:fe:75:
8b:16:89:f8:d3:e1:26:9b:2f:82:ba:7a:41:ed:ff:ea:77:1d:
f5:ab:aa:67:82:1c:5a:9d:3e:57:63:f0:ab:af:67:12:a7:a1:
98:d1:53:7e:88:75:12:44:28:c1:fd:d6:ce:e9:75:37:c2:9a:
28:ba:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:25:08 2025 by rpki-client