Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085B40327ACC11F0AA853EB6DAE4EC9C.roa
File: 085B40327ACC11F0AA853EB6DAE4EC9C.roa (raw, json)
Hash identifier: tmzCQBV4sr9sBplI13uh5aS9xZ/zl5P1HQPzlr8LTAw=
Subject key identifier: 86:39:37:F7:2D:C2:20:04:68:2F:2A:3D:29:6D:88:25:AC:F1:9E:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085B40327ACC11F0AA853EB6DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:08:38 +0000
ROA not before: Sat 16 Aug 2025 18:08:34 +0000
ROA not after: Thu 16 Oct 2025 18:08:34 +0000
asID: 138648
IP address blocks: 156.247.62.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93063 (0x16b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 18:08:34 2025 GMT
Not After : Oct 16 18:08:34 2025 GMT
Subject: CN=68a0c926-95e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:ac:c2:1c:c9:ab:bd:4a:12:8c:1d:d5:76:
9b:fa:f8:d5:59:25:d3:0f:a2:61:72:55:a6:97:c6:
31:00:09:8f:94:e1:2d:de:0c:5b:f5:1b:b1:b2:cc:
b7:aa:04:f3:a4:33:c8:fb:a4:28:23:f5:8e:9c:83:
8c:7e:2b:d1:5e:16:0d:52:b2:c9:1f:de:ad:20:41:
3d:32:31:a2:50:df:5f:22:96:19:05:72:cb:da:e0:
96:9e:bb:14:ab:60:be:87:6c:5c:4f:8b:08:8f:da:
76:e1:56:77:0b:e8:9e:5e:3a:18:21:e4:a7:22:68:
29:a2:5c:c8:22:bb:24:50:b1:b4:f5:3f:b7:7c:cd:
44:04:b6:31:03:a1:35:8e:d2:37:3e:19:e3:f1:30:
51:a5:08:95:75:64:36:2f:f7:57:32:56:80:8d:04:
a6:cf:26:63:62:35:05:e9:29:e0:79:b3:51:12:b1:
5c:97:46:06:74:4d:f0:95:5f:6f:ff:ab:45:bf:85:
91:05:2f:b9:e1:f4:fe:7b:1a:4d:49:1d:69:86:50:
fc:e0:8a:75:28:46:a3:9c:0e:c6:2b:25:79:4a:fb:
ac:0b:15:b5:fd:4c:c5:f4:2b:9c:29:ba:bd:e3:1c:
e2:1d:cf:ab:0c:4d:e5:e0:1a:94:8c:4c:fc:a0:25:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:37:F7:2D:C2:20:04:68:2F:2A:3D:29:6D:88:25:AC:F1:9E:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/085B40327ACC11F0AA853EB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3a:68:db:8b:97:fc:28:05:21:38:e8:a7:a6:db:c5:b9:9f:
82:43:06:63:0b:63:ed:70:58:1c:a1:95:1c:9e:e3:c3:ba:52:
75:5b:15:42:f7:11:99:27:11:08:18:0f:72:ad:7e:d6:32:1e:
2e:a4:71:ab:bd:90:67:6e:9f:0b:0e:51:a3:0e:d7:49:33:3b:
a8:92:1b:21:99:3b:1f:48:79:0b:20:81:be:ac:6a:b6:5c:ca:
7d:2b:5d:a6:cb:ce:b2:59:e2:85:b8:53:56:ef:c8:34:f2:b1:
b9:32:7f:56:92:60:55:f8:5c:d7:0e:8f:87:b6:a9:1c:89:bc:
c2:c5:97:c9:52:34:29:40:4a:13:0d:7d:9c:ff:71:c9:e3:b5:
da:1d:57:83:ef:d7:2a:83:af:74:18:3f:75:5f:ca:a8:95:be:
44:98:c5:5e:0c:3c:da:1c:76:d6:45:6a:4c:b1:50:37:c4:31:
47:44:4d:41:20:1c:05:84:d3:6c:fa:5a:92:5a:27:de:79:ca:
af:c2:4d:76:3a:60:67:a1:e8:36:ac:71:69:a8:df:fd:09:e5:
0f:9c:e9:0b:39:05:85:32:fc:e3:ec:86:76:bf:39:a4:be:6f:
43:c5:99:b9:bb:68:d2:53:99:de:32:7e:2f:21:80:14:1b:de:
30:59:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:42 2025 by rpki-client