Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/234D99747EAC11F0B4A6A198DAE4EC9C.roa
File: 234D99747EAC11F0B4A6A198DAE4EC9C.roa (raw, json)
Hash identifier: rwSzys6FCUOl5QHinPt0r82pXmC0bmomALXjGl974fI=
Subject key identifier: D7:00:79:C4:B8:DB:30:CC:E9:E7:3C:45:27:61:1A:83:3A:9F:46:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/234D99747EAC11F0B4A6A198DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 16:30:24 +0000
ROA not before: Thu 21 Aug 2025 16:30:17 +0000
ROA not after: Wed 21 Aug 2030 16:30:17 +0000
asID: 17561
IP address blocks: 156.239.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93800 (0x16e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 16:30:17 2025 GMT
Not After : Aug 21 16:30:17 2030 GMT
Subject: CN=68a749a0-f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:92:af:eb:e4:e3:e4:22:dc:d2:71:4f:0c:
c8:56:37:b6:21:44:50:d5:11:96:c1:98:88:e8:fa:
47:e5:8a:1a:ef:3f:df:b2:7e:32:0e:93:dd:27:b6:
64:ab:66:1e:ea:2f:79:aa:0a:19:7c:3a:4a:78:a1:
f0:78:df:b1:d1:b8:1b:1e:b8:ac:1f:7e:c6:9c:4b:
e0:58:0e:d1:e3:de:aa:5f:70:f8:a2:f0:08:95:8d:
4a:55:03:a5:28:0e:d5:ff:72:97:90:92:96:d4:f1:
25:36:0b:96:1e:81:2e:d2:9e:bc:4a:52:66:61:c9:
65:bf:4d:7c:f4:c4:25:9a:92:0a:06:e7:1f:25:2e:
18:b3:9e:14:17:0c:3c:81:66:88:16:f6:dc:20:3b:
60:c6:a1:cb:a7:b9:b1:2f:6b:72:cb:9b:38:cf:03:
85:61:d7:1b:58:c8:c1:ba:28:ac:dd:b5:a8:47:49:
8e:de:a9:e0:6c:ce:ce:df:bf:f2:f4:a8:49:45:09:
ba:eb:c9:6c:a1:b8:84:71:32:87:7d:55:c6:f5:29:
d2:b8:2f:a2:00:75:4d:d9:55:47:dc:7d:42:59:54:
53:79:6a:9d:7c:aa:ac:3c:12:89:cd:4e:44:64:a5:
c8:91:15:8c:cb:52:ea:fb:82:05:35:6b:c6:85:52:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:79:C4:B8:DB:30:CC:E9:E7:3C:45:27:61:1A:83:3A:9F:46:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/234D99747EAC11F0B4A6A198DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:65:cc:1c:7c:aa:65:68:3a:4f:be:0c:b5:5d:91:81:83:2f:
11:23:11:3e:93:d2:4e:a1:c6:1f:47:56:50:51:72:c6:7e:79:
f6:a0:c4:44:59:57:18:d9:be:21:bd:c6:69:20:c7:c1:f2:0f:
3d:e8:71:ba:a8:5f:14:af:13:96:db:17:35:dc:66:f1:ad:20:
5a:4e:77:52:87:fd:f2:9c:8e:e8:e3:9e:b3:cc:4b:0e:82:63:
c0:99:e6:1c:81:ec:c1:67:90:f8:f2:7a:c5:0a:a6:c2:1f:f4:
0b:81:26:92:16:5d:81:9e:74:0d:7f:e3:62:ca:6a:98:49:4f:
cb:f9:39:2f:1e:ab:5a:0e:fb:67:b5:67:ac:8e:07:62:1e:52:
d4:ae:54:ed:9a:03:3f:72:4b:c1:55:fb:54:7c:a8:76:9f:06:
2d:b4:26:59:1e:19:65:93:79:ae:25:e5:32:95:23:da:b9:a4:
35:92:7b:52:1b:62:80:eb:3d:31:f7:5a:77:1c:b8:6b:8c:71:
cf:0b:a5:ba:a3:cf:26:be:b4:a4:a8:59:bd:28:87:c5:af:16:
82:ed:50:55:89:2c:62:29:15:b3:d7:c9:18:3d:f0:a5:c2:e1:
d8:f0:e2:55:9a:a8:af:02:a9:33:34:67:db:68:80:72:c2:af:
63:64:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:20:19 2025 by rpki-client