Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD01926782C11F0A81CCFA5DAE4EC9C.roa
File: 3BD01926782C11F0A81CCFA5DAE4EC9C.roa (raw, json)
Hash identifier: aqsxQ1UBY1xOI8d4ftqv7fhg2AEPlL4wAyNlnqske8Y=
Subject key identifier: 8F:E4:62:21:4F:54:FF:F4:6D:0E:6D:A0:24:FC:85:4D:F2:B7:1B:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD01926782C11F0A81CCFA5DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 09:59:43 +0000
ROA not before: Wed 13 Aug 2025 09:59:38 +0000
ROA not after: Sat 20 Sep 2025 09:59:38 +0000
asID: 211265
IP address blocks: 156.231.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92853 (0x16ab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 09:59:38 2025 GMT
Not After : Sep 20 09:59:38 2025 GMT
Subject: CN=689c620f-e024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:98:90:ba:d0:12:d2:4f:e9:2d:33:f9:9a:
83:53:9a:5c:51:56:cd:60:b8:5f:32:8e:8a:c5:e0:
46:37:f5:35:85:c9:1d:bc:9d:75:cb:55:04:68:f4:
7d:fe:43:21:1a:1c:40:e6:5b:7c:be:a0:c2:59:e6:
b8:6d:9f:4a:15:f1:8f:2c:58:c2:a3:09:62:3d:cc:
2c:f9:a4:47:71:98:15:af:fb:bf:a3:a6:28:24:6b:
f0:30:11:f5:dd:26:cc:fa:4c:81:f5:03:0e:ad:31:
6c:0a:aa:bb:86:be:73:6c:30:22:82:ce:c3:31:80:
27:55:88:b5:6a:4c:91:9a:65:31:99:93:1d:f2:99:
8f:dd:5e:2d:6f:f3:b9:93:24:33:a8:c2:41:53:07:
24:94:9e:c9:02:a3:37:0e:af:ba:bf:ab:61:1f:e9:
e0:81:71:79:1b:81:9b:d3:37:6d:a2:f1:07:94:19:
17:0c:b1:f6:35:f7:83:85:5a:84:10:27:62:fb:e8:
b9:9d:34:3d:95:55:f3:20:10:e9:eb:c6:33:09:7b:
5a:7e:aa:12:65:02:5d:d2:50:d6:ee:36:cd:51:1d:
4f:8f:bf:c5:05:a9:75:04:80:3a:7e:ee:62:ba:0a:
d1:0a:3e:ab:7e:79:25:6f:5c:04:ed:f0:87:95:6b:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:62:21:4F:54:FF:F4:6D:0E:6D:A0:24:FC:85:4D:F2:B7:1B:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD01926782C11F0A81CCFA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.163.0/24
Signature Algorithm: sha256WithRSAEncryption
95:71:b5:55:20:38:a4:5d:91:26:d9:48:83:77:6a:e4:32:2e:
60:c8:d9:ab:d7:ed:38:9e:44:26:e9:17:68:68:77:53:74:62:
d9:2e:4f:23:fb:c7:2b:ee:43:31:83:f1:a0:a6:68:0e:7a:d3:
3d:b9:49:63:ba:81:95:85:41:c6:fd:f0:50:85:8f:e2:63:97:
fe:db:8b:55:38:d9:03:25:6a:0f:a9:85:11:80:29:e3:68:37:
00:4c:c4:8f:3a:60:37:25:26:67:fc:8f:21:f1:e8:af:60:0e:
93:fb:8b:e9:ed:ad:94:49:3d:7e:91:b9:ea:bb:68:20:24:de:
b1:f5:b8:88:c6:0a:9b:f2:14:89:11:6e:fb:ab:53:aa:0e:06:
aa:74:2c:d1:b4:ff:78:74:58:e8:11:95:c6:08:26:4d:22:23:
e8:86:3d:12:1f:6e:6e:c3:d2:f1:25:46:d5:2c:8e:fa:5c:d5:
40:29:fb:27:19:5b:82:8d:9f:29:ed:dd:0b:5e:4f:a6:16:6c:
9a:e9:73:9d:bc:63:17:01:1f:81:e8:a8:77:5e:a0:a7:bb:68:
36:3e:60:74:e4:69:51:bb:68:1e:b4:de:1b:80:88:00:00:90:
61:3c:fc:ad:9e:19:4d:2e:aa:95:b2:0f:01:18:a4:f4:8d:e5:
1f:d9:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:25:09 2025 by rpki-client