Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44CA973A746311F0B88048F1DAE4EC9C.roa
File: 44CA973A746311F0B88048F1DAE4EC9C.roa (raw, json)
Hash identifier: MSlm1grzenzoUEI63ioAxBh+jqfR6fr4I3F0I9ZKDyQ=
Subject key identifier: 10:73:C9:E5:B4:9C:28:34:8E:A6:78:EE:E2:D2:04:82:17:A3:85:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0169B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44CA973A746311F0B88048F1DAE4EC9C.roa
Signing time: Fri 08 Aug 2025 14:23:36 +0000
ROA not before: Fri 08 Aug 2025 14:23:27 +0000
ROA not after: Sun 08 Feb 2026 14:23:27 +0000
asID: 328608
IP address blocks: 156.248.8.0/24 maxlen: 24
156.248.9.0/24 maxlen: 24
156.248.10.0/24 maxlen: 24
156.248.11.0/24 maxlen: 24
156.248.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92598 (0x169b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 8 14:23:27 2025 GMT
Not After : Feb 8 14:23:27 2026 GMT
Subject: CN=68960868-23a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:e6:23:64:24:b3:d7:78:39:a1:9b:44:5e:
44:98:94:46:3c:b9:6c:fe:83:a3:22:2d:3d:ba:b1:
b2:2e:07:eb:ea:2b:b4:16:12:6c:f4:1a:8a:d6:bc:
3a:fe:fc:9e:47:1a:b3:40:47:f3:7a:3b:d8:cb:c6:
81:eb:ab:1a:97:fc:8a:99:7f:35:89:1b:f9:f2:7f:
77:24:94:9c:3c:9a:f9:43:3d:90:2c:cc:a2:f8:c0:
f6:af:4b:07:99:6f:dd:8c:69:16:e5:34:74:0d:20:
81:ee:48:1d:c9:33:0b:48:a4:fd:44:18:16:ce:67:
73:8d:4f:05:1c:c9:84:5f:6c:19:6c:d2:ff:8c:cf:
45:d0:96:6b:78:05:51:d2:b4:10:d5:60:97:06:5a:
f7:ae:0d:3d:03:b0:a5:9d:01:ac:07:ba:f0:90:8a:
1f:58:05:56:f7:4c:2a:5e:ba:20:7e:b0:22:a7:1b:
91:e7:de:2c:b3:62:27:4f:34:7d:02:fa:5e:4d:77:
99:37:24:b4:4c:ea:5e:51:60:40:80:45:4b:bb:0b:
b1:72:00:af:f9:0b:5d:aa:b7:c8:13:34:a0:da:88:
29:4c:3d:6d:55:3b:e5:23:bd:55:db:a2:50:dc:4c:
41:38:85:07:7c:cf:2b:8e:d8:88:f5:86:45:e2:00:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:C9:E5:B4:9C:28:34:8E:A6:78:EE:E2:D2:04:82:17:A3:85:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44CA973A746311F0B88048F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.8.0-156.248.12.255
Signature Algorithm: sha256WithRSAEncryption
9f:79:02:e2:f0:59:ea:be:2a:7a:b0:e9:af:f5:20:13:6f:91:
4b:b1:d7:b2:99:46:9e:16:35:0a:88:5d:f9:f7:27:50:92:e3:
8b:13:51:d4:8d:84:50:94:02:b4:ba:2a:77:7f:74:37:17:be:
16:d1:e3:74:57:f2:e0:aa:1e:d1:ad:cc:13:68:3f:c6:18:e1:
f4:c7:23:ed:ac:c1:eb:c0:d2:38:a0:28:fc:a8:33:83:97:5b:
50:29:3e:59:ae:c4:ba:30:51:d8:3e:8a:71:0c:9f:3e:0f:11:
db:33:7c:8b:06:ee:bb:2d:1e:ed:a8:e1:9b:76:8b:7f:50:76:
ac:61:54:29:99:07:82:a3:7a:b9:8a:b9:76:eb:4a:fe:81:7e:
18:ea:a6:89:91:5c:e0:06:24:eb:52:60:c3:4a:4d:8d:6d:8f:
57:ab:d3:05:97:d8:1e:d2:da:3f:12:98:b3:a2:5e:02:75:4f:
09:80:81:42:02:b9:c4:1d:5e:19:c7:a5:05:4a:42:e9:27:c4:
ba:a1:16:d7:6d:85:77:97:00:f0:05:58:c9:6b:e1:d0:9c:34:
a9:b0:0c:d0:80:b2:97:f9:cb:5b:cf:cb:87:c5:69:a2:33:f7:
21:c3:bd:35:8b:75:78:4f:15:32:1a:7f:1f:82:74:e0:03:e6:
24:9c:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:18:53 2025 by rpki-client