Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51BEDC4A7E6C11F08203F1F5DAE4EC9C.roa
File: 51BEDC4A7E6C11F08203F1F5DAE4EC9C.roa (raw, json)
Hash identifier: 3Ff05x6swbo7ADu1tS15FHVikj6ZJUGi7HOJJAyfx8k=
Subject key identifier: 37:B7:9E:83:7F:96:93:9B:F5:29:EF:55:17:23:79:72:6A:BE:77:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016DCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51BEDC4A7E6C11F08203F1F5DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 08:53:34 +0000
ROA not before: Thu 21 Aug 2025 08:53:30 +0000
ROA not after: Sat 01 Nov 2025 08:53:30 +0000
asID: 393437
IP address blocks: 156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93647 (0x16dcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:53:30 2025 GMT
Not After : Nov 1 08:53:30 2025 GMT
Subject: CN=68a6de8e-3f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:54:f1:15:1d:1d:f3:41:5e:a3:8f:18:5e:
d1:65:6a:1a:27:6b:d8:f4:6b:19:5c:19:f2:55:6f:
e1:6f:7e:ad:41:e9:34:6b:6b:44:b3:ea:9f:02:87:
1d:cd:25:64:2b:f5:ff:32:3f:5b:b8:51:cd:81:20:
67:73:c5:af:2b:13:15:ed:cc:fc:7b:c8:8d:f8:7c:
c4:32:2c:f3:7f:44:82:0e:1b:3e:06:8b:46:41:d4:
27:1c:39:46:99:80:fc:cd:17:68:3a:e9:56:dd:65:
5f:95:ff:32:fb:23:ae:01:4e:09:a8:89:65:a6:e1:
5f:46:0d:64:fd:2b:19:b3:6d:ae:f5:91:7d:a6:3c:
05:9b:0f:22:53:03:8e:44:11:11:1d:04:6a:2e:d2:
59:2b:4f:bf:d3:9d:90:43:53:a2:2b:dc:7b:d6:2a:
01:90:83:da:e9:09:7d:b2:5b:d9:4b:f6:37:51:1e:
bb:a4:33:47:c3:a6:b2:9b:49:6f:b8:41:60:82:44:
0e:d8:ca:8b:0e:33:23:fb:29:c8:ae:9d:2c:a0:cb:
b1:17:f6:1f:b7:e9:f7:65:7e:0c:39:1f:bd:95:34:
ba:21:f7:f5:38:19:78:e0:4b:c8:98:26:a1:8a:08:
f3:c2:5e:5d:21:e4:5f:80:5d:ec:e8:86:76:b9:12:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:9E:83:7F:96:93:9B:F5:29:EF:55:17:23:79:72:6A:BE:77:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51BEDC4A7E6C11F08203F1F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.117.0-156.236.119.255
Signature Algorithm: sha256WithRSAEncryption
38:12:05:e8:d2:24:e9:29:e0:ff:2d:a3:02:30:2b:5a:a9:ef:
5d:16:f4:5d:d7:b1:15:a7:48:6e:76:eb:35:94:46:a8:4b:78:
1e:d6:d3:fe:44:4d:28:e7:44:b2:03:47:02:d5:c5:9e:e5:b2:
fd:87:f6:42:c5:83:87:ba:d8:50:14:be:77:2b:7a:8f:e4:fd:
9c:ad:6f:57:a9:85:ad:f6:6d:12:a0:46:b0:ed:17:ae:f7:ad:
1d:1e:2c:b6:69:b6:06:8c:04:b9:bf:1e:a2:67:0b:84:c7:85:
c9:18:4c:9d:bd:5d:17:97:d6:6d:14:3e:70:36:10:99:8a:38:
91:ef:89:32:ed:af:36:d6:62:ac:4d:f1:60:8c:97:0e:25:43:
f5:02:66:37:2e:b9:fd:26:aa:d8:b2:cc:81:93:06:da:93:a3:
cb:b3:c0:27:56:d9:b4:3b:ef:2a:29:2c:a0:6b:ba:91:62:20:
46:12:8b:a6:2a:d9:10:c7:e7:ed:14:8f:39:59:ba:a3:f0:34:
89:87:10:9c:9d:72:bd:bb:26:35:69:0b:22:be:0c:a2:ae:f8:
c3:74:ab:29:d0:ba:db:b6:14:c0:00:68:fa:73:65:34:5a:20:
58:8e:9b:b5:07:a4:7c:7a:2b:70:df:7c:dd:ea:bf:dd:38:9b:
e1:99:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:06 2025 by rpki-client