Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6174330E7ACC11F0B6A275B8DAE4EC9C.roa
File: 6174330E7ACC11F0B6A275B8DAE4EC9C.roa (raw, json)
Hash identifier: 4QQ1D2QdT30hiBNmqUahqldio4d/6a4Brst5mhR6V+E=
Subject key identifier: 6B:28:82:12:14:23:F8:15:53:38:C4:1E:E1:54:5D:C5:C4:D2:58:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6174330E7ACC11F0B6A275B8DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:11:08 +0000
ROA not before: Sat 16 Aug 2025 18:11:02 +0000
ROA not after: Sat 04 Oct 2025 18:11:02 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 24
156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93065 (0x16b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 18:11:02 2025 GMT
Not After : Oct 4 18:11:02 2025 GMT
Subject: CN=68a0c9bc-0969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:f8:61:3f:16:ef:b2:e2:22:e3:7e:42:42:
31:7a:7b:7d:5d:8c:30:15:d0:56:6c:37:e1:f2:5f:
54:8a:e3:b5:09:cc:73:dc:09:32:70:fe:82:06:89:
af:8b:a4:12:9b:c8:f9:d7:ae:08:02:1a:21:cb:92:
e8:3e:c9:b0:aa:b8:ed:61:93:0c:2e:f8:a8:60:6d:
a3:48:07:45:9d:da:83:f4:ae:1a:b2:ac:66:d7:79:
cc:5f:04:a8:c1:98:71:9d:38:1e:f5:30:b2:8c:d8:
3f:31:03:55:4c:ba:f2:76:2d:9e:32:d9:43:ee:77:
80:b4:1b:f3:a0:2f:33:93:89:bd:9f:f6:70:d7:04:
ae:b5:58:e3:f7:be:da:2d:20:95:c2:94:5c:cc:27:
9a:cf:41:41:db:4d:45:75:2f:62:46:46:d2:d1:2b:
6f:6e:b5:37:f8:0f:bd:3a:87:d2:56:67:95:44:c5:
e7:93:ca:c4:f7:6c:5c:d1:4d:af:de:37:6f:7b:6a:
1b:fd:27:1a:e9:a3:23:19:62:df:4a:a0:1b:3d:3e:
99:a3:ed:ba:06:e1:e6:49:19:0d:c1:af:29:28:ea:
2e:39:36:ce:43:ab:81:8b:d7:4c:55:fe:16:d1:d8:
cc:53:05:c9:f2:6c:74:cd:fd:dd:54:66:8e:30:2a:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:28:82:12:14:23:F8:15:53:38:C4:1E:E1:54:5D:C5:C4:D2:58:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6174330E7ACC11F0B6A275B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:76:56:7d:bd:8a:ec:45:d3:00:4a:27:42:b8:a4:05:86:d6:
6d:76:83:7d:41:ce:5f:c5:3d:d0:a8:11:74:1b:1b:55:68:7d:
b5:d7:58:cc:d8:64:66:a3:dc:d8:de:ae:09:93:f5:40:5a:8c:
51:47:16:90:9b:75:33:e2:2a:2f:5a:b2:53:64:11:50:3c:1f:
ee:ea:50:c3:b2:f5:cd:5e:9d:6a:0b:c7:61:cb:d2:69:17:60:
dc:6e:16:eb:a2:10:26:86:c5:f8:97:fe:9e:47:25:33:af:62:
e9:62:68:ce:d6:1a:b8:98:e6:1f:06:8c:80:2b:6e:36:8c:15:
65:99:98:6e:6a:f0:61:dd:fb:80:f7:24:13:75:82:b5:2d:d4:
77:cb:a6:c3:62:4c:9b:60:ef:47:b7:72:bb:3c:93:25:8d:2a:
35:ad:6a:8c:6b:71:c9:e3:3e:ff:37:9d:d9:da:f8:29:1b:ff:
e6:53:10:68:83:55:ff:e8:1c:53:3d:23:f4:f5:7d:c6:1d:a5:
db:9d:40:2c:a9:70:31:37:ee:6a:62:02:d3:1b:c8:6c:8c:86:
f8:f7:de:35:09:68:9c:0c:87:14:5f:42:71:65:9c:5e:f0:55:
d0:b1:d4:d1:d8:7b:bb:83:0b:bf:3e:dd:64:a2:15:4e:b7:a3:
f3:69:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:31:08 2025 by rpki-client