Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6273E4587E8611F0A29911A2DAE4EC9C.roa
File: 6273E4587E8611F0A29911A2DAE4EC9C.roa (raw, json)
Hash identifier: S8IAWO2/s1v4T96eJi8fkk0KFqmyre7qcHnZ/ya7D60=
Subject key identifier: BD:9C:7C:EF:EB:95:D0:E6:10:BA:0C:2C:FB:DB:79:91:ED:8E:84:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6273E4587E8611F0A29911A2DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 12:00:09 +0000
ROA not before: Thu 21 Aug 2025 12:00:04 +0000
ROA not after: Mon 08 Sep 2025 12:00:04 +0000
asID: 134489
IP address blocks: 156.238.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93737 (0x16e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 12:00:04 2025 GMT
Not After : Sep 8 12:00:04 2025 GMT
Subject: CN=68a70a49-184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:be:0a:1a:5f:e6:10:f1:2a:18:c0:f2:36:
7b:74:d1:27:a3:59:f6:e7:cb:31:06:8c:f2:ea:1f:
07:7d:9a:d6:3b:8c:22:58:1e:94:a5:c3:fb:c4:ab:
13:24:6e:74:cc:44:72:d4:4f:33:a0:92:9c:36:b1:
46:a6:0f:cb:f9:8b:e7:c3:ba:70:c5:c8:bc:bc:ce:
42:32:41:72:b3:70:a6:af:28:35:f1:3e:70:d0:ee:
94:d5:14:36:1d:55:82:47:99:51:9e:5c:fa:51:ae:
d3:a1:7b:8d:77:40:80:f7:c6:eb:6d:d2:8c:9d:2f:
24:71:90:cf:43:dd:fe:f7:fb:09:7e:ba:95:eb:10:
4a:98:d5:e5:07:79:2b:e0:b9:b7:ba:9d:93:b5:96:
8a:51:4a:ca:bd:ba:6e:8f:62:b5:51:fe:7e:de:a0:
d3:4c:d1:6f:de:96:e4:8a:e6:03:77:eb:35:c4:30:
0e:a7:01:77:58:fa:3e:3f:8e:b8:13:64:cc:09:e1:
93:bd:13:42:57:fd:28:5c:d2:9b:61:ff:25:88:8f:
af:33:26:be:26:69:89:0a:17:6c:b5:5e:4a:e9:ea:
7e:22:26:81:90:95:72:c0:25:89:eb:66:3f:be:d1:
8d:63:29:24:db:c0:24:ff:ad:9f:7e:cb:5a:ca:f7:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:7C:EF:EB:95:D0:E6:10:BA:0C:2C:FB:DB:79:91:ED:8E:84:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6273E4587E8611F0A29911A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
47:12:34:e5:21:91:6c:fe:f6:98:dc:f9:4d:a5:e2:49:a3:45:
ca:c6:1c:e8:61:ed:6a:60:03:d5:76:16:cb:b4:3b:c4:8a:57:
fc:41:ed:7d:fb:e5:b6:b9:f8:ac:a6:7e:37:33:2b:d3:b4:2a:
47:f6:14:9b:61:70:88:fe:c2:fd:22:d2:ba:ac:d5:a8:fe:88:
c9:07:32:45:44:b4:5a:88:6c:f2:f5:b8:51:67:c1:2a:fb:f2:
b5:fc:1d:d7:99:82:a4:09:e7:42:d6:ed:cc:24:ab:29:aa:e4:
d3:b7:c2:ed:6e:f5:e1:16:ee:13:48:bc:10:58:67:b4:c8:15:
18:a3:89:f2:0b:21:06:0c:f0:c7:10:57:d7:ca:92:9f:1b:b6:
2b:8f:b7:13:b2:82:ae:67:b4:7f:bf:12:c8:4f:d9:b8:e3:9c:
69:41:38:58:91:e4:70:e7:bb:9b:e5:cb:c4:3f:4e:b5:94:e6:
1d:2f:3f:65:f6:9f:56:a6:14:68:fb:fa:6d:38:20:6a:5e:89:
f1:a7:98:37:80:83:f7:1b:0a:10:7a:9c:a9:15:6d:52:15:f2:
be:96:ab:cc:a8:1d:e9:65:83:f8:e1:ab:11:01:5c:bf:51:1d:
86:34:db:1b:e9:37:d8:9a:46:2d:c3:85:70:2d:1b:0a:c2:83:
96:be:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:19:27 2025 by rpki-client