Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF377D879B311F0BCE7069EDAE4EC9C.roa
File: 6AF377D879B311F0BCE7069EDAE4EC9C.roa (raw, json)
Hash identifier: J0n4PLmNEr+9tWzCtgVKdFj4JLqNs06Rd0YCHF+gZyI=
Subject key identifier: 4B:02:B6:F9:09:2A:1F:0A:76:36:77:A8:D0:24:76:F7:BB:F5:0D:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF377D879B311F0BCE7069EDAE4EC9C.roa
Signing time: Fri 15 Aug 2025 08:39:55 +0000
ROA not before: Fri 15 Aug 2025 08:39:51 +0000
ROA not after: Mon 25 Aug 2025 08:39:51 +0000
asID: 149014
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92976 (0x16b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 08:39:51 2025 GMT
Not After : Aug 25 08:39:51 2025 GMT
Subject: CN=689ef25b-e7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:a9:90:d4:36:c1:c6:bf:cf:c7:f2:3b:74:
3d:43:b2:ed:d7:dd:a3:d9:ab:3d:e2:6c:9a:f9:b9:
e7:04:fd:dc:03:22:82:ef:06:d4:7c:fa:3a:6b:c7:
d3:fb:d3:bd:6e:c7:5a:e1:03:0a:4a:16:3d:14:f8:
17:af:0c:db:40:9a:e1:10:ec:b8:12:da:6c:f4:4e:
76:ab:4b:17:05:2a:d8:b6:9e:45:82:97:b7:b4:39:
fd:2b:ca:0b:88:b9:da:e1:f9:f3:9e:2b:0f:c2:97:
27:8c:8c:d1:bb:de:dd:56:4c:94:86:bb:b3:52:e7:
14:bd:02:b8:da:9c:fa:d9:66:38:0c:c3:24:11:06:
67:f4:00:9d:1a:c0:d8:af:d4:75:93:1b:bb:59:be:
75:7b:fe:1b:32:53:32:05:98:95:c5:d2:be:4d:9f:
43:fe:8b:89:7f:90:2a:09:e3:dc:24:b2:c8:b7:6c:
8d:22:db:c8:e2:e9:fe:d3:04:c5:58:74:72:b7:97:
a3:a4:55:8e:8e:18:ef:fa:0d:b8:73:cb:ba:28:75:
9d:0e:2f:3c:c1:93:a4:06:a8:f5:10:99:8a:56:ef:
d4:58:91:ff:be:60:e9:ac:41:88:61:0f:ce:ca:db:
71:18:41:9e:80:18:6b:0b:97:bc:fb:3f:37:38:8d:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:B6:F9:09:2A:1F:0A:76:36:77:A8:D0:24:76:F7:BB:F5:0D:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF377D879B311F0BCE7069EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:31:e8:7c:c8:ba:1c:00:fd:92:a2:ff:ce:70:eb:f3:7c:ff:
56:87:2b:69:44:21:32:86:ff:00:22:fc:03:62:db:bb:12:df:
8b:44:85:4a:4b:6e:16:69:b8:5d:d6:c7:1e:1e:38:ac:1e:51:
41:5a:73:a6:a9:7a:ba:9a:e7:92:ce:cc:68:40:13:ff:f4:94:
16:05:cd:eb:46:92:8e:9d:00:45:2d:16:80:49:56:74:1f:83:
d8:ce:31:03:63:ea:30:b5:49:7b:b0:18:de:fe:0e:f4:41:b3:
66:af:e2:48:b7:25:49:bb:37:02:a9:73:9a:cd:c5:a0:ec:60:
5c:eb:d9:15:2b:85:6f:cf:ed:ab:ca:7b:ad:c3:f9:aa:39:2f:
9b:57:4c:47:ae:89:b1:36:1b:dd:b8:ef:79:11:da:aa:43:5b:
8f:f2:ae:64:40:28:4a:18:96:d7:0d:46:ac:fa:f4:48:c5:70:
4e:f4:19:98:d9:de:31:72:e7:1e:9f:bc:88:84:26:76:1a:eb:
1c:b7:f1:c6:68:fe:e7:01:f7:f6:6c:bf:08:c4:05:7f:74:cf:
48:3b:ca:0f:ec:fd:0c:52:a9:ea:b0:ce:da:d6:2f:34:c7:18:
5e:84:a6:9c:0b:14:79:b7:fa:07:77:61:1f:40:b5:64:26:2f:
38:41:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:06 2025 by rpki-client