Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FE611147AB811F0B31E1DB7DAE4EC9C.roa
File: 6FE611147AB811F0B31E1DB7DAE4EC9C.roa (raw, json)
Hash identifier: 4PKMvaDuI2b3/vQyiaOWUokqyF1YG7PRddzWCcRtGSw=
Subject key identifier: FF:59:6A:C4:C8:E3:71:A2:C0:65:5E:B6:EA:E6:87:8B:D6:FD:9B:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FE611147AB811F0B31E1DB7DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 15:48:22 +0000
ROA not before: Sat 16 Aug 2025 15:48:15 +0000
ROA not after: Sat 27 Sep 2025 15:48:15 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93019 (0x16b5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 15:48:15 2025 GMT
Not After : Sep 27 15:48:15 2025 GMT
Subject: CN=68a0a846-bd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2a:16:96:a3:09:3e:3f:a9:68:0c:fe:e6:46:
f3:ec:1f:db:26:6d:eb:ef:4d:e6:e5:2f:ee:ab:a8:
50:fa:b2:98:2d:c6:b7:27:b8:81:0a:7d:c4:b2:07:
25:6e:28:5f:f0:b6:10:92:a8:da:09:7f:f9:d2:48:
0c:47:87:e2:07:c9:91:90:91:c7:11:54:10:e5:70:
49:ef:57:23:8a:b3:4c:21:ea:11:3b:2a:61:4b:83:
38:5b:f4:7f:21:79:4f:c2:f7:eb:58:e2:d7:16:cf:
76:83:30:a3:f8:a6:ee:89:28:92:10:5b:ba:c8:8c:
74:8f:99:d6:46:26:d3:69:ba:61:0c:60:b7:bf:42:
09:d7:43:b8:28:12:29:6b:b8:96:6c:79:a2:2e:62:
49:e9:bc:55:91:0d:b0:f4:d9:0a:db:1a:0d:17:aa:
0f:f7:15:46:08:f5:df:bc:52:52:66:b4:e9:b3:5a:
c8:ae:4b:a9:7e:85:35:87:a0:6d:a9:64:4f:ad:c0:
46:d6:c2:c0:30:a6:67:97:34:86:01:4f:c2:72:15:
e5:fb:15:86:ae:56:b6:73:33:2b:5c:77:67:78:82:
31:66:0c:d0:69:d4:09:2c:b9:98:7b:24:60:e9:5b:
24:58:94:a7:47:9e:5e:ec:7c:f8:d1:d7:90:92:89:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:6A:C4:C8:E3:71:A2:C0:65:5E:B6:EA:E6:87:8B:D6:FD:9B:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FE611147AB811F0B31E1DB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:aa:31:39:65:4b:41:4a:32:a4:f5:3d:80:58:87:fc:31:9d:
c5:17:b6:6b:0e:cb:a0:94:90:8b:a2:80:76:60:bd:ad:ff:96:
1f:7b:9e:28:4a:f7:32:26:9f:61:7d:36:8e:19:40:07:35:af:
b2:b7:71:68:99:b2:f5:db:12:70:23:f2:0b:71:f6:75:20:77:
35:93:b9:92:7b:ec:50:bb:c2:4d:d7:d9:cf:0d:4d:d3:23:f9:
8e:12:f3:09:ea:0a:2a:be:93:53:4b:66:25:32:f7:10:54:16:
23:fe:dd:92:99:50:07:28:31:ce:06:b2:be:d0:ec:5f:8c:71:
ba:c8:8b:73:4c:38:3e:ca:f9:38:c7:1c:55:cd:fa:90:66:da:
56:d3:a2:75:c1:8c:7f:1f:11:74:57:76:df:b1:61:49:70:fa:
34:c5:4e:85:c3:be:9a:31:32:55:a6:dd:d1:e3:d1:ae:88:5e:
54:04:b4:79:9c:72:7f:db:b1:b5:33:e4:3c:6f:be:4c:e0:49:
49:73:42:98:0a:72:31:95:8a:2d:76:d7:5b:67:af:38:4b:f2:
fe:c8:9a:20:93:53:96:24:13:32:2b:70:24:38:0c:db:10:17:
51:2d:b3:f3:9b:4c:6e:b7:b7:03:79:19:89:09:8a:b9:c8:7f:
b4:ca:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:59:29 2025 by rpki-client