Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71CA499A7AD711F09BF35B81DAE4EC9C.roa
File: 71CA499A7AD711F09BF35B81DAE4EC9C.roa (raw, json)
Hash identifier: v1iFvi7XAWx45O0H+pZ+mCqrJBeHUT8cFjmTjT1Q4/E=
Subject key identifier: 87:60:A2:F8:54:CA:2E:43:56:36:E5:50:9D:0E:3C:0F:FD:6F:9E:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71CA499A7AD711F09BF35B81DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 19:30:20 +0000
ROA not before: Sat 16 Aug 2025 19:30:14 +0000
ROA not after: Mon 25 Aug 2025 19:30:14 +0000
asID: 134489
IP address blocks: 156.238.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93102 (0x16bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 19:30:14 2025 GMT
Not After : Aug 25 19:30:14 2025 GMT
Subject: CN=68a0dc4c-c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:16:b4:27:64:d3:0f:77:8c:fe:0f:44:61:
87:74:19:bb:5c:e0:56:d1:49:97:68:98:05:de:0f:
d6:76:18:99:68:f1:7a:44:41:44:aa:49:0b:39:df:
2f:1a:12:4c:fa:2b:fc:d5:e4:5f:c8:00:14:a7:96:
40:0e:9b:a1:4d:d8:66:dc:f0:cb:95:fa:7b:98:37:
70:bd:dc:f6:65:95:aa:ea:10:e2:78:cc:1c:d0:c8:
42:28:c8:12:6a:ba:02:9d:7d:89:a8:b8:02:76:8b:
0a:ec:34:49:e2:bb:66:56:93:f9:4b:fc:25:9a:02:
7f:8a:83:d1:3c:78:6f:b9:06:6e:96:e8:89:ea:81:
f4:f0:01:50:61:aa:e1:d8:8d:c8:60:da:db:67:f5:
65:ac:4b:b5:d5:3f:3e:0c:a6:95:0e:58:42:a3:4b:
b6:14:c2:99:2c:88:8f:c8:12:9e:24:8e:df:61:e7:
01:0b:0f:bf:ab:cd:7c:b2:3f:da:00:9a:0c:1e:51:
24:09:b1:19:3f:a1:88:32:7b:93:dd:bd:3a:61:74:
3b:4d:bc:76:2e:42:08:76:e3:53:93:eb:b7:71:af:
22:52:38:ba:91:64:f2:93:05:d6:66:09:61:26:6d:
59:b1:83:20:03:a6:a8:35:46:48:a0:5a:99:73:79:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:60:A2:F8:54:CA:2E:43:56:36:E5:50:9D:0E:3C:0F:FD:6F:9E:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71CA499A7AD711F09BF35B81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2a:e2:07:6f:fd:4e:42:6e:bc:90:0e:6d:40:7d:5a:45:c0:
27:7c:6d:ff:3d:34:c0:e5:45:cd:c0:12:db:67:e5:87:f2:bd:
6b:6b:71:1a:fb:1a:39:76:5d:c0:41:d5:c2:03:60:e2:cf:1e:
14:bb:ed:67:4b:a8:37:16:d1:c8:43:4f:5a:dc:49:f5:26:dd:
a3:81:c0:de:51:ca:25:0b:30:b1:b9:26:cb:06:00:4d:89:30:
47:d9:e3:b3:20:fa:1f:7e:0c:1f:20:c5:89:93:12:31:53:89:
3f:8b:7c:20:db:d1:4f:69:a9:2e:85:4a:f9:fe:e3:ef:55:48:
78:e2:d3:57:f8:64:88:df:3c:31:6e:03:0a:96:95:70:a4:9c:
6a:ad:0a:3b:d5:ca:72:7b:f7:03:fb:ef:c2:11:f0:26:39:1f:
77:ae:3c:26:70:22:a5:5b:10:85:e8:0d:b7:fe:58:67:e8:83:
0c:98:c9:10:3b:6c:99:24:b1:3c:3d:f1:de:85:c7:84:7a:23:
a6:66:f2:9a:55:c8:d4:0d:ae:51:98:31:c1:4f:2c:59:fc:ad:
5e:ab:e9:7f:7f:93:4a:8d:18:c9:27:89:5b:1a:44:c5:07:23:
3e:3a:49:17:68:18:08:21:0c:fc:88:b8:5f:71:8d:b7:9b:d0:
5e:2f:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:37 2025 by rpki-client