Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87ABA586511211F09025779CDAE4EC9C.roa
File: 87ABA586511211F09025779CDAE4EC9C.roa (raw, json)
Hash identifier: sfYp/lcK1VqmMIVQDtWxNteSgUmRRR0+6Zrzf66XZ1c=
Subject key identifier: 3E:C0:55:BD:FD:66:A0:31:B1:14:85:88:F4:7C:4D:25:27:3B:57:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015E7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87ABA586511211F09025779CDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 15:47:28 +0000
ROA not before: Tue 24 Jun 2025 15:47:23 +0000
ROA not after: Fri 08 Aug 2025 15:47:23 +0000
asID: 62084
IP address blocks: 156.247.20.0/24 maxlen: 24
156.247.21.0/24 maxlen: 24
156.247.22.0/24 maxlen: 24
156.247.23.0/24 maxlen: 24
156.254.96.0/24 maxlen: 24
156.254.97.0/24 maxlen: 24
156.254.98.0/24 maxlen: 24
156.254.99.0/24 maxlen: 24
156.254.100.0/24 maxlen: 24
156.254.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89724 (0x15e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 15:47:23 2025 GMT
Not After : Aug 8 15:47:23 2025 GMT
Subject: CN=685ac890-c6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:7d:b8:84:45:15:d9:e7:db:e3:e7:59:94:
ae:c7:58:78:ab:47:db:3c:34:7f:83:8d:e0:c8:4b:
91:81:88:14:18:47:d3:d3:47:e6:cd:31:7a:d8:f2:
90:a8:ff:7d:5d:d1:7a:82:64:75:74:7e:20:c5:9b:
71:ff:a5:47:25:08:03:28:70:57:c3:f7:a6:d9:58:
bc:76:49:e7:f8:3c:de:ef:5e:bc:82:7e:7c:3f:ba:
2e:66:ed:3a:c8:fb:48:63:e7:3a:d7:06:d8:e4:cf:
2b:4d:36:20:18:db:18:9e:5b:6d:96:f2:6b:a4:8d:
c6:de:1b:37:1e:64:18:00:4e:f8:77:06:a3:9e:dc:
4a:d5:b0:77:55:1b:9d:73:ab:a5:16:9e:ab:43:c3:
3d:5f:23:34:fb:ee:73:ec:6e:ef:23:b2:53:f8:67:
c7:c9:e0:cd:a7:a3:72:bb:11:1f:6d:30:21:fe:0e:
8f:88:69:c2:2b:d9:03:3c:69:60:57:11:17:4e:cc:
e5:d4:59:05:37:98:29:86:ed:b9:1d:ac:99:49:3c:
58:2e:e4:dc:44:b2:90:d2:f5:da:aa:14:4d:9f:f8:
51:71:13:1a:0d:c4:32:f0:5b:62:d2:9e:d8:d4:67:
5b:53:bd:62:01:f9:88:99:34:76:b5:a7:71:2f:e3:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:55:BD:FD:66:A0:31:B1:14:85:88:F4:7C:4D:25:27:3B:57:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87ABA586511211F09025779CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.20.0/22
156.254.96.0-156.254.101.255
Signature Algorithm: sha256WithRSAEncryption
b1:fc:5e:e2:31:cd:12:f7:df:87:de:03:d1:44:d4:e4:69:c0:
b7:5c:44:86:c7:4f:08:4b:4c:f5:c3:b9:93:0a:33:de:54:cd:
76:f4:5d:72:1b:fc:32:55:30:6c:85:57:3e:68:2f:3c:91:01:
03:76:e9:de:55:38:15:e1:f7:54:97:54:ea:c0:f7:9f:ac:c5:
9c:7f:db:47:3f:62:53:74:83:5a:99:b7:b4:40:be:a1:82:c4:
33:da:0b:fe:6a:44:8f:76:e6:92:39:6e:e5:94:13:cb:46:65:
18:be:a9:a0:48:5c:e4:d9:be:28:24:4f:ff:b3:3d:a8:f4:ca:
70:16:23:2f:5a:05:ed:dd:23:23:1d:dc:db:c2:9d:95:ad:5d:
d8:b6:25:e7:84:48:88:60:5d:58:a9:a1:b8:bd:33:ce:20:67:
7a:60:df:0c:42:de:74:27:03:a8:27:e4:aa:ca:db:77:84:87:
3f:c3:f3:36:54:c8:56:4a:73:c7:85:95:2b:83:e3:07:f1:cf:
30:94:0c:64:3a:f4:06:86:8a:3a:df:b3:6c:1c:e6:8d:f2:cf:
b2:bd:20:22:ca:08:e0:6f:64:2c:6c:fa:b3:99:00:cc:77:c5:
59:a5:9f:09:7e:aa:0e:06:a9:e6:e2:74:84:bf:73:f8:4b:18:
d8:31:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:35:14 2025 by rpki-client