Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7D126678FD11F0BAF4A7F6DAE4EC9C.roa
File: 8D7D126678FD11F0BAF4A7F6DAE4EC9C.roa (raw, json)
Hash identifier: NjRDG/EJtr8VFKO0abXtj3qMBM4uznKBgZ5OiBErTb8=
Subject key identifier: C1:D0:12:71:E3:E7:1A:4B:DE:BD:EE:71:42:28:6D:91:FF:9C:82:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7D126678FD11F0BAF4A7F6DAE4EC9C.roa
Signing time: Thu 14 Aug 2025 10:58:05 +0000
ROA not before: Thu 14 Aug 2025 10:57:59 +0000
ROA not after: Sun 07 Sep 2025 10:57:59 +0000
asID: 64267
IP address blocks: 156.227.11.0/24 maxlen: 24
156.227.12.0/24 maxlen: 24
156.239.60.0/24 maxlen: 24
156.248.100.0/23 maxlen: 24
156.248.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92917 (0x16af5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 14 10:57:59 2025 GMT
Not After : Sep 7 10:57:59 2025 GMT
Subject: CN=689dc13d-4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:12:d3:a4:13:20:7c:e4:a2:82:dd:6d:37:
2b:89:5e:d1:80:87:56:4c:17:a5:c8:f8:9a:cd:52:
fc:44:a7:05:f6:aa:23:02:b9:3e:66:7b:94:c3:9a:
5b:ce:af:6b:7b:72:36:44:f0:0d:57:2c:05:07:df:
eb:67:65:9a:a5:0b:40:5f:3d:82:05:1e:7b:ca:f5:
15:bd:77:b9:62:b7:4f:9d:41:88:af:ff:e1:87:05:
b7:e9:cf:47:e1:a8:b2:2f:69:81:0e:0b:f7:d5:97:
44:a2:a3:4f:c7:a7:37:35:6c:2f:5e:fc:b0:70:04:
a8:d1:7d:44:0d:53:f8:13:1e:e4:9f:8b:79:71:2e:
a0:2d:92:db:a3:4a:58:66:5b:e7:7c:04:52:97:f1:
5b:cb:0b:e5:0e:f3:24:c0:b0:7b:5d:bf:c8:5e:cf:
0d:34:e8:6e:67:d2:84:83:ba:3b:59:44:86:ac:dd:
56:fb:86:96:6d:e0:f7:a7:78:de:72:0f:f8:0d:8e:
f3:41:e2:ab:51:a8:9f:dc:6f:32:43:14:93:ed:51:
b5:57:e3:14:51:e8:c7:e9:a8:cd:2e:ad:8c:fa:21:
de:66:de:62:47:a6:20:2b:19:9d:9f:db:87:d4:cd:
9f:69:b6:4f:83:6f:09:79:e9:f8:8d:84:6b:b9:68:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D0:12:71:E3:E7:1A:4B:DE:BD:EE:71:42:28:6D:91:FF:9C:82:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7D126678FD11F0BAF4A7F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.11.0-156.227.12.255
156.239.60.0/24
156.248.100.0/22
Signature Algorithm: sha256WithRSAEncryption
93:dc:f6:8f:eb:5f:de:67:02:81:a0:3b:1d:fc:df:79:d6:a5:
d8:66:13:38:3d:6f:82:e3:08:c6:b1:f0:bf:3f:37:6e:9a:7b:
41:e1:da:49:43:e9:75:11:33:e1:7c:34:9f:66:1b:b2:6a:f0:
27:62:24:3a:4f:f3:62:f9:51:be:8e:fd:61:57:95:13:49:4b:
5a:dc:cf:26:31:df:08:7a:f0:b5:16:2a:db:57:d3:3b:71:f9:
f6:41:af:38:a5:f3:72:0e:f2:ec:67:f2:6c:b3:74:b5:97:2c:
b9:5e:8e:87:d3:3c:2f:69:4d:7a:68:a5:f9:08:1e:c9:7a:f6:
e7:36:3e:4f:8f:23:7a:6e:10:e1:e0:44:95:2d:60:4f:97:46:
91:30:2c:94:30:9f:24:c9:15:01:9f:1c:d7:23:35:00:22:ad:
59:81:47:3a:00:7e:02:ed:3e:84:31:b6:36:b9:cb:aa:24:e4:
f7:39:11:b4:b2:6c:18:8c:7c:b4:95:d6:0d:6f:bc:ff:ac:89:
b7:cc:f2:da:76:a6:4a:1c:c3:2f:31:b1:7e:8b:05:71:89:18:
ab:95:ac:a1:5a:f3:9c:4f:7b:3c:f7:bd:77:e0:e3:22:b3:59:
d5:0e:47:7e:57:6a:22:69:62:2e:fa:91:5f:d5:49:98:2f:a7:
c6:07:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:35 2025 by rpki-client