Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97D74BA87EAE11F08B962DA6DAE4EC9C.roa
File: 97D74BA87EAE11F08B962DA6DAE4EC9C.roa (raw, json)
Hash identifier: QwA57MvH5GAs2cl7ZLMkMsjwFLlaE6IYVfxm5mlD+8c=
Subject key identifier: 75:2B:9D:72:7B:6B:BC:FC:78:DD:E3:C3:33:50:5C:FA:4E:8A:AB:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016E72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97D74BA87EAE11F08B962DA6DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 16:47:59 +0000
ROA not before: Thu 21 Aug 2025 16:47:54 +0000
ROA not after: Wed 21 Aug 2030 16:47:54 +0000
asID: 17561
IP address blocks: 156.247.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93810 (0x16e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 16:47:54 2025 GMT
Not After : Aug 21 16:47:54 2030 GMT
Subject: CN=68a74dbf-d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:0c:81:1f:96:bc:96:e1:16:f9:08:d0:57:
2f:bc:8a:42:93:8a:bb:6b:d0:5d:8b:1e:6a:7d:27:
f4:6a:16:cc:ac:2b:f2:dd:84:d0:16:5a:b7:79:71:
7f:35:10:0f:5e:d6:89:3f:a2:21:84:e1:33:25:d3:
2f:ea:d3:6a:e1:a6:3c:9b:65:10:b6:d6:63:2a:68:
cf:de:56:26:61:0e:5f:9f:2c:1a:cd:e8:e8:04:ba:
c3:47:22:4e:a9:df:7e:6d:79:b6:4c:73:23:f6:a3:
f0:d2:27:84:e3:15:5a:88:68:19:fe:38:25:7d:a1:
61:eb:ed:25:6d:5f:b9:7e:35:b7:2c:41:f0:5e:69:
53:c2:7a:8d:92:1b:1a:43:80:e1:de:14:a8:b4:13:
b9:73:d2:86:6f:70:1b:06:3d:89:63:d1:6d:d9:f2:
41:a9:a8:63:54:c6:ea:85:8b:3d:db:3d:a0:3e:d2:
28:88:eb:6f:da:af:96:be:a7:6d:5a:4b:c5:0f:ad:
f2:d7:d0:83:ac:23:f8:c8:3a:12:dc:11:95:a3:9e:
c7:d6:ec:de:4f:f8:a8:04:8d:8f:2c:11:d0:e9:f1:
3e:19:71:fd:f1:c9:e1:ae:a5:5f:bc:f2:8f:fe:cd:
ef:e1:f4:b6:ba:05:f9:25:ca:a2:8b:4f:f2:01:11:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2B:9D:72:7B:6B:BC:FC:78:DD:E3:C3:33:50:5C:FA:4E:8A:AB:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97D74BA87EAE11F08B962DA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:c8:d5:90:f8:0f:36:65:83:fb:34:f9:a1:e6:ba:b4:c1:73:
04:4d:a9:cf:d0:f4:c3:d5:f9:5f:61:52:16:5e:fd:19:ba:79:
04:95:4b:38:ef:81:eb:f7:1d:15:36:b2:95:16:88:18:63:37:
ff:3b:18:fd:f1:49:07:60:39:46:ef:58:fc:83:be:9b:10:5a:
09:c3:02:f3:4b:11:40:df:67:e1:d0:75:35:ad:11:e1:a0:93:
fd:3d:b1:da:a5:f8:59:cc:8e:eb:c4:3e:ee:00:d1:c8:92:ce:
d3:7d:b6:98:a7:c2:3c:d1:bb:fc:b9:71:ee:1c:9b:99:79:50:
77:f6:2f:e1:ed:dc:45:c8:2b:9d:dc:1f:de:e8:73:12:47:4e:
a1:8a:d8:fd:b2:48:dc:b4:1b:4b:c5:a6:49:4f:32:22:88:79:
d2:bd:55:e7:a9:b0:68:5d:4b:ce:61:45:04:a7:ec:7f:8f:36:
7f:d3:d2:30:f8:8e:ab:ee:01:d8:39:fa:2b:13:aa:93:9c:96:
49:b8:68:fb:34:e0:c2:31:84:15:c8:f2:7e:f3:40:b4:bc:05:
df:e8:4e:b6:d1:b9:a1:50:34:e8:f9:42:18:98:a9:02:41:14:
94:53:17:44:36:dc:93:94:62:6e:7f:67:37:1c:ad:f1:02:e7:
51:e8:b7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:03:14 2025 by rpki-client