Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A22589679BB11F08C7B8AD0DAE4EC9C.roa
File: 9A22589679BB11F08C7B8AD0DAE4EC9C.roa (raw, json)
Hash identifier: jWXMuGO5gMkTBz/NhPGpD4Q2MwXCU/hvkQ7uitvsCds=
Subject key identifier: B1:51:08:6A:82:44:2B:F5:DE:05:9E:13:ED:24:07:AA:28:0F:20:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B3E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A22589679BB11F08C7B8AD0DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 09:38:30 +0000
ROA not before: Fri 15 Aug 2025 09:38:26 +0000
ROA not after: Mon 22 Sep 2025 09:38:26 +0000
asID: 203020
IP address blocks: 156.248.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92990 (0x16b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 09:38:26 2025 GMT
Not After : Sep 22 09:38:26 2025 GMT
Subject: CN=689f0016-cf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:35:24:06:ce:a5:03:ca:9f:69:cd:1c:87:
bd:83:5f:95:ac:1a:0a:e4:5f:26:7c:d0:1f:4c:c3:
c0:95:16:47:6e:bd:43:3a:d7:f8:ad:c5:4f:27:6b:
11:18:7a:26:4b:37:52:68:89:0b:fe:f2:de:77:32:
28:f3:1c:29:fd:6d:ad:47:31:97:3f:fa:d1:ec:6d:
7d:f8:dd:7e:8b:ea:34:33:9e:3e:6d:b7:64:a6:14:
07:b8:90:08:05:8d:c5:1e:44:8f:f3:af:13:f7:29:
b2:aa:1f:63:2d:23:fb:71:07:fb:14:3c:44:bb:fc:
14:84:c0:25:6c:de:1a:a5:36:7e:51:db:eb:cf:cb:
cd:9e:8e:c8:b8:fc:41:0d:e4:34:40:da:26:1d:b9:
31:dc:a9:3a:77:b6:a8:b1:ac:71:be:37:75:4f:6c:
30:10:85:75:3e:47:6c:c6:6a:e7:2b:af:36:f5:e4:
76:6f:60:b8:df:6c:eb:a1:1f:ce:d3:78:49:c9:0d:
bc:c3:68:d5:2f:5c:38:f4:d8:2c:3a:b8:48:cc:62:
c9:d3:7d:3c:e1:c1:2b:11:08:9d:c5:23:58:e0:d9:
6a:0a:d4:75:42:cd:17:e1:31:fa:90:00:b3:57:cf:
63:3e:b4:0c:30:9d:49:9a:f2:7f:ee:36:32:16:68:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:08:6A:82:44:2B:F5:DE:05:9E:13:ED:24:07:AA:28:0F:20:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A22589679BB11F08C7B8AD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.32.0/19
Signature Algorithm: sha256WithRSAEncryption
42:58:3a:34:e1:2a:b1:1d:7e:73:24:57:bf:7c:dc:a3:8b:d4:
16:70:4f:2c:9f:5a:7b:aa:83:f4:d5:4f:26:33:23:e2:e5:fc:
aa:80:96:0d:52:65:78:be:84:fb:bd:7f:7f:e6:f7:b0:d2:8c:
25:b7:ba:55:10:12:0b:f8:42:06:1b:c0:54:0d:e8:81:3c:b4:
48:bb:99:de:de:cc:79:e3:f8:fe:ef:62:7f:2b:09:17:c9:43:
ee:33:06:bf:58:72:6d:be:39:ae:49:6b:59:b4:4d:64:cd:ae:
56:2b:ca:59:54:62:a0:81:de:cd:1e:5f:22:7a:bb:4c:4c:79:
f8:85:48:07:69:1f:e2:95:37:bb:b0:95:b1:9e:29:79:3b:bf:
ae:0c:08:a2:17:78:59:5f:4b:8c:80:8e:37:a4:62:02:ae:50:
6d:e4:43:af:ae:64:3b:45:56:1e:c8:ff:89:0e:e9:44:cd:17:
9c:26:b2:b3:e3:02:94:46:48:3c:f4:b1:80:35:6d:34:33:b6:
c5:e3:30:61:d3:01:a4:fe:13:1f:32:ef:c4:68:6f:30:06:04:
5b:8f:fe:35:f4:fb:fa:17:5f:ac:00:48:f9:d8:f4:0c:74:d9:
d7:27:dc:37:9d:2e:10:9c:4c:10:7f:df:9c:ee:f7:43:0c:49:
45:df:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:24:09 2025 by rpki-client