Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D8204207F4011F0986F3EE9DAE4EC9C.roa
File: 9D8204207F4011F0986F3EE9DAE4EC9C.roa (raw, json)
Hash identifier: J8J+ju/u+sH422ec7WNtDzHJlgfn4l02meNTfdQIv84=
Subject key identifier: F5:B1:9F:B6:81:F9:87:2D:FB:CA:48:8C:7B:A2:69:0E:2A:FE:0C:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016EA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D8204207F4011F0986F3EE9DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:13:15 +0000
ROA not before: Fri 22 Aug 2025 10:13:10 +0000
ROA not after: Sat 30 Aug 2025 10:13:10 +0000
asID: 137547
IP address blocks: 156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93862 (0x16ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 10:13:10 2025 GMT
Not After : Aug 30 10:13:10 2025 GMT
Subject: CN=68a842bb-bd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:4b:f6:ec:22:59:07:02:aa:1d:48:ce:5e:
e4:d2:9d:2b:f6:d7:38:e3:1b:e1:ec:e8:ed:ab:37:
fa:2f:bb:23:b1:bd:46:88:bd:66:5c:9a:33:6d:3b:
09:1f:b6:dd:6e:c6:1e:9f:43:67:5c:e2:62:eb:ac:
72:a4:e8:b5:7d:c0:bf:9b:2e:d7:c2:79:fe:37:53:
eb:90:19:e9:82:9c:d8:06:b7:6c:5a:70:73:c2:1b:
47:a4:4d:e7:ea:7f:c7:16:34:48:90:d9:65:11:09:
e0:9c:fa:db:27:ec:76:52:e2:63:cc:fa:13:5c:39:
1f:76:06:fa:62:76:40:02:db:00:d7:d7:33:9b:57:
7c:eb:3c:a2:e8:e2:ed:27:9e:59:4e:d6:ae:d1:ce:
c6:8a:86:6d:58:07:e2:d7:f4:5b:07:f7:19:8f:a7:
25:bd:a4:5c:f4:59:a9:92:3a:7f:17:08:09:16:9a:
4f:3b:ec:eb:36:12:60:76:71:e6:68:c9:7a:1a:97:
c2:d5:fc:1e:cd:0d:8f:1a:e1:eb:e0:c3:c2:9b:d1:
1a:0e:c4:6a:dd:d3:82:83:32:20:02:03:2c:c6:67:
45:f7:94:c9:20:5a:4d:0c:a9:cd:91:0a:5f:a2:a6:
ad:cd:b1:a3:5d:48:c9:bd:99:9f:c4:0a:03:2e:0b:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:9F:B6:81:F9:87:2D:FB:CA:48:8C:7B:A2:69:0E:2A:FE:0C:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D8204207F4011F0986F3EE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
91:06:34:00:51:57:49:ee:55:d8:f0:c1:f2:d4:37:26:f7:f9:
bb:97:63:16:6b:e1:01:05:72:ad:5a:2e:ea:1f:31:5a:61:a1:
e2:92:11:d1:b2:e4:b8:04:d2:cc:04:fb:a0:c7:0c:8a:29:4e:
2c:d9:d8:9b:5b:e5:4a:43:68:83:ab:70:03:9e:65:b8:90:cd:
0d:8a:5e:b0:63:cb:c0:b0:28:d7:38:e3:dc:0f:8a:ca:6e:ce:
35:21:91:7e:ef:17:bb:2e:ce:d4:75:79:12:28:93:a8:95:53:
cc:15:7f:f7:8c:e1:d6:6a:d6:4e:29:07:e3:01:c1:dd:ac:a6:
2f:86:b7:05:9c:b7:7f:ba:ba:80:b9:30:7b:a6:d7:16:77:ae:
bb:36:aa:35:16:79:23:52:67:45:10:90:07:b0:6f:41:06:c9:
11:f4:a4:6f:2b:2a:bf:2e:88:5a:f8:8c:24:5d:67:2b:3e:9e:
c6:3f:5f:7f:d4:dd:e4:fc:de:6a:4f:87:22:a4:44:f6:fa:47:
06:5b:30:7c:af:a4:21:8f:c0:c0:06:3b:91:a0:ec:27:a2:ff:
3c:de:8b:cb:58:41:19:d3:1d:35:9e:4c:46:89:5d:91:51:7d:
a8:c1:b5:7b:19:36:5b:d9:93:e6:bc:cd:06:8f:6f:e8:50:20:
b3:40:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:28 2025 by rpki-client