Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5A40012782A11F0BBA07399DAE4EC9C.roa
File: A5A40012782A11F0BBA07399DAE4EC9C.roa (raw, json)
Hash identifier: dyvmlBniV22C/PaBEyleCfZhjROyR194DmUEAFlkNqQ=
Subject key identifier: 66:11:DB:0D:A6:4D:C0:0F:13:D4:C2:F6:1E:63:0E:34:3E:3F:6F:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016AB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5A40012782A11F0BBA07399DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 09:48:21 +0000
ROA not before: Wed 13 Aug 2025 09:48:17 +0000
ROA not after: Fri 19 Sep 2025 09:48:17 +0000
asID: 53835
IP address blocks: 156.231.104.0/24 maxlen: 24
156.245.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92849 (0x16ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 09:48:17 2025 GMT
Not After : Sep 19 09:48:17 2025 GMT
Subject: CN=689c5f65-d29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:27:50:d5:3b:8f:dd:c1:b9:6c:a0:c7:10:
32:7e:75:ca:15:2b:83:3a:84:ae:36:ea:96:e3:b9:
72:35:67:3f:b7:7d:35:83:9d:79:37:bc:eb:b7:bc:
22:cb:1d:f4:30:79:b9:45:b4:f9:10:75:74:3e:d4:
c5:c2:03:b4:64:47:08:ed:40:77:63:61:ba:8f:0d:
05:6b:e3:15:da:fd:e8:94:c5:f6:95:ae:5a:2f:15:
a8:48:dc:86:b4:7a:e3:eb:67:89:15:0b:7e:e9:ac:
df:5d:da:09:11:35:2c:33:41:3c:2d:a5:5a:f3:7f:
e7:00:8c:e5:79:05:6a:d2:38:48:40:d6:30:6d:a1:
a2:ff:f3:ad:71:88:0f:d8:77:6b:26:98:e4:32:90:
02:60:52:9c:91:d8:02:77:97:75:ea:f4:42:8c:4a:
20:12:8b:7f:eb:3a:b1:4b:06:47:ba:e1:4c:36:21:
18:68:b9:dd:fe:3d:df:d6:40:b8:37:6d:f1:b6:f1:
2e:b7:78:0f:d2:98:17:fc:cd:78:8e:5d:ae:43:25:
5d:1e:46:38:97:88:d1:c6:ef:a6:35:e9:35:a6:80:
2a:82:22:46:44:9d:65:39:f5:1f:82:84:2b:78:01:
d6:f1:a2:b8:57:e2:91:cd:d8:59:e9:85:4f:d2:e3:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:DB:0D:A6:4D:C0:0F:13:D4:C2:F6:1E:63:0E:34:3E:3F:6F:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5A40012782A11F0BBA07399DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.104.0/24
156.245.190.0/24
Signature Algorithm: sha256WithRSAEncryption
57:59:bb:a1:42:60:56:3a:08:92:14:19:d2:de:88:22:06:3b:
ba:fd:99:bb:77:73:ae:eb:11:55:0a:e7:6c:8a:1d:24:e6:68:
71:2e:03:fb:5b:0b:8b:6f:e8:69:01:cb:db:de:40:32:f3:f5:
d1:9b:bb:cf:d5:1b:f0:e6:87:de:d0:99:81:8c:05:5c:34:c5:
f1:c9:5e:05:a3:0d:4a:66:e6:5a:a1:97:00:c5:5d:61:f1:e1:
73:98:58:6b:18:91:22:74:20:be:cd:42:93:62:87:c3:60:5c:
43:15:7c:f9:39:50:f9:3e:d2:15:63:a8:cc:af:8e:23:8e:ad:
23:31:7b:b7:19:4a:5e:c0:3b:6e:17:7d:1f:c4:11:56:c0:15:
68:60:85:33:74:0e:0b:9b:89:bb:fc:50:fd:65:a2:0c:0d:4d:
58:1e:fe:4e:cd:48:41:0f:a1:f6:25:bc:75:f9:92:3c:dd:13:
f9:63:49:01:02:cd:0a:46:c1:3c:6d:c7:73:0e:a4:af:93:1f:
03:9b:90:9b:7c:a4:75:49:7c:6a:c3:27:60:6b:88:58:3f:24:
d7:32:7a:1a:d3:97:1f:ac:9e:63:8f:f7:02:a4:45:1f:13:3c:
d9:5f:2c:82:4b:4d:0e:80:9b:9a:e1:f1:63:55:8c:6d:73:0c:
00:84:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:13:18 2025 by rpki-client