Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADBDAB7E79C211F08F6FFD80DAE4EC9C.roa
File: ADBDAB7E79C211F08F6FFD80DAE4EC9C.roa (raw, json)
Hash identifier: ERLABV8Y6evwz0F7oea2uc0SrqW6YaS3nzJmuP7ihLQ=
Subject key identifier: D1:A6:D1:28:41:21:65:74:D3:5A:7F:E5:E4:26:56:C3:BF:B4:77:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADBDAB7E79C211F08F6FFD80DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 10:29:10 +0000
ROA not before: Fri 15 Aug 2025 10:29:02 +0000
ROA not after: Thu 25 Sep 2025 10:29:02 +0000
asID: 61112
IP address blocks: 156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93002 (0x16b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 10:29:02 2025 GMT
Not After : Sep 25 10:29:02 2025 GMT
Subject: CN=689f0bf6-3780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:5a:0a:1c:5d:57:83:98:c6:3e:d8:27:81:
61:0d:35:79:f7:e3:15:2e:c9:60:a4:eb:cc:0d:61:
62:a5:7e:66:a5:a2:e5:d4:1f:3e:0f:6f:2d:13:55:
6a:74:53:53:28:66:3d:c7:6f:37:ad:c0:73:57:1d:
01:90:c5:9d:12:e7:fc:93:20:2b:71:3a:b5:bf:94:
19:9b:7d:97:f9:f0:dd:97:20:b1:30:57:dc:df:c1:
6f:b1:34:6c:84:95:a6:56:83:5d:56:e6:7e:37:ac:
94:93:ef:80:1a:1a:b4:0f:4d:74:ac:53:2e:1a:a9:
84:90:fe:da:68:25:3d:30:58:cb:b1:cb:33:8c:33:
c9:1b:43:7d:8b:00:e5:9f:83:b8:12:a2:68:72:07:
75:24:30:4f:17:65:b4:5d:b0:0b:be:1b:85:93:ab:
43:02:16:a3:f1:dd:9b:10:d6:f4:f4:9b:f3:26:c5:
8c:b1:aa:28:4a:a2:1d:64:e2:2f:66:23:0f:d0:b4:
84:71:ed:11:32:11:36:52:d5:d5:70:c4:0a:a5:06:
ac:0f:a2:21:a7:13:de:11:05:97:8e:c9:8f:7c:d9:
c8:f8:36:79:fc:72:f2:0b:6d:d0:8d:e9:23:9f:ce:
90:29:70:5a:c0:fe:de:f3:f4:0e:cc:64:c1:e5:2a:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:D1:28:41:21:65:74:D3:5A:7F:E5:E4:26:56:C3:BF:B4:77:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADBDAB7E79C211F08F6FFD80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
10:0a:8d:87:b0:bb:fc:1e:fe:0e:71:e2:9a:d6:7f:d3:15:d8:
9b:05:c5:90:a3:86:45:2c:b4:0e:f5:3c:3c:2b:47:8f:a1:23:
e5:c4:26:d0:42:98:07:47:16:35:2a:50:8d:8b:35:af:84:63:
a0:35:2b:2e:8e:cc:09:82:df:da:7c:d6:f4:48:b1:65:10:f9:
48:e6:3a:c0:6b:e3:13:2f:90:20:d4:5b:63:d7:5f:00:82:62:
05:b1:02:ef:50:fd:55:fa:18:c5:a3:53:f1:4a:0d:02:37:d5:
1a:8d:41:df:51:58:d2:9e:28:9d:c0:25:b2:92:84:35:47:a8:
c7:d8:8e:33:73:1a:07:b3:0b:3d:dd:6f:e7:3a:51:6d:cd:43:
b7:c4:23:0e:4b:89:d5:47:ed:e3:c7:5a:4e:3f:44:e3:2f:96:
52:92:c7:e6:d7:d7:f9:43:f9:72:99:9f:91:df:d4:6d:f1:b0:
ca:af:07:ed:ee:df:af:41:89:63:74:2c:bb:ed:2b:52:72:81:
64:2a:0a:d8:01:c2:f9:9b:35:ab:95:46:69:5e:61:fa:91:dc:
1c:60:ba:4f:b5:08:dc:66:eb:13:2e:70:1a:de:40:28:17:0e:
73:3d:c1:1c:bb:47:49:7b:91:9c:f0:63:37:16:7a:77:9a:f1:
3d:32:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:58:33 2025 by rpki-client