Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8098D7E79AD11F0AC79887ADAE4EC9C.roa
File: B8098D7E79AD11F0AC79887ADAE4EC9C.roa (raw, json)
Hash identifier: p1PwTJgDZWBLSTINenQCdk/Z5p/fM/9RZ5W6pqDhCHk=
Subject key identifier: B4:70:DE:FB:1A:BB:BA:F2:A7:7F:56:2A:C1:CB:09:61:D4:92:1F:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8098D7E79AD11F0AC79887ADAE4EC9C.roa
Signing time: Fri 15 Aug 2025 07:59:08 +0000
ROA not before: Fri 15 Aug 2025 07:59:03 +0000
ROA not after: Tue 16 Sep 2025 07:59:03 +0000
asID: 58879
IP address blocks: 156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92960 (0x16b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 07:59:03 2025 GMT
Not After : Sep 16 07:59:03 2025 GMT
Subject: CN=689ee8cb-f1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:04:b8:a4:2e:f7:24:46:11:96:33:f3:00:
04:60:84:50:d9:9c:47:b7:c8:3a:54:2e:ce:93:da:
34:09:c3:bc:e3:f6:e7:b6:cd:41:3f:38:0f:06:08:
b1:c5:6b:09:5d:d6:0e:bc:f9:cd:cd:a4:86:34:fa:
62:55:7c:11:e9:ce:98:36:ff:fe:d3:cb:77:f3:47:
99:45:96:26:a9:9a:b7:87:b8:18:b2:f0:c2:57:f8:
0b:58:e7:7e:9b:98:85:a2:8a:bb:c2:89:33:38:9c:
ca:38:d2:0a:68:7d:1e:eb:fc:a0:b3:ec:7b:65:c8:
c7:01:8c:20:8e:8a:15:8a:44:03:a5:3c:33:5c:45:
62:42:6a:7c:86:72:ee:55:f8:28:52:7e:52:e7:c7:
27:38:ae:7a:7a:27:95:02:2a:5d:28:c2:4e:5f:26:
4e:6a:df:9e:12:9c:16:c6:a6:f0:47:d1:21:15:53:
93:77:d0:85:3e:d4:a2:82:9e:17:a0:05:42:e2:38:
70:7b:97:01:67:6e:01:a0:e0:66:45:d1:7b:5f:4a:
d8:34:ce:a2:4b:b5:8b:95:40:7b:1d:9e:49:30:c5:
fe:cd:c6:5c:cd:49:56:6e:1a:77:84:11:ff:02:fc:
82:17:2f:cb:8e:e3:f0:ea:2d:6f:f5:3f:e2:56:f4:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:DE:FB:1A:BB:BA:F2:A7:7F:56:2A:C1:CB:09:61:D4:92:1F:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8098D7E79AD11F0AC79887ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
26:c4:dc:51:82:26:ff:ed:01:f1:fa:1a:21:7c:66:6a:a7:7d:
e8:cb:44:83:e5:b7:37:7a:5c:b0:f0:84:d4:0f:3f:1b:08:03:
4d:15:a6:4d:bf:e2:3f:9f:4d:d2:be:47:6e:e0:0b:b5:54:99:
be:66:10:40:05:8b:3a:73:21:e0:f6:0f:04:8a:10:ef:67:ef:
02:79:4e:48:09:cb:2f:c2:71:83:5a:ed:40:49:68:30:f8:3e:
3d:c3:ea:53:ca:40:9f:d3:93:06:97:0a:45:b7:3a:bd:56:10:
a3:77:07:eb:2c:84:c8:bf:18:a6:c3:e8:16:cd:be:30:6a:5b:
30:02:b8:38:17:51:8f:36:1a:61:b0:7e:b6:98:76:d2:7d:fe:
33:1f:f0:c4:9d:22:e2:e9:72:e2:af:19:17:ab:d3:2d:dc:da:
1b:20:74:86:00:19:29:47:99:98:49:41:e1:95:88:c7:c9:9e:
fa:77:81:46:3d:4e:bf:0d:4c:f3:a3:41:83:14:5b:10:03:a3:
d1:f5:cf:bd:96:fe:ed:15:7a:78:f4:d9:c8:68:5c:b0:19:7b:
e8:62:26:9c:1c:b9:8a:12:fb:5c:e6:a2:8f:67:90:6e:33:f5:
25:1f:b7:83:ed:18:d7:90:79:1a:b8:51:67:c7:29:ce:3a:2d:
ef:d3:27:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:33 2025 by rpki-client