Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05EC7947C1B11F09DFE15CEDAE4EC9C.roa
File: C05EC7947C1B11F09DFE15CEDAE4EC9C.roa (raw, json)
Hash identifier: 5p/oc7hZUL5Aeji4Oanl+VSdb6ys7n7TsQIrIws98VY=
Subject key identifier: 88:57:63:0F:E1:48:63:52:0C:AC:6C:18:38:95:22:8D:9A:40:B7:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05EC7947C1B11F09DFE15CEDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 10:11:48 +0000
ROA not before: Mon 18 Aug 2025 10:11:44 +0000
ROA not after: Fri 03 Oct 2025 10:11:44 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93128 (0x16bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 10:11:44 2025 GMT
Not After : Oct 3 10:11:44 2025 GMT
Subject: CN=68a2fc64-2566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:b8:a9:6d:fc:30:de:a2:c8:7e:13:94:60:
1a:04:d7:c5:74:05:00:e7:05:e4:41:17:03:d3:af:
a9:03:09:b9:7e:42:db:5b:3d:7f:45:b6:82:5c:cb:
e5:9b:c7:ba:40:3c:79:06:64:bf:bd:ee:2b:aa:29:
54:8f:9e:93:a6:9c:da:27:be:31:f1:06:9a:8c:9b:
6e:8d:8c:b3:35:b2:a1:97:67:b6:f8:08:af:08:e3:
81:76:fb:fd:63:22:13:3b:d9:40:27:f0:c1:6d:b8:
d8:8c:c4:59:8f:3d:47:e1:ee:82:f5:d6:39:b7:f4:
9e:fb:6b:a9:f6:7d:e4:1e:3b:07:80:9a:ad:a5:d2:
7b:f8:bf:d0:a2:65:ea:3a:33:e5:49:67:de:ed:8f:
10:7b:fc:79:af:e3:aa:33:90:9c:6e:3e:46:bd:e9:
31:cb:0e:5d:ca:86:bb:6a:3c:8f:25:b0:14:7d:65:
79:9a:6a:b0:a8:ac:36:a3:55:58:3e:63:29:b3:15:
63:3e:14:9e:7b:ff:5a:09:46:ab:db:1a:91:c9:d4:
08:25:c1:16:cb:7f:8f:f1:1c:bd:2a:c5:80:8d:a9:
c1:b6:b3:a4:e6:0c:ee:fb:07:82:c1:f6:cd:5e:24:
63:5b:a1:70:fb:ca:ce:5a:e9:5f:1e:c9:87:08:34:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:63:0F:E1:48:63:52:0C:AC:6C:18:38:95:22:8D:9A:40:B7:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05EC7947C1B11F09DFE15CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:3e:9c:e1:7a:4b:ab:8b:e4:c0:f0:59:1e:bb:fd:bc:43:51:
4a:20:51:07:e7:36:13:44:9d:39:18:3d:8f:fb:f9:fd:3c:46:
ed:5e:10:71:6c:52:66:da:da:60:54:38:3d:27:8a:c0:3d:80:
ea:e4:00:c2:1b:e2:41:23:5c:1e:fa:4e:81:97:86:d5:65:4a:
88:9e:e8:36:fa:d4:4a:89:c3:01:8d:bb:6c:e9:ce:42:56:a3:
b1:5b:48:df:a3:7d:c1:f2:3c:2f:fe:5e:ea:87:7d:a9:1a:3a:
e2:1b:7f:30:59:c8:cf:15:2b:1d:e9:41:59:01:1e:71:48:92:
18:2f:0b:a9:88:32:34:f6:a1:31:ed:2a:1b:a6:86:0c:9d:04:
e1:e7:4b:46:d1:6f:6e:9c:b2:85:01:18:d8:b1:f0:85:dd:79:
5c:63:fb:18:6b:d9:70:41:90:48:8a:57:68:78:26:a6:11:a6:
69:67:58:4b:43:a6:d6:62:99:62:a2:6c:43:cc:a1:ad:7c:46:
06:26:4f:2c:e8:21:6d:f7:0f:4c:e6:cc:c3:5b:f1:13:1c:9b:
e2:0a:a8:6a:37:84:66:95:98:32:06:b8:2a:39:f1:76:b6:c1:
93:7a:b3:2f:8d:ce:10:c2:ac:4c:ea:fc:08:a7:6b:98:73:4c:
11:03:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:47 2025 by rpki-client