Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C400A95E7C1F11F0AE2896E9DAE4EC9C.roa
File: C400A95E7C1F11F0AE2896E9DAE4EC9C.roa (raw, json)
Hash identifier: sp7OIxk2//PFfQoFCq13ruedD6VJnrFF7jrPdPwJnKU=
Subject key identifier: 59:B4:A9:61:99:6B:5C:34:E5:83:4C:F5:47:37:78:8D:56:D4:B4:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C400A95E7C1F11F0AE2896E9DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 10:40:33 +0000
ROA not before: Mon 18 Aug 2025 10:40:28 +0000
ROA not after: Fri 03 Oct 2025 10:40:28 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93149 (0x16bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 10:40:28 2025 GMT
Not After : Oct 3 10:40:28 2025 GMT
Subject: CN=68a30320-88f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:11:6a:8f:c7:e1:75:76:97:cd:94:6b:ae:5c:
de:21:45:a4:2f:4f:d6:88:b3:81:55:24:c4:8f:2e:
a2:8f:13:76:dc:1d:2e:fb:ac:d2:d6:70:4e:1e:d2:
41:7b:c1:c3:58:aa:b2:ab:0f:fd:c1:57:3d:a1:96:
e5:aa:2d:6b:dd:be:76:db:ac:94:64:dc:37:f5:4d:
12:91:80:21:e4:89:9f:e4:a1:6f:53:8b:1d:c5:0f:
26:e2:f5:6b:a7:ad:10:bc:59:71:99:9e:69:18:0f:
4f:fd:1c:ed:83:85:09:29:96:8b:5f:d3:68:c0:ed:
a4:ed:27:ae:b5:65:62:39:32:a1:22:3d:fd:4a:bd:
81:20:f9:a0:8b:82:4d:4b:ba:06:95:6d:c7:ba:b6:
86:c4:42:96:11:66:83:4c:78:fc:22:c7:e1:ba:64:
cf:d4:92:6d:a9:05:c6:3d:f8:be:73:de:3f:a5:b9:
a7:d5:37:a2:82:08:8a:3f:80:8d:9d:f5:49:64:05:
0f:32:75:c4:0f:9c:4e:6f:99:d9:df:3a:fe:5b:ad:
75:f9:d8:98:cf:41:39:c6:22:37:93:39:71:a1:a2:
dc:f7:3c:ca:75:54:78:08:71:42:a0:65:9a:1d:b2:
6c:cc:f1:47:a8:90:07:b9:a0:2f:65:73:66:82:10:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:A9:61:99:6B:5C:34:E5:83:4C:F5:47:37:78:8D:56:D4:B4:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C400A95E7C1F11F0AE2896E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:a2:13:17:60:bf:9f:b1:b8:ec:98:be:08:da:88:80:9e:4b:
df:b5:ba:78:c2:fe:26:93:fb:7a:7e:75:5c:57:20:e1:e6:05:
f8:fc:53:03:6a:56:a0:3c:82:39:91:0f:4b:a1:de:67:fa:6a:
b6:ff:6f:fe:86:53:ef:dc:88:da:f6:24:b3:88:8c:42:12:6b:
ab:79:07:e4:7a:0c:9b:ee:64:1c:37:93:4a:49:ca:d3:37:ef:
c3:43:d7:c2:88:5e:94:8b:17:4f:3c:45:13:46:3c:b4:70:be:
b7:00:05:ae:44:b9:cd:01:e7:15:a1:81:a2:1f:bc:65:ee:80:
b7:f1:22:92:67:b8:9e:f8:41:00:1d:9b:44:27:bd:2d:9f:7d:
34:b8:ce:f9:3e:57:7f:3e:1c:16:69:17:a4:9a:97:8f:29:ac:
0b:60:4c:96:5f:7a:ab:60:3a:a3:d1:9f:d5:0c:68:aa:5a:3b:
78:07:a5:95:d3:a7:28:68:ae:d1:a2:11:30:47:d7:b1:00:35:
fc:df:40:2e:db:32:df:1e:1e:38:aa:0d:0f:eb:12:38:51:20:
ce:28:b3:5b:4a:b5:8a:e4:00:4f:fe:f1:63:e7:a2:8a:e3:45:
00:03:fa:c2:4f:22:bc:9c:f4:ed:43:ef:40:44:80:8f:54:6e:
f9:6b:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:25:02 2025 by rpki-client