Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C86FE37E7ACB11F0841026B4DAE4EC9C.roa
File: C86FE37E7ACB11F0841026B4DAE4EC9C.roa (raw, json)
Hash identifier: z7GG8rRgTjDwVUV532pgxo17YyI6vrGZi751jaCzCcc=
Subject key identifier: 5A:AB:B2:C6:C8:4A:9F:7B:19:57:93:E8:A1:6B:D7:09:C6:12:E3:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C86FE37E7ACB11F0841026B4DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:06:51 +0000
ROA not before: Sat 16 Aug 2025 18:06:46 +0000
ROA not after: Sat 04 Oct 2025 18:06:46 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93061 (0x16b85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 18:06:46 2025 GMT
Not After : Oct 4 18:06:46 2025 GMT
Subject: CN=68a0c8bb-7b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:3b:5c:87:36:f7:4a:82:5a:46:d4:a2:82:
87:01:1c:55:8d:b1:8b:15:1c:63:7f:7c:8a:36:de:
03:2b:83:81:ea:ae:bf:27:2f:85:7d:d3:b6:97:b4:
90:b6:eb:1e:ce:c4:b1:0c:e0:de:d9:46:ea:35:c7:
87:48:39:b3:6a:10:be:cf:32:de:49:1a:ee:1a:1c:
23:b3:2c:6c:25:99:e1:fd:a7:8f:46:68:ec:4c:d0:
9b:e3:af:fb:ba:d1:34:4f:e9:49:18:3c:63:02:c5:
e3:a4:ee:5c:dd:55:40:14:21:0b:e3:79:fe:6d:81:
9d:f2:79:e7:42:e8:36:77:7e:99:10:4c:2d:8b:45:
7e:f5:42:ab:06:0b:ed:f6:c8:cf:c6:0e:e0:8a:24:
0c:89:61:8b:7d:5c:c1:a9:4e:3a:8b:cb:d5:ab:8a:
e8:c4:92:d6:8c:a6:0b:ea:fb:4d:c0:7f:da:60:03:
9d:a5:f0:ae:3b:5d:9c:1c:e1:5d:9a:21:11:a2:b4:
84:75:54:f6:37:36:9d:59:69:d1:e9:df:80:32:e6:
2b:6b:d2:0b:17:a8:d0:b4:d7:70:47:6f:8e:62:b1:
84:1e:70:12:77:e7:12:21:c9:0d:00:89:1d:b2:e2:
84:00:61:39:1e:40:bc:f9:37:32:f7:9c:b3:56:78:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:B2:C6:C8:4A:9F:7B:19:57:93:E8:A1:6B:D7:09:C6:12:E3:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C86FE37E7ACB11F0841026B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ec:82:94:69:5a:a6:d2:93:b7:3b:fa:43:de:4d:71:ff:8b:
f6:f5:06:8a:c1:98:a4:30:4c:7d:cd:21:3a:9b:ea:bd:bc:45:
1a:db:e4:87:0b:2d:3e:24:e6:b4:5c:49:0b:d3:02:a3:7c:d3:
b6:5a:76:ec:94:3b:87:ca:72:80:a3:5f:06:07:c1:f2:83:94:
46:fe:bd:f5:0f:2f:ee:27:fb:ea:41:d9:00:e3:2f:20:cf:23:
82:c8:7a:ab:59:e4:e8:e3:2a:64:2e:43:b6:62:2b:93:9a:7f:
d2:72:3a:2e:d4:28:2e:ee:a4:9b:7e:9f:c8:d4:42:aa:57:09:
78:00:04:83:73:ca:6e:51:88:bd:ba:59:be:f8:8a:f1:6d:78:
7b:d1:6f:14:e5:1c:6e:34:bb:5d:3d:d0:a9:0f:32:4d:8e:5a:
b4:58:b6:30:1e:e5:53:4f:1e:d6:28:3f:84:08:a3:06:69:4b:
91:ee:96:9d:3a:54:69:14:a3:91:cc:6a:f4:47:48:27:1e:a5:
5a:51:c3:4f:4a:19:6f:e1:95:a4:74:5a:4e:12:e1:76:d0:ee:
59:5e:1d:0a:f6:28:ec:64:02:fd:29:d6:da:47:2e:f0:db:c7:
88:ca:ce:70:e9:39:e6:a6:7f:fe:d6:14:7c:4f:bf:f8:7e:e4:
19:8a:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:13 2025 by rpki-client