Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC0839307AC211F0BB5E487BDAE4EC9C.roa
File: DC0839307AC211F0BB5E487BDAE4EC9C.roa (raw, json)
Hash identifier: 2Ru9tUhnD5KK1m7X6wtzSV78QpSpARjatioxKwSZ4sE=
Subject key identifier: 5F:3C:38:53:CD:FC:7D:C5:B8:1F:53:14:9D:03:95:F7:8E:07:87:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC0839307AC211F0BB5E487BDAE4EC9C.roa
Signing time: Sat 16 Aug 2025 17:02:59 +0000
ROA not before: Sat 16 Aug 2025 17:02:54 +0000
ROA not after: Sat 27 Sep 2025 17:02:54 +0000
asID: 133731
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93035 (0x16b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 17:02:54 2025 GMT
Not After : Sep 27 17:02:54 2025 GMT
Subject: CN=68a0b9c2-6519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:ac:27:7b:fd:04:c1:e2:c4:b9:ae:6a:66:
a8:24:90:af:7e:86:e9:c9:8a:19:ca:c3:44:6c:17:
44:c7:38:a1:e0:c6:77:30:78:e1:80:04:51:b1:1c:
26:c9:1c:f8:c5:8e:3a:e1:b1:9f:bf:3c:f4:2b:80:
c3:18:6e:91:09:b1:f8:4d:05:82:7f:40:d9:c2:42:
bd:3c:86:8a:0d:e3:59:98:21:23:d9:0b:20:a7:c9:
7e:1c:00:b8:e2:1a:fd:c5:f6:70:be:7d:a1:e3:e2:
2b:3b:9e:ec:9c:ea:a1:d4:ee:85:55:5c:98:d9:34:
88:96:ef:7d:35:2b:a5:f2:01:aa:6c:fc:46:b4:43:
bc:3c:06:f0:09:1f:5d:3a:75:0b:8d:15:64:f0:51:
30:db:77:9a:43:e1:0b:d0:74:d3:4a:25:0b:25:51:
cf:c0:0a:36:d8:b7:b8:77:d9:08:ff:59:ea:d4:cd:
3a:68:11:08:ff:c3:83:f7:61:47:37:40:f1:94:5d:
0f:da:3c:dd:39:b2:4c:e9:b8:62:79:bf:76:a0:7a:
a0:9e:e7:56:b1:94:42:4f:dc:4a:d3:97:ed:13:e9:
03:32:7d:02:3e:0c:34:70:ce:8c:97:32:84:ca:e3:
0c:13:ce:47:be:56:03:e6:01:1c:dd:7e:57:8f:df:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3C:38:53:CD:FC:7D:C5:B8:1F:53:14:9D:03:95:F7:8E:07:87:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC0839307AC211F0BB5E487BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9e:4b:d4:90:78:31:5f:9f:e0:33:1b:13:a8:bf:b1:10:f0:
7d:ba:c4:60:51:fd:7b:f4:ba:bf:ec:4f:61:4d:64:8a:cb:da:
cd:86:d7:a2:19:e2:85:04:03:e9:06:7c:39:d9:58:5a:e4:12:
55:4f:eb:d7:da:e8:b8:43:56:bd:1d:a3:9c:07:93:3b:8f:f8:
ef:67:ef:77:b1:47:2d:8d:93:be:3e:ca:cd:15:65:78:c3:b7:
ac:90:01:42:61:52:a2:c6:e9:7b:45:cc:3a:8a:84:6c:5c:fe:
c9:28:3f:e6:75:8f:bd:81:63:3e:b7:9d:a7:cc:9a:68:03:32:
6d:51:f8:1a:3b:c0:a4:5b:70:81:de:20:65:3a:4f:a6:cc:86:
cb:07:85:b0:20:d4:21:84:ba:5e:2f:56:93:8a:04:b4:d5:5a:
6f:3f:f6:67:9b:c3:69:ea:0e:98:2e:3f:73:7e:bf:cc:8e:ae:
bf:cd:92:55:2c:14:d0:39:d9:5c:32:d5:58:9a:f5:ae:40:5a:
75:4f:40:f7:42:b7:5d:7e:46:57:e2:63:90:9a:d7:b7:64:e6:
99:50:45:84:d0:8c:e2:19:2a:ac:66:0e:cc:c2:4e:4d:d9:e4:
d3:4f:c7:ff:26:9f:4d:21:ac:15:1c:78:c0:11:b8:fa:b8:f4:
4d:31:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:58:22 2025 by rpki-client