Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCFE2CD87AD511F09BCC7AF6DAE4EC9C.roa
File: DCFE2CD87AD511F09BCC7AF6DAE4EC9C.roa (raw, json)
Hash identifier: joioCHnq8KTYRpgk0b3n6KFIfjYX9VySUXQdoyYG+Q8=
Subject key identifier: 94:9D:5A:6F:AF:1A:EE:14:54:4F:09:38:98:8B:19:EB:3E:60:1F:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016BAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCFE2CD87AD511F09BCC7AF6DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 19:19:01 +0000
ROA not before: Sat 16 Aug 2025 19:18:56 +0000
ROA not after: Mon 25 Aug 2025 19:18:56 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93098 (0x16baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 19:18:56 2025 GMT
Not After : Aug 25 19:18:56 2025 GMT
Subject: CN=68a0d9a5-1df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:29:da:42:48:8d:c4:60:64:b3:d7:68:62:
15:63:55:9c:16:a3:24:4c:4a:e4:4e:83:c0:50:3d:
56:b6:75:be:3a:c7:57:b8:94:a5:cc:c6:6e:28:d0:
a8:aa:e3:db:92:3b:37:11:56:b1:a1:28:87:e1:0a:
e0:a8:c8:0c:e2:32:83:3a:11:f4:4a:82:38:7f:6d:
1e:e7:8c:3a:ea:8d:28:f0:11:ec:0b:75:8c:f3:37:
23:02:e0:9c:38:5d:e2:a4:95:ab:c9:9b:67:7f:06:
ae:6d:77:75:1b:49:2d:ee:b0:61:55:e7:95:ea:e8:
10:ee:57:c9:62:cf:49:7c:b0:dc:68:26:09:06:c2:
6a:dd:f4:7f:34:34:c0:9a:77:86:6a:27:cc:ba:75:
60:78:99:e3:0d:57:72:19:d3:56:ac:dd:6c:38:16:
97:42:3b:16:8d:df:eb:13:9e:ba:30:4b:05:0d:23:
42:96:40:2a:ef:77:62:53:09:61:61:d5:92:a8:d7:
a8:9b:28:60:db:20:7d:61:b0:be:28:c1:07:1e:df:
d9:09:ca:fc:9a:8e:1f:9e:e0:c0:e9:46:9f:33:7f:
95:7b:51:81:f0:87:a2:da:77:63:fc:0d:4b:b4:fa:
a5:b8:e6:e8:2d:e5:ab:78:39:72:d0:ae:71:30:b6:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:5A:6F:AF:1A:EE:14:54:4F:09:38:98:8B:19:EB:3E:60:1F:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCFE2CD87AD511F09BCC7AF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cc:18:19:f5:b2:22:65:d4:68:46:6f:02:53:b4:90:f4:b2:
ac:06:38:39:b2:87:b2:c8:bb:ab:4d:78:7d:58:12:a7:31:67:
20:9e:6e:ee:f2:95:eb:29:59:9f:cf:8f:44:a1:05:ff:91:8c:
b3:c8:3e:4d:d8:42:07:c6:a9:f8:59:ee:67:fc:04:b2:aa:aa:
9b:a8:43:69:cc:db:0a:f7:4f:0a:7e:c8:50:8c:ca:07:1e:d4:
e2:c0:04:82:51:63:67:a9:33:db:b5:06:c3:91:6b:3c:b7:62:
57:e1:e8:5f:a0:02:e0:41:d1:9b:1c:88:4b:9b:0e:cf:da:39:
73:b2:ea:c9:31:5b:bc:21:1a:4c:40:18:bc:b3:bb:1b:3d:39:
14:c8:16:82:86:b3:11:6c:10:69:f0:ca:78:0f:d5:83:4e:7f:
40:89:c6:1d:de:54:ba:c6:66:95:2a:fe:c9:a7:8c:55:2f:e2:
83:eb:13:3e:ef:ea:c0:16:cf:b1:bb:db:4f:5a:5a:35:23:a3:
94:cf:1c:8f:39:7f:bb:1f:64:8d:68:13:06:48:c2:43:06:a4:
84:77:48:7a:0c:60:48:4f:82:a0:d3:f3:81:ed:59:7c:9d:57:
2d:94:cb:01:7c:55:ed:66:dd:df:71:1f:d2:6c:85:ab:2f:20:
51:6f:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:23 2025 by rpki-client