Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E26DFF027AC311F0A0D9E083DAE4EC9C.roa
File: E26DFF027AC311F0A0D9E083DAE4EC9C.roa (raw, json)
Hash identifier: Dbpp3/ITS8gcWA+51n81xzGTtsPvWTcxCO3+G/+bZDE=
Subject key identifier: A6:4C:8D:74:CD:C7:8F:E1:8F:73:A8:77:F8:72:37:7F:67:0F:D6:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E26DFF027AC311F0A0D9E083DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 17:10:19 +0000
ROA not before: Sat 16 Aug 2025 17:10:13 +0000
ROA not after: Sat 27 Sep 2025 17:10:13 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93037 (0x16b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 16 17:10:13 2025 GMT
Not After : Sep 27 17:10:13 2025 GMT
Subject: CN=68a0bb7b-db65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:ff:46:5b:f4:5c:db:c0:c7:d2:23:3d:49:
46:82:0a:e2:84:cd:22:b8:e8:3b:b0:f2:77:8a:49:
38:91:84:06:21:0d:a7:da:e4:bf:e2:49:2b:84:75:
ba:1a:98:6e:22:9e:91:d4:20:5b:1b:23:07:38:e7:
ec:b8:61:29:ce:4a:fe:01:e1:93:e6:1e:ff:5d:43:
eb:dc:17:29:f4:be:38:90:fa:4f:b4:27:5d:81:41:
d1:c0:04:e9:79:74:85:16:b5:94:cc:21:0a:71:3c:
eb:d1:3e:96:d0:0d:53:92:c4:71:e6:0e:07:f6:2e:
ff:71:0b:27:14:70:66:41:ce:e0:21:27:3f:d8:5e:
59:5a:a7:f4:a5:5a:96:b7:87:5a:a3:a9:53:b4:c1:
5f:28:14:7e:30:cc:51:81:9b:d7:c0:62:47:aa:fc:
a8:4d:9c:b1:60:eb:dd:b9:f0:5e:cb:b6:de:e0:c1:
bf:c1:b1:00:fc:2b:7b:7b:51:c1:a0:87:68:2c:29:
4e:76:70:9e:98:08:15:4e:d3:94:56:8f:02:f1:eb:
b5:09:e0:ec:dd:77:51:86:e6:fc:ba:26:28:9c:8a:
af:f6:70:a1:f6:2e:2d:d8:d8:ac:54:2b:8c:35:0a:
8d:22:f8:89:08:7e:9a:6d:58:b6:a1:d8:5b:57:4c:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:8D:74:CD:C7:8F:E1:8F:73:A8:77:F8:72:37:7F:67:0F:D6:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E26DFF027AC311F0A0D9E083DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d4:66:2d:d2:38:4d:b8:87:c4:bb:1d:ee:ba:fd:2b:1c:d3:
1f:ef:a8:ab:3d:16:c5:a5:0d:c1:f6:33:90:73:58:31:db:67:
94:21:40:0a:84:ed:e1:89:43:e4:76:ea:64:a6:3d:b8:e5:d1:
46:b5:08:08:0a:a6:e6:b0:c1:db:4d:79:d9:64:0d:f9:1d:a5:
dd:18:5d:dd:fa:e1:84:98:61:30:f3:fe:8f:c1:62:a5:58:61:
b0:60:85:56:f6:14:ee:7a:1f:ba:9b:81:92:d9:5a:6f:93:bc:
16:05:83:f7:96:00:66:dd:98:f7:fb:6c:5e:f5:1b:fc:f2:8b:
0f:7a:21:7a:69:8d:20:5b:4f:cb:2a:b4:36:f1:2b:0a:1f:b3:
4a:21:60:d2:a6:50:5c:ff:2d:ba:32:cd:8d:78:d7:47:32:36:
a4:8f:e7:b2:c4:79:0a:2a:78:2c:03:1c:a3:80:52:9b:01:38:
4a:75:8d:b1:95:2b:fd:92:17:c4:92:48:7a:ed:13:bc:8f:c3:
cb:68:f4:36:8c:09:dc:d0:99:e6:98:f0:42:02:20:91:40:c5:
89:c4:3c:1b:c1:0a:45:27:6c:81:86:e3:ed:2c:7e:47:7d:f7:
8e:e3:aa:b4:6c:e2:f3:52:51:61:9d:b9:6d:b2:7b:bb:04:0e:
39:dd:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:42 2025 by rpki-client