Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5959EF27F4511F099C70690DAE4EC9C.roa
File: E5959EF27F4511F099C70690DAE4EC9C.roa (raw, json)
Hash identifier: kYp9LsvcUM7EuLQb4PESVDGl7T+mxnUu1Xyhrfku37w=
Subject key identifier: 46:72:7B:36:F2:3E:6C:99:D4:C4:3E:A4:21:02:8E:38:CA:D6:C6:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016EB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5959EF27F4511F099C70690DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 10:51:03 +0000
ROA not before: Fri 22 Aug 2025 10:50:59 +0000
ROA not after: Sun 28 Sep 2025 10:50:59 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93878 (0x16eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 10:50:59 2025 GMT
Not After : Sep 28 10:50:59 2025 GMT
Subject: CN=68a84b97-49e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:3a:0e:14:6f:7a:8a:11:7d:48:9b:35:dd:
db:52:50:8c:9d:b7:80:ff:54:40:61:d3:1e:ed:2a:
7d:b4:98:8d:84:ac:31:fe:c4:eb:43:f9:65:bc:df:
18:40:2b:be:e6:06:6e:1d:bb:7d:1f:e9:32:33:7f:
fa:a4:93:5c:d5:cf:ee:0e:6b:69:29:81:7c:f2:33:
e4:83:33:36:59:6d:50:1a:f0:74:33:9d:ac:14:c7:
78:3b:08:db:b5:26:2f:b7:af:07:af:09:2c:0f:f0:
62:cd:4d:33:ec:14:a6:9d:4d:c1:83:96:05:df:18:
de:02:65:72:1c:23:de:d1:42:c6:cb:20:cd:c0:f5:
61:e5:af:32:60:b5:28:e5:fc:d8:8a:47:78:63:de:
ed:8e:ab:5d:e4:6b:29:67:2d:f2:77:1b:46:31:d8:
c9:fd:93:c0:e0:61:53:a6:19:18:9e:0f:cc:0f:63:
31:63:5b:3d:96:62:c6:b9:39:18:db:aa:68:77:6a:
2c:44:ff:12:ec:77:aa:9d:0f:9c:05:ec:73:f4:9a:
22:75:7f:31:8a:04:6c:b1:16:17:22:e9:8b:f6:c6:
89:40:ab:9c:43:0e:3e:96:82:6b:15:c9:e0:26:aa:
2c:35:26:29:68:29:93:9a:d3:49:8a:30:5f:fb:76:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:7B:36:F2:3E:6C:99:D4:C4:3E:A4:21:02:8E:38:CA:D6:C6:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5959EF27F4511F099C70690DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
0e:bb:f3:d1:45:f1:5a:d9:9f:f0:0b:c4:96:15:a7:b2:90:d1:
bc:99:17:ba:56:99:7d:c4:f7:ca:b1:ae:91:07:81:ad:5d:92:
c8:c9:61:d4:6f:0f:c3:05:ca:df:65:bf:7c:9f:62:99:4c:21:
6f:20:53:8c:9a:77:ff:95:4a:ac:91:01:28:72:5a:fb:ba:01:
5c:b7:de:af:08:21:fb:43:18:5f:ad:e5:51:ac:46:95:e6:b6:
c8:46:59:6b:65:26:af:83:d4:c2:ee:00:8d:b6:f8:d3:54:73:
73:ef:a5:40:d6:ff:2d:9d:6e:30:f8:48:34:f1:7c:27:3c:31:
45:a5:94:6c:2c:80:37:4c:19:2f:4f:4c:72:9a:ff:2a:cf:bb:
11:d4:7b:58:e6:5c:ed:01:9a:b1:4d:cf:96:89:5e:45:66:11:
4c:bc:06:3d:c7:78:08:0c:74:d2:57:9e:ae:56:28:91:a8:f0:
3e:72:27:d9:e5:19:4b:6e:ca:f5:14:6b:51:74:3a:14:55:ee:
62:d8:14:47:b8:c5:77:7f:15:2f:05:5f:75:c7:29:e6:3d:f0:
d4:38:1f:d8:d3:7b:54:be:ec:c3:87:f2:92:46:56:37:ee:c6:
cf:fb:00:7b:ee:36:c0:21:42:41:cb:5a:74:f7:d3:a6:e3:ea:
ba:47:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:00:01 2025 by rpki-client