Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FF0002574011F0A5462ECBDAE4EC9C.roa
File: 06FF0002574011F0A5462ECBDAE4EC9C.roa (raw, json)
Hash identifier: p8tPiMCkeXPoSXIaM7VG90GIg1aY2j+SgV+vvKKLJZQ=
Subject key identifier: 0A:6C:D7:8C:FC:FC:EB:BE:F6:F5:1F:79:4C:8F:DF:F6:89:62:81:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016016
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FF0002574011F0A5462ECBDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 12:28:16 +0000
ROA not before: Wed 02 Jul 2025 12:28:10 +0000
ROA not after: Sun 24 Aug 2025 12:28:10 +0000
asID: 18013
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90134 (0x16016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 12:28:10 2025 GMT
Not After : Aug 24 12:28:10 2025 GMT
Subject: CN=686525e0-e2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:b1:7d:18:3e:c2:a3:a9:3b:70:2c:4f:0c:
0a:b8:cb:4d:a0:d4:ef:65:cd:35:22:58:eb:b8:35:
1f:76:b9:ac:2b:c7:99:ec:73:a9:81:25:ee:14:08:
7f:80:09:4d:35:c0:bb:ef:a0:8d:b6:5b:54:ca:bd:
b0:91:15:8a:20:97:62:09:d5:1c:fc:3c:51:a9:c4:
30:a8:c9:13:68:9d:08:93:d7:8c:e4:6d:b8:ba:55:
69:aa:a9:86:83:73:9a:13:f6:89:3f:c5:3d:f2:32:
0c:68:6f:c8:6a:68:b4:fe:97:28:86:09:b3:ff:c8:
13:99:af:42:66:d1:09:e3:e1:3a:dd:04:3e:78:71:
fe:45:ff:76:34:78:87:05:ec:b8:39:f6:88:f5:5e:
58:37:69:2d:68:be:41:13:cc:53:48:0c:ff:5f:21:
81:2d:43:9a:95:fc:66:5a:1f:c4:a0:3b:31:ed:71:
c9:2c:60:52:ac:ad:d8:8c:f6:f8:91:dc:9f:05:b1:
91:7d:7e:60:e0:6f:e9:c3:14:5e:f2:8a:87:4b:ed:
f1:21:bf:ea:68:3c:a0:c8:21:78:75:de:75:72:00:
22:97:a6:3f:b7:2d:78:6b:8b:27:76:0f:13:fe:1c:
68:a3:0a:c6:2c:1e:fa:b1:47:e6:03:59:9b:1b:c1:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:D7:8C:FC:FC:EB:BE:F6:F5:1F:79:4C:8F:DF:F6:89:62:81:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FF0002574011F0A5462ECBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
8f:5c:63:64:59:0e:53:16:6a:66:f3:21:6d:24:fe:a9:53:81:
f6:42:3a:79:f2:ad:13:a6:35:dc:92:88:90:ba:ba:0d:4f:a3:
59:42:08:48:6e:6a:6e:5a:f0:93:d0:46:d4:35:db:69:28:97:
16:4e:f4:83:f5:46:54:d7:46:43:46:47:5c:60:7d:c7:3e:57:
4c:10:ec:96:2e:fd:6f:4e:dc:2d:fe:a7:19:ba:48:26:b7:19:
86:ca:f8:ff:18:52:3a:c6:23:1f:d7:cc:db:a3:4b:30:34:60:
24:cf:a2:bb:b7:01:cb:6d:2b:8b:4f:67:f3:91:3c:e9:2a:04:
43:e4:57:a4:8a:8f:85:15:ad:9a:b7:59:27:58:ca:fc:5d:44:
7e:f1:84:9e:91:a8:60:7c:09:9b:df:ae:a6:f3:06:bd:a6:28:
b9:30:16:ea:04:c4:70:e3:84:82:e0:2e:fd:93:44:a6:a7:4f:
85:0c:95:9b:64:ec:7b:1e:c3:99:d2:a8:73:c1:57:98:71:47:
43:2e:0e:56:95:8f:d2:81:02:f6:9d:4a:50:86:4b:33:85:06:
7e:4e:2d:52:32:9a:c4:82:03:3f:d9:84:65:80:6d:d4:0d:b3:
bd:64:35:b4:69:9b:a6:48:b1:bb:25:fb:2e:20:72:dd:97:93:
5b:d9:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:19 2025 by rpki-client