Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09256AB860A711F099EF01D9DAE4EC9C.roa
File: 09256AB860A711F099EF01D9DAE4EC9C.roa (raw, json)
Hash identifier: tGF6Inei8Ig9ODGfEEWTJLjbTbh1VRD8ggb0ovHupjM=
Subject key identifier: 2D:9C:D9:6C:4C:EE:63:08:7F:56:18:10:FE:06:E1:70:C0:F4:4C:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01652C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09256AB860A711F099EF01D9DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:38:19 +0000
ROA not before: Mon 14 Jul 2025 11:38:13 +0000
ROA not after: Wed 03 Sep 2025 11:38:13 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91436 (0x1652c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:38:13 2025 GMT
Not After : Sep 3 11:38:13 2025 GMT
Subject: CN=6874ec2b-d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:ab:93:b2:ae:dc:c3:a4:c8:f7:70:85:cb:
e3:b0:0d:7a:11:c2:61:31:38:f4:d6:63:4a:e1:d9:
3a:fc:01:3b:91:09:f4:86:ef:8f:e4:f6:9a:a8:b8:
7f:f1:2e:fa:05:81:4f:33:3c:be:d1:da:43:83:4a:
3c:9b:46:6d:08:2e:03:35:6c:cb:49:eb:8b:43:a0:
93:45:cd:d9:7e:96:fc:33:a4:86:5e:56:6a:37:8d:
74:92:69:95:f2:da:55:26:56:73:de:68:4b:32:ff:
6e:22:db:57:e2:4b:c7:f3:de:33:51:41:d3:20:9e:
47:14:72:ca:22:fe:c6:3c:a5:3d:17:8d:0c:2d:3a:
26:60:4e:b9:69:8a:e9:e1:e2:ff:cd:26:bd:27:da:
62:87:6c:ab:ca:b2:6a:5a:a7:3e:10:11:c1:9d:3d:
95:ed:f2:47:d2:e3:bc:00:b9:ac:31:93:3b:df:ad:
0b:4c:85:56:1f:4a:60:d4:eb:c0:04:aa:bb:49:0b:
0b:fb:af:01:7f:5e:48:9a:6e:45:07:d7:76:d7:20:
ea:54:ef:a8:41:67:3f:a7:20:14:17:21:4b:bc:cf:
65:2c:f8:69:90:62:4e:e8:38:94:27:a9:c7:bb:41:
18:18:c2:b7:94:09:4d:a9:df:d1:f0:5b:24:23:ba:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9C:D9:6C:4C:EE:63:08:7F:56:18:10:FE:06:E1:70:C0:F4:4C:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09256AB860A711F099EF01D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:01:15:2c:b7:6d:e9:37:87:12:66:8a:57:da:3d:78:6f:c4:
0c:72:87:29:8f:90:f5:3f:f2:61:97:21:2e:e3:81:18:61:8d:
54:24:a1:b4:53:0a:06:74:98:77:f0:a1:9f:82:a9:22:73:fc:
85:0e:76:82:02:50:7b:7d:19:78:07:ac:6f:98:85:66:6a:b5:
dc:47:55:2b:c2:89:6c:7e:de:94:84:32:d3:8e:96:58:d2:ee:
85:24:83:0f:1c:19:50:ad:25:b1:56:14:46:c5:96:08:e5:45:
b6:a5:f8:d8:c9:85:74:06:e9:17:fc:0e:06:56:11:f1:a6:32:
a4:d6:ad:43:3a:31:2f:9a:3d:f1:35:3f:d7:d7:a1:53:b1:f0:
65:4a:f4:b1:5b:86:20:fe:f4:f8:08:29:27:a2:d9:d4:20:e9:
d6:69:14:17:f0:92:f2:65:48:13:b9:90:9e:40:d2:39:11:22:
a8:48:93:bf:9f:61:d2:f0:42:ca:3d:c8:39:60:7f:b3:ee:d7:
bd:f1:69:87:7b:ed:5d:61:30:fb:5e:ae:c2:4d:0e:fb:5f:6b:
04:68:26:01:22:ff:98:7c:bb:de:e9:3b:b0:22:5c:1b:22:8b:
7b:08:1a:b5:b1:3b:d4:53:b2:78:94:b6:cf:09:e7:a5:8e:c2:
b4:fe:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:34:28 2025 by rpki-client