Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26BD6BFE533511F09219708ADAE4EC9C.roa
File: 26BD6BFE533511F09219708ADAE4EC9C.roa (raw, json)
Hash identifier: kFlYSlvAjdmQjHzdcmt7N3aNLjSs1Nxu7CyqKQMb54I=
Subject key identifier: 82:69:B9:81:B9:6A:F5:A7:4B:2E:A8:38:F7:BC:AC:EC:45:79:BC:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015F0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26BD6BFE533511F09219708ADAE4EC9C.roa
Signing time: Fri 27 Jun 2025 09:00:20 +0000
ROA not before: Fri 27 Jun 2025 09:00:14 +0000
ROA not after: Wed 12 Nov 2025 09:00:14 +0000
asID: 140925
IP address blocks: 156.238.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89871 (0x15f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 09:00:14 2025 GMT
Not After : Nov 12 09:00:14 2025 GMT
Subject: CN=685e5da4-87ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:85:c4:d4:f3:b6:f0:0d:9f:4b:23:cc:c6:d8:
0a:94:a3:d6:cc:5c:28:56:de:4f:72:5e:79:5b:26:
e6:27:60:39:4b:96:c7:08:96:47:fb:75:37:7d:50:
ed:a4:01:a9:72:69:37:6e:04:6a:78:d9:0f:f2:72:
18:50:5d:53:60:86:4b:a3:d4:ea:bf:e1:de:19:a2:
dd:a8:a2:e5:dd:38:41:d4:3b:70:35:a1:a3:9c:0c:
15:f7:b4:3f:e1:2c:ab:de:a0:02:65:35:9b:20:25:
b4:ad:96:b2:bb:dc:51:e5:95:ac:8a:67:04:1e:f9:
5d:a3:75:99:d3:bc:06:d5:73:73:77:c9:36:d5:16:
ad:f3:5d:f2:11:46:cb:e1:1a:cc:9c:2f:c6:ef:c5:
5c:d9:ab:ef:0d:24:c4:bf:fd:29:43:3d:2e:ce:8c:
9b:b7:d1:1c:f4:bf:e4:17:1d:22:c3:3b:5b:e4:ae:
13:a7:9b:e2:80:bd:d7:2e:b4:ce:27:86:51:b3:5a:
c7:4b:a0:a8:70:3c:84:36:74:7e:9f:d3:81:bb:75:
19:49:a7:a9:79:d4:fa:f5:3f:2a:55:d9:7f:6e:f8:
d8:30:2c:a1:92:e2:f5:13:e8:72:1c:d5:be:0e:97:
e7:db:f5:af:e8:11:bd:db:76:b9:58:d6:6a:20:3e:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:B9:81:B9:6A:F5:A7:4B:2E:A8:38:F7:BC:AC:EC:45:79:BC:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26BD6BFE533511F09219708ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:77:a2:52:d8:1f:d4:4d:62:b2:86:9a:81:a3:c8:64:1d:05:
1b:97:b1:cf:41:e0:c7:d7:cf:9d:b4:a9:b0:b2:38:44:15:a5:
ca:b4:c8:2d:3d:fa:35:8f:e9:0e:fe:6e:be:df:fa:5b:f4:6a:
39:5a:81:04:03:c2:81:5b:42:e8:2c:52:1b:d1:fb:08:9a:89:
4f:7f:75:d2:5c:84:58:35:a9:08:e7:7e:f3:62:45:8e:19:ca:
37:42:e9:73:a4:fb:1b:1e:be:84:e7:3e:6a:65:45:77:01:b5:
af:08:40:5e:fe:63:2a:d6:25:2c:94:3f:f6:b3:a7:6d:f6:1e:
80:5a:61:04:7c:f8:11:f7:49:83:7d:e3:31:5d:88:46:16:55:
cc:62:3a:f2:42:b7:e0:ae:b1:fd:f1:4c:1d:72:4c:94:c3:5a:
b5:a2:77:6b:f6:a7:0d:02:6b:cc:d5:8a:8c:f7:66:ad:6b:51:
70:d8:af:a1:39:a9:3a:a1:9a:b8:77:20:50:0e:a1:f3:4c:80:
1d:66:16:a0:30:5c:78:9c:e7:e2:92:98:1e:7c:12:ec:7b:2c:
f1:65:12:55:f9:ad:98:5d:b9:3f:a7:15:fa:5e:41:24:49:f7:
35:4d:9d:cd:8c:38:2b:c8:cd:de:b8:69:d8:56:2c:a1:69:f6:
94:0c:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:49 2025 by rpki-client