Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B70DADC83ED11F08FCE71E4DAE4EC9C.roa
File: 0B70DADC83ED11F08FCE71E4DAE4EC9C.roa (raw, json)
Hash identifier: F25OQ4PIHWFYwy08zVf/rxRfperkhK7E0XE10hP1ZIg=
Subject key identifier: 81:2B:AF:99:12:11:00:60:AA:4C:C5:96:CE:17:FA:E7:E2:91:93:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017257
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B70DADC83ED11F08FCE71E4DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 08:57:38 +0000
ROA not before: Thu 28 Aug 2025 08:57:33 +0000
ROA not after: Thu 04 Dec 2025 08:57:33 +0000
asID: 136744
IP address blocks: 156.228.187.0/24 maxlen: 24
156.231.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94807 (0x17257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 08:57:33 2025 GMT
Not After : Dec 4 08:57:33 2025 GMT
Subject: CN=68b01a01-81d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:f1:cf:3c:07:26:4f:f9:46:1e:82:16:75:
8e:7a:58:bc:cb:d7:9f:75:52:09:c8:f8:be:6d:03:
ef:5d:0e:16:1f:6e:c6:65:da:2a:9b:e2:45:cd:ac:
6e:cb:90:46:81:af:83:1a:f2:6b:bf:e9:c9:c0:bc:
2d:2e:4d:56:15:a4:b3:13:3e:a1:b2:c3:e0:61:84:
a8:50:47:e4:99:cd:c4:58:50:42:16:cb:39:a3:1f:
82:42:27:39:70:3e:fe:b2:5b:4c:b1:94:04:63:b3:
5d:d2:55:2b:5d:74:f2:87:d4:3f:12:3a:17:ac:aa:
13:55:69:2a:2c:1c:9f:fa:29:8d:8f:6f:b6:5b:8b:
19:94:63:cf:8d:54:b0:9e:2d:da:d5:52:71:c7:f6:
11:e4:d8:02:c3:ff:51:7c:3a:ee:a0:87:aa:2a:5a:
8f:07:53:7e:c7:88:5c:d0:d8:f1:7c:ec:7a:38:01:
45:90:7c:1b:46:ce:08:41:d9:16:4a:9b:3b:6a:8a:
cb:95:eb:df:0b:f4:e9:d5:d5:af:38:35:f4:73:dd:
da:2e:9c:e0:b0:c7:0e:6c:de:28:a5:e1:a5:9f:9d:
b2:48:2d:66:89:f3:e9:a1:49:c3:24:6c:ea:80:29:
58:8d:20:a3:91:50:1a:4c:92:d1:ba:54:17:35:5c:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2B:AF:99:12:11:00:60:AA:4C:C5:96:CE:17:FA:E7:E2:91:93:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B70DADC83ED11F08FCE71E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.187.0/24
156.231.121.0/24
Signature Algorithm: sha256WithRSAEncryption
36:62:56:64:ee:18:45:71:52:94:54:b9:97:85:36:39:5e:4e:
50:57:4a:82:fc:9c:12:d4:0e:75:62:21:ee:cf:22:eb:76:e9:
33:4d:1a:d3:03:e0:4e:5a:4c:36:3a:7e:8e:21:b0:b6:03:52:
ff:22:6b:b5:11:60:86:98:ac:89:73:a3:5f:f2:89:22:d1:0c:
60:8b:19:6b:1c:70:ac:ab:aa:2f:00:60:c9:45:aa:d7:c3:92:
f4:ee:32:49:61:36:0d:e6:eb:c7:ed:5f:f3:05:bd:4f:63:9b:
2b:87:8e:92:3c:97:f7:05:c0:9b:68:e0:de:6c:5e:a0:fc:d1:
84:cc:97:83:62:d1:dd:24:5f:36:4c:53:77:8e:6c:d4:96:b3:
90:cd:13:55:38:d9:da:d1:ef:59:6e:b7:3c:ab:35:fe:73:cd:
7c:3e:e4:87:2c:9f:d5:e1:ad:c1:c2:81:18:ce:db:17:d7:a9:
e4:e0:4b:ec:59:bc:06:11:6d:b5:d6:78:f4:7f:cf:31:4a:38:
33:79:f4:29:3d:56:c4:8f:e6:a8:d1:52:92:38:ba:de:04:f5:
95:15:9f:c8:e9:ea:55:5f:46:84:0a:dd:91:f5:b2:98:7c:a4:
88:0c:fc:ff:d6:e6:1a:37:44:90:2a:ab:b3:dd:59:00:f0:58:
8d:be:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:02 2025 by rpki-client