Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EEC605A873911F0BFDF76E6DAE4EC9C.roa
File: 1EEC605A873911F0BFDF76E6DAE4EC9C.roa (raw, json)
Hash identifier: Dhth2gEV72B49LU3QXXcAVdCRw/Vg3Y7NPD+aY+HXi8=
Subject key identifier: 2A:B3:E3:D9:2C:A7:8C:AA:64:C6:DC:42:F3:7D:27:2D:65:4F:90:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017589
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EEC605A873911F0BFDF76E6DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 13:39:45 +0000
ROA not before: Mon 01 Sep 2025 13:39:41 +0000
ROA not after: Fri 25 Sep 2026 13:39:41 +0000
asID: 26617
IP address blocks: 156.240.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95625 (0x17589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 1 13:39:41 2025 GMT
Not After : Sep 25 13:39:41 2026 GMT
Subject: CN=68b5a221-2678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:ca:bd:24:7f:c3:e3:89:b3:58:5c:df:eb:
88:c5:be:a0:07:37:73:4a:ec:5f:d4:b6:d1:81:6d:
b5:7f:62:ed:76:83:b6:0d:6a:eb:ed:55:4e:83:5f:
07:b1:32:a8:12:36:6a:bb:b2:38:81:8d:87:2d:32:
d7:f9:c9:87:18:a7:eb:f8:4c:f7:db:19:33:16:78:
9e:70:27:b4:8e:b6:6d:e9:bb:94:2c:eb:51:76:4a:
95:c4:d2:18:01:a7:82:99:17:cb:f0:29:1f:62:be:
51:07:15:59:f1:e2:6a:49:4d:f7:93:c4:f1:01:73:
e1:45:0d:f8:34:c6:de:11:22:62:cf:1f:dd:05:78:
f4:65:4f:c0:13:9e:83:44:68:82:a3:8c:29:e9:d1:
77:60:e2:2c:b6:91:a6:c0:74:f2:b2:c3:e0:a4:f0:
af:e5:4b:3f:2e:41:2e:f5:45:9d:7e:04:95:1b:7a:
92:9b:27:5f:6e:ff:ed:88:83:89:36:c4:05:b8:61:
37:65:42:7d:06:b8:2d:e4:c2:a8:2c:90:f9:e4:cd:
2d:55:ee:69:2a:61:30:5e:5b:c0:f3:ef:6f:09:a4:
f5:cf:83:6b:de:15:16:0a:04:73:44:16:e5:a1:44:
d4:59:f6:91:58:02:44:e7:4c:16:cb:8e:c0:3a:e2:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B3:E3:D9:2C:A7:8C:AA:64:C6:DC:42:F3:7D:27:2D:65:4F:90:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EEC605A873911F0BFDF76E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.60.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:08:c1:61:c8:56:28:7d:a3:1f:df:81:be:12:39:ca:2f:ff:
fb:57:dc:64:9e:33:f3:f2:a4:d8:7d:80:43:b5:fd:65:90:f3:
9c:07:f0:65:14:d3:f9:1a:fa:c5:9c:2f:00:37:a9:cb:42:15:
f5:4e:1a:c2:53:14:06:93:2e:83:0c:b5:3c:fd:c0:4d:af:a4:
70:f2:26:3a:5d:a2:2e:12:e0:24:ef:67:38:77:cc:66:63:27:
83:cd:1b:34:7b:c0:ec:6d:54:34:df:74:35:6c:6c:fc:e5:22:
df:94:4e:1b:e4:ad:06:14:c0:6b:17:32:ea:15:ad:2f:98:46:
b6:9c:99:58:06:3b:17:8a:9d:75:1a:95:a3:73:66:99:49:c3:
09:94:29:d2:52:bc:0a:25:e8:b9:1c:b3:f7:6b:e0:7e:bd:81:
bf:37:4b:7f:b8:bf:bd:de:81:32:ef:5f:33:0e:98:da:cf:d9:
c1:52:cd:cc:30:b1:69:27:3f:86:45:8b:93:d5:d9:ad:b5:de:
5d:bc:e4:75:76:55:04:64:33:f2:a9:6d:39:10:5d:74:8c:86:
62:fb:af:a9:e2:83:56:a8:cf:3c:91:cb:2a:97:f6:d4:22:fe:
a9:74:ce:78:1c:e4:fd:17:ca:0b:59:d2:29:47:cf:59:fe:d6:
13:e5:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:00 2025 by rpki-client