Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2264C1D68A5511F0BEF100A3DAE4EC9C.roa
File: 2264C1D68A5511F0BEF100A3DAE4EC9C.roa (raw, json)
Hash identifier: G4oEIwhEZA4LCDU1VHF0wDJfmRwuqrF8qvvbD/emqHw=
Subject key identifier: 70:66:7D:7F:85:EC:0A:8D:80:54:8C:FD:85:28:0C:17:CD:9C:EA:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017923
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2264C1D68A5511F0BEF100A3DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:37:51 +0000
ROA not before: Fri 05 Sep 2025 12:37:46 +0000
ROA not after: Fri 12 Dec 2025 12:37:46 +0000
asID: 54600
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 17 Sep 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96547 (0x17923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 12:37:46 2025 GMT
Not After : Dec 12 12:37:46 2025 GMT
Subject: CN=68bad99e-5f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:e7:4a:df:af:96:47:7c:5a:fc:c6:3c:d6:
28:75:62:fc:d4:7b:ce:25:65:0f:1c:16:75:ab:bb:
bd:f6:bf:47:08:63:fd:49:f1:66:09:30:07:c9:f2:
53:db:8a:6b:28:f1:66:45:be:10:70:c0:ba:fe:d4:
75:14:2b:73:e5:93:11:bd:f7:c7:28:c0:df:b2:2d:
c8:4a:88:ac:c1:53:d4:35:af:9d:63:fd:24:45:9b:
76:ec:c3:b9:25:5c:ba:57:4c:00:26:01:e6:d7:ce:
87:dc:6e:63:a5:21:6f:c4:49:a2:60:ed:53:c3:c4:
51:e4:18:2f:bb:37:00:45:7b:fb:6a:4a:7c:b6:64:
fb:44:7d:ea:14:51:4d:d8:06:36:29:a5:f7:75:ee:
2c:9b:55:a0:ba:bd:58:41:77:f7:02:06:c6:74:15:
bd:c3:56:5b:14:f7:65:6f:e9:48:dc:36:f8:0e:e6:
28:29:78:f4:1b:7c:d4:a1:0c:53:24:17:aa:1a:9d:
3c:9a:ff:12:a4:41:35:41:0a:e7:ec:10:b8:89:41:
04:92:43:ed:22:6d:43:c9:8c:23:30:a1:d0:73:15:
e5:3a:fe:a7:1d:f2:d4:63:9a:d4:92:61:53:ca:66:
9a:9a:25:b7:ea:72:6c:23:ec:47:54:d7:3e:18:76:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:7D:7F:85:EC:0A:8D:80:54:8C:FD:85:28:0C:17:CD:9C:EA:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2264C1D68A5511F0BEF100A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:62:e7:5c:28:2d:bf:65:07:7c:7b:e3:f9:10:91:73:dc:e6:
05:31:c2:8f:76:e1:8c:23:02:d0:9c:40:e6:13:7b:dd:ac:74:
d9:f2:38:b3:37:d1:23:40:f3:26:d1:a9:cc:7c:cc:bf:9c:0d:
15:d2:ce:c1:d3:d5:f8:31:ee:1b:6e:47:fc:34:08:c0:87:0c:
f8:af:65:cd:1e:55:1f:ce:d1:ab:6b:15:11:a3:12:07:ae:9b:
04:84:ac:2f:60:4d:09:e3:35:6a:5c:5c:ae:9f:e7:87:b6:82:
f2:e3:b4:26:9f:58:0f:f9:d7:21:25:55:83:c5:3b:dd:89:33:
bd:66:d4:cd:5e:5f:91:24:30:38:d1:91:5f:4c:c6:09:b5:93:
bd:28:ba:7f:d0:78:e2:2c:40:52:5f:86:64:c8:82:55:8a:44:
d5:7f:74:68:70:22:08:85:c5:0b:a4:a3:3f:96:94:1e:30:31:
f9:db:23:70:37:ec:52:d7:0f:6a:f3:75:e8:39:81:d1:7e:8c:
7b:3c:e7:36:3c:89:10:2d:40:94:1d:62:6c:1a:e5:42:06:49:
6d:3a:cb:8b:16:8f:a0:1e:1d:1b:03:1e:04:e7:c6:b6:94:ab:
5f:80:0f:8e:22:fe:f9:87:a2:e4:fb:a7:aa:44:0d:63:68:ca:
c3:fc:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 05:01:09 2025 by rpki-client