Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F6BA640889511F0A21075C0DAE4EC9C.roa
File: 2F6BA640889511F0A21075C0DAE4EC9C.roa (raw, json)
Hash identifier: uMYK0Zax4yE8JxD02YXSOJcKjlluvnS0Yp9sP/7fy6Q=
Subject key identifier: 96:9C:87:E0:01:8B:67:94:0C:56:70:3E:6A:4C:D1:CF:76:2A:0D:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017744
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F6BA640889511F0A21075C0DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:11:18 +0000
ROA not before: Wed 03 Sep 2025 07:11:13 +0000
ROA not after: Mon 01 Dec 2025 07:11:13 +0000
asID: 399077
IP address blocks: 156.251.52.0/24 maxlen: 24
156.251.53.0/24 maxlen: 24
156.251.54.0/24 maxlen: 24
156.251.55.0/24 maxlen: 24
156.251.56.0/24 maxlen: 24
156.251.57.0/24 maxlen: 24
156.251.58.0/24 maxlen: 24
156.251.60.0/24 maxlen: 24
156.251.62.0/24 maxlen: 24
156.251.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96068 (0x17744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 07:11:13 2025 GMT
Not After : Dec 1 07:11:13 2025 GMT
Subject: CN=68b7ea16-af0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:21:a9:c9:cd:d1:70:47:e7:f2:8a:09:61:
a2:97:e6:c2:cb:48:98:51:70:f6:b0:63:15:bb:aa:
9b:6b:18:07:04:0e:2e:fc:8e:ca:7e:91:d4:0f:09:
9e:b7:57:1c:b2:cd:1c:86:20:9b:66:fc:a2:f3:f4:
99:60:9a:93:36:af:27:c5:df:4a:27:d6:34:13:3d:
97:67:59:8e:81:24:62:f9:d1:37:cc:48:ca:16:ed:
f1:f1:83:59:7d:31:52:4d:59:18:cd:11:25:e8:4d:
ec:b8:7d:4d:fc:d2:1f:d8:1f:fb:ea:45:45:e7:2c:
32:0c:70:30:0b:a0:66:a1:b3:44:45:7e:80:6c:e4:
47:f1:b1:be:97:1a:7a:e5:b3:c5:3b:48:77:c4:ce:
9d:16:46:3b:60:da:18:be:b8:d1:79:42:05:88:2a:
0e:7f:05:78:6f:b7:42:4a:9a:f7:4a:72:65:34:97:
67:df:6c:7f:81:2e:62:c6:81:77:32:03:f6:ad:aa:
c2:d7:db:f6:cc:ab:41:4a:78:57:c2:0c:ee:c5:77:
d0:70:d6:32:98:1e:a9:0f:66:d4:7b:fe:be:32:44:
49:cf:35:0d:cf:be:cf:96:3b:fc:5e:84:eb:32:c2:
fa:3d:0e:31:8c:8f:7a:e3:d6:03:60:18:dd:3c:91:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9C:87:E0:01:8B:67:94:0C:56:70:3E:6A:4C:D1:CF:76:2A:0D:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F6BA640889511F0A21075C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.52.0-156.251.58.255
156.251.60.0/24
156.251.62.0/23
Signature Algorithm: sha256WithRSAEncryption
98:ee:f4:e9:47:61:66:5f:b5:8b:62:ce:40:53:51:aa:c4:d2:
9c:e0:ae:c9:02:fc:58:7a:20:09:b9:16:83:59:cd:01:1e:42:
b1:07:82:99:f3:6c:50:24:ab:01:47:0e:04:12:b5:64:cb:92:
5e:b8:b1:a1:06:36:70:dd:3b:46:68:3b:60:ce:4a:de:6b:df:
83:1d:46:ca:02:20:0d:be:75:9c:56:b7:b1:fe:f8:97:35:52:
87:ea:61:bb:7b:62:95:52:ab:d2:f6:d9:b3:c8:ec:03:91:8b:
8d:ce:a1:e5:25:a4:3a:cf:73:10:49:11:17:e9:3f:0b:ce:47:
3c:72:cc:11:b8:eb:00:6f:79:5a:6e:03:b9:ae:c9:41:ec:37:
e4:3e:80:3a:4d:00:95:6a:ef:2f:e8:c9:e4:6f:0e:1b:e4:4e:
dd:2d:bf:35:a1:e7:73:00:4d:c2:c4:8d:c5:63:f7:4e:ba:cb:
0e:98:71:80:6f:3c:7d:45:01:1d:ce:64:e2:83:c1:d6:80:84:
a9:53:4c:b9:33:48:82:d1:27:c5:51:f1:15:4c:ad:9a:8c:0a:
43:8a:12:bf:45:e7:a9:ce:3f:4b:07:6e:43:d7:6f:17:34:a1:
e7:a2:fa:43:3c:9b:d7:14:e8:ee:2f:e3:bf:d4:2c:8f:ca:aa:
1d:0a:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:12:16 2025 by rpki-client