Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34BA905A802211F089DA36B0DAE4EC9C.roa
File: 34BA905A802211F089DA36B0DAE4EC9C.roa (raw, json)
Hash identifier: dI0vpO00LAD8T1NrCcZI/xV/j/h/AUwuKosoNFK84y0=
Subject key identifier: 6D:EC:A4:FD:24:34:BB:90:E4:03:10:CD:C7:7D:DA:69:CC:EB:98:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34BA905A802211F089DA36B0DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 13:08:05 +0000
ROA not before: Sat 23 Aug 2025 13:08:01 +0000
ROA not after: Mon 29 Sep 2025 13:08:01 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93974 (0x16f16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 13:08:01 2025 GMT
Not After : Sep 29 13:08:01 2025 GMT
Subject: CN=68a9bd35-bf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:10:2c:c3:1a:3e:4d:45:46:f8:4c:59:21:
6c:f6:93:36:78:60:9f:32:13:44:61:35:1a:27:6a:
2c:9d:c1:03:60:65:5a:86:46:c6:41:52:6e:85:6c:
fe:be:a5:8b:fa:4f:7f:13:35:17:fc:1e:80:82:ca:
cf:2b:1c:55:32:d6:d9:b6:48:7d:a8:9c:76:96:cb:
d6:31:9a:c1:49:f5:d7:50:29:b4:25:b0:14:3f:ad:
a8:67:5c:c0:41:ab:00:2b:88:95:7b:8c:8f:e4:b7:
81:a1:a9:de:7e:61:85:6e:e8:38:db:b7:ca:a4:dd:
51:d9:9d:df:1b:1b:a2:e7:47:dc:a2:25:78:f0:9d:
9b:4d:14:95:22:50:f2:fe:ca:d9:d5:d6:ab:b6:0b:
30:29:21:50:4f:17:d1:62:76:9e:20:eb:32:19:b6:
60:36:51:15:78:25:68:0b:d1:a9:38:0a:e8:43:38:
d8:71:3b:ab:83:56:a4:d8:80:2e:36:e9:05:7d:67:
df:64:17:d6:6f:1f:23:b9:08:97:a7:81:71:90:05:
77:0e:3b:44:66:6a:e6:7e:04:16:3f:2c:aa:90:b2:
72:58:15:2e:9e:fd:d4:b7:01:0f:4d:e7:d4:e9:46:
7f:9f:9f:ad:c7:c1:14:a5:0f:10:97:f7:5b:27:ee:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:A4:FD:24:34:BB:90:E4:03:10:CD:C7:7D:DA:69:CC:EB:98:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34BA905A802211F089DA36B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
Signature Algorithm: sha256WithRSAEncryption
92:01:23:b6:a8:94:ef:bf:86:4a:81:48:22:0c:43:54:14:ab:
81:f5:50:98:85:55:d3:c6:5e:3e:96:62:a3:47:a7:3b:77:43:
4d:e9:68:6c:02:7f:e1:23:ca:91:0d:b7:58:fb:d5:32:b0:f9:
36:1c:86:06:3d:d6:6a:93:41:66:7c:a9:03:1c:ac:84:56:d8:
95:01:4b:20:0c:22:89:83:ab:39:f9:bc:d3:f1:67:4a:2f:12:
8d:54:bc:89:aa:8a:16:c3:36:f9:f8:4b:48:b5:f4:1e:03:46:
76:8f:6d:c0:75:9d:89:4b:07:aa:c4:5a:3a:d5:51:f5:20:56:
ba:b8:1a:c8:d4:2d:41:6a:66:72:44:97:71:e3:f1:d4:03:95:
ab:06:ff:94:4e:43:a6:fa:6a:e0:31:35:5b:3f:2e:8c:17:b7:
65:72:ef:40:aa:76:4c:7d:3b:46:63:bf:da:89:dc:a3:d8:da:
6b:45:c5:9b:05:3c:96:94:b3:36:1a:57:d3:c2:aa:ed:e0:f0:
5e:9a:12:21:6f:bc:ac:ad:89:77:3e:a8:9c:d4:49:8c:41:87:
38:53:cc:cc:63:cf:fa:9f:c9:dd:cf:9a:19:28:5a:c8:43:da:
45:07:f0:b1:73:36:20:e6:86:b8:96:9d:62:fd:2d:06:b9:13:
f2:b9:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:29 2025 by rpki-client