Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E227F2A834911F0BBFA25AFDAE4EC9C.roa
File: 3E227F2A834911F0BBFA25AFDAE4EC9C.roa (raw, json)
Hash identifier: MSVIFe9M5dNjdwjPCl+s74lWURQbZqUKc9gYLObP7J4=
Subject key identifier: 07:00:B7:60:93:63:11:7C:5A:64:A7:6E:6A:CB:37:E5:6B:ED:4A:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E227F2A834911F0BBFA25AFDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 13:25:05 +0000
ROA not before: Wed 27 Aug 2025 13:25:00 +0000
ROA not after: Fri 10 Oct 2025 13:25:00 +0000
asID: 138915
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
156.244.39.0/24 maxlen: 24
156.244.40.0/24 maxlen: 24
156.244.41.0/24 maxlen: 24
156.244.42.0/24 maxlen: 24
156.244.43.0/24 maxlen: 24
156.244.44.0/24 maxlen: 24
156.244.45.0/24 maxlen: 24
156.244.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94649 (0x171b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 13:25:00 2025 GMT
Not After : Oct 10 13:25:00 2025 GMT
Subject: CN=68af0731-7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:5c:4a:1b:80:f3:3b:9e:57:a2:d2:fa:ae:
e0:3a:47:43:cc:eb:a6:7e:f4:68:62:b0:d4:ea:e3:
67:82:90:fe:04:f8:37:c7:71:00:9f:cf:2e:52:28:
f5:37:a5:c4:24:2b:10:ee:63:f4:1e:e2:ee:03:73:
0c:4f:d4:17:6d:0b:e6:bf:75:a5:87:45:62:bc:7c:
68:b4:02:e0:46:98:82:65:60:de:e1:dc:3e:ee:9c:
70:6b:15:6e:e0:92:9b:22:cd:35:f1:94:a2:e8:96:
88:ff:bf:28:13:14:15:0d:67:22:7c:52:1a:2c:99:
d7:6a:e6:03:e7:41:2f:c2:66:7f:5f:65:c4:6b:16:
88:d6:77:6f:ca:fb:44:e5:d8:85:36:8b:31:f9:c9:
4e:1d:4d:f8:bb:4a:65:ff:c3:02:82:4d:9d:23:0d:
29:16:ca:47:52:d9:55:19:39:22:14:ce:08:c9:a5:
77:ce:32:41:7a:07:4a:11:87:59:0d:8d:b0:99:8b:
62:34:91:98:13:05:a1:2d:1b:6f:39:e7:27:8e:5d:
ad:ab:1b:e7:cf:c1:fe:a7:11:7a:27:56:53:26:af:
a9:d1:82:19:5d:f5:93:9d:9d:4a:f9:8e:85:1d:8c:
8c:42:6a:21:fc:63:ba:e9:6a:71:38:dd:3b:43:df:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:00:B7:60:93:63:11:7C:5A:64:A7:6E:6A:CB:37:E5:6B:ED:4A:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E227F2A834911F0BBFA25AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
156.244.39.0-156.244.45.255
156.244.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cf:0a:45:2c:eb:48:9d:1f:1d:ed:3f:27:30:d5:e2:ef:60:
da:15:07:e0:8b:ca:e7:7b:e2:ad:d9:64:19:b1:e4:5d:fc:63:
3c:d8:1a:2d:e3:08:d0:2e:86:ba:64:0e:aa:e8:ce:d0:a1:0d:
77:09:34:f6:07:ef:62:81:9b:94:3e:ec:59:3d:c8:1a:2b:17:
f6:da:0e:92:8e:81:14:fb:e8:b6:7c:ac:e4:90:14:94:71:2a:
b0:1c:96:29:aa:91:74:bf:33:26:ac:40:45:13:b7:91:24:92:
b8:82:f7:e0:48:5d:9f:2a:f5:05:99:fe:7e:50:f3:ce:54:62:
b5:ba:39:87:83:cd:36:e1:fa:23:9d:1f:92:a0:bb:f2:29:c7:
ff:de:20:f0:0e:9f:fe:f2:dc:ca:da:f8:1b:f1:a5:fb:ce:90:
38:d5:76:02:42:36:6d:ef:a2:b9:34:9f:f8:f3:c4:b1:2d:e2:
02:83:cf:32:8f:5f:45:b8:b7:b6:ee:b8:7d:a0:10:af:d2:86:
e3:cb:14:ea:0d:43:eb:6c:51:f5:44:13:0d:87:a4:ea:c0:df:
3a:60:83:c8:77:04:36:25:ed:e9:b6:dc:43:8d:f6:cb:e5:c9:
f4:25:73:62:94:d0:32:e2:4c:30:e1:33:b1:93:4b:4a:5b:ef:
d6:da:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:12:05 2025 by rpki-client