Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3B92EC860011F09EBD25DFDAE4EC9C.roa
File: 4F3B92EC860011F09EBD25DFDAE4EC9C.roa (raw, json)
Hash identifier: cJ7V1Wtcj9TS+6ViZh88wJF/Wdrlj5ZM//0lxMgP0mI=
Subject key identifier: C3:75:7C:73:83:76:AF:C1:88:A4:B6:7D:06:C7:AD:44:BD:C3:AA:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017458
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3B92EC860011F09EBD25DFDAE4EC9C.roa
Signing time: Sun 31 Aug 2025 00:20:34 +0000
ROA not before: Sun 31 Aug 2025 00:00:28 +0000
ROA not after: Sun 07 Sep 2025 00:00:28 +0000
asID: 54801
IP address blocks: 156.240.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95320 (0x17458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 00:00:28 2025 GMT
Not After : Sep 7 00:00:28 2025 GMT
Subject: CN=68b39552-eadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:74:8d:7d:90:ba:5e:d2:70:2b:c3:f9:13:00:
18:26:91:50:4b:0b:cf:3d:75:c7:4e:13:12:b0:d4:
2f:35:ac:f2:a1:c4:9d:55:3c:63:d8:28:2c:b1:74:
12:81:23:28:54:b6:22:93:c9:71:5d:23:b9:a6:bf:
a2:96:16:64:73:54:dd:99:de:07:77:42:44:f3:69:
6a:b0:f3:69:38:cc:4b:e0:40:ca:32:db:57:13:61:
9b:eb:ae:19:e5:b8:1d:c7:c4:1c:c1:57:ce:c0:c5:
92:bd:0b:bd:14:85:f5:65:02:a9:41:a0:f9:4d:be:
cc:9d:4d:68:cb:c4:b6:41:85:f9:30:79:72:5e:b0:
be:ea:c9:bd:e0:c7:64:bf:2c:35:f1:bd:9d:13:4b:
a7:1b:bd:bf:92:62:d1:21:17:76:da:eb:30:7b:32:
38:15:81:ba:a7:95:8f:9d:89:fd:ea:05:ae:e7:18:
03:8e:f6:ac:37:48:0c:23:67:df:c9:45:39:69:d1:
87:3b:19:d0:dd:00:c3:dc:3e:25:1c:d9:a2:72:44:
91:d1:26:ba:f8:d4:11:c0:79:10:40:91:74:26:3a:
af:54:d7:46:7f:fc:0c:b4:2b:6f:34:cc:d8:12:ed:
86:ff:76:a4:fd:65:ba:5c:64:04:a4:45:df:8b:43:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:7C:73:83:76:AF:C1:88:A4:B6:7D:06:C7:AD:44:BD:C3:AA:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F3B92EC860011F09EBD25DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:67:15:40:be:b0:60:49:af:26:4e:e2:74:7d:49:2a:71:88:
86:67:89:b5:da:62:27:19:bf:0e:41:66:9f:94:5b:40:9f:9b:
25:60:7f:00:6b:ee:07:88:3b:b2:a8:a5:84:e1:56:da:f6:cc:
db:6c:02:51:f9:81:16:ac:fe:9e:aa:fb:ed:f1:61:a1:31:8b:
71:6d:60:f0:11:17:c6:56:a9:a9:da:75:da:68:55:37:0e:2f:
4a:f3:d3:2c:31:36:30:62:6d:d3:d0:81:21:08:ea:63:28:1c:
61:75:ee:75:ea:4e:28:07:af:06:9f:73:13:44:86:cc:69:e1:
51:68:d7:24:7e:03:af:68:3e:ee:7b:ef:33:3d:a0:7c:33:ed:
35:b1:56:35:7a:69:d2:5a:25:dd:ca:29:28:fc:e5:87:9d:28:
1c:bf:17:7a:fd:e8:a2:01:49:6f:58:71:58:5f:bd:fc:bb:cf:
09:08:dc:05:05:80:d9:b8:e5:2d:79:53:14:aa:f2:a8:21:86:
4b:fd:4e:dc:22:d5:aa:2c:d0:92:78:cb:f6:80:61:33:ba:0b:
cf:21:20:36:0f:eb:32:63:08:c0:92:82:69:8c:d7:5c:a7:7d:
12:ea:70:f3:ca:30:8e:90:c7:b5:4a:a9:01:e2:3c:28:53:6d:
3b:01:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 05:18:18 2025 by rpki-client