Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5803BFB887F811F091689DCBDAE4EC9C.roa
File: 5803BFB887F811F091689DCBDAE4EC9C.roa (raw, json)
Hash identifier: Jf8HvHa+1ovUsPyCVomn2Zs1uV+k4BDO/Yk80PqTz04=
Subject key identifier: 25:DF:98:B5:CB:B7:AA:82:BF:6A:35:87:64:36:82:E1:6A:04:F7:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017674
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5803BFB887F811F091689DCBDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 12:28:35 +0000
ROA not before: Tue 02 Sep 2025 12:28:30 +0000
ROA not after: Sat 11 Oct 2025 12:28:30 +0000
asID: 29802
IP address blocks: 156.238.117.0/24 maxlen: 24
156.239.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95860 (0x17674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 12:28:30 2025 GMT
Not After : Oct 11 12:28:30 2025 GMT
Subject: CN=68b6e2f3-76f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:97:6b:a0:7a:61:78:83:e9:26:64:30:bc:
f6:ff:db:30:f3:4a:99:d1:8f:03:5e:4c:8a:ff:7f:
a2:b1:49:6f:5f:25:91:bb:ee:7a:1e:e0:a7:42:d7:
19:f2:94:77:19:6f:91:a1:6a:fe:bd:7e:12:b3:25:
a4:3d:78:c4:46:94:de:be:42:aa:a6:41:03:2d:0f:
3f:a8:76:35:0d:11:12:e4:11:df:61:6b:5e:8e:96:
dc:fc:13:42:bf:44:73:a2:7c:e2:7b:57:d0:fe:db:
2d:da:4a:27:bc:a4:1e:e8:74:da:21:92:90:1f:67:
c9:44:b0:5a:51:8a:5b:77:3c:50:62:65:69:61:06:
2b:d8:3d:59:b4:02:eb:d3:8f:17:19:91:b5:09:f3:
38:3a:b7:f9:15:84:24:76:8e:65:af:29:b8:4d:a9:
40:85:78:ab:f3:0f:fd:29:3d:c2:98:74:90:36:f9:
ae:75:a5:d4:3f:35:5f:3f:74:ac:b9:90:8f:8e:5e:
82:58:bc:c6:e8:34:bd:0a:73:9c:6e:91:27:97:67:
51:22:ac:18:27:f2:04:58:38:1e:59:f5:93:c8:d0:
35:8e:34:f4:e4:9d:36:8c:e0:1d:0e:e8:7d:31:d3:
cb:c8:5b:22:55:d9:d7:96:e3:67:db:8d:dc:8b:ed:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:98:B5:CB:B7:AA:82:BF:6A:35:87:64:36:82:E1:6A:04:F7:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5803BFB887F811F091689DCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.117.0/24
156.239.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:10:53:80:53:82:03:6d:1e:1c:1a:f2:5c:c8:43:8f:24:4a:
cc:a2:a3:76:30:74:61:de:6b:af:e9:cc:8e:2e:ab:b3:97:18:
d7:f8:a0:89:cb:ce:ce:89:4a:91:c9:05:82:a1:f5:f3:bf:fd:
de:52:07:fd:d8:a9:f0:3a:fc:a4:dd:cd:ac:7e:46:c1:23:49:
af:57:18:79:bd:20:0d:66:ed:d5:28:12:2b:81:22:94:3f:57:
74:e2:d7:c2:b5:73:2c:67:07:af:88:f4:b1:4d:8a:83:8e:19:
7f:b3:ac:c3:c2:87:cc:94:15:30:ac:bf:de:fe:c4:61:2a:15:
8c:18:49:9c:21:29:c3:4a:3b:3a:9a:ed:b9:2a:76:a5:91:2d:
79:a7:0c:df:8b:4c:71:06:ea:45:de:f8:76:c3:84:74:fa:b6:
42:e0:48:b4:32:86:7f:e5:fe:86:dd:46:19:3f:74:3d:49:d6:
5c:2c:d3:64:1c:4b:18:21:b5:0b:ca:fc:78:3b:9f:5d:83:66:
5b:d0:82:92:a3:39:a1:57:d7:23:e5:54:d0:22:e1:51:1a:5a:
b8:d6:f1:68:ba:8e:1d:b6:a6:52:59:18:d4:1b:65:35:f7:ff:
29:13:3a:0f:c2:64:2d:86:28:30:cb:a1:9c:7f:49:bd:63:09:
d1:87:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:25:32 2025 by rpki-client