Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619DBCC4825B11F096FDF99BDAE4EC9C.roa
File: 619DBCC4825B11F096FDF99BDAE4EC9C.roa (raw, json)
Hash identifier: iqcWjx7Y2RwwsPQU8zogHheyqXkLGrEeRMnHmIe2wKc=
Subject key identifier: 4B:F3:70:D4:35:D5:FE:DB:29:1A:0C:D4:10:99:80:B2:70:7B:B1:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017062
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619DBCC4825B11F096FDF99BDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 09:02:24 +0000
ROA not before: Tue 26 Aug 2025 09:02:20 +0000
ROA not after: Mon 29 Sep 2025 09:02:20 +0000
asID: 3257
IP address blocks: 156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94306 (0x17062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 09:02:20 2025 GMT
Not After : Sep 29 09:02:20 2025 GMT
Subject: CN=68ad7820-4cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:5f:e8:b9:e4:92:f1:b2:90:84:1f:c1:46:
31:28:63:e5:45:4c:c2:df:7e:50:60:fb:2a:4a:e6:
fc:6d:f8:2c:f7:47:01:bb:56:95:8d:9c:86:44:6f:
64:74:a1:11:f9:3d:6e:6d:a9:fd:f6:fb:b8:8a:67:
b2:58:3c:a8:91:5c:63:5b:6f:89:c5:ee:cc:99:68:
56:4b:09:7d:77:42:1d:dd:4b:c0:5f:dd:a4:47:32:
c2:48:26:19:5c:dc:91:74:53:15:77:c4:f6:44:48:
be:aa:3d:15:44:b2:b1:a3:b7:c2:06:ad:c6:a3:e9:
c6:47:e1:ab:cd:9b:ca:9f:74:07:87:79:90:da:c7:
ba:ab:0e:fe:ef:1e:68:fc:c7:7d:cd:92:3a:5f:5d:
f7:f3:67:bb:71:d6:78:6b:21:a0:75:75:8b:a1:f3:
a1:fc:5a:24:d4:9a:98:d2:81:80:7f:07:04:9a:a9:
c7:c5:ee:bb:e9:ae:07:e0:a2:89:66:b2:71:55:45:
a3:a0:9f:7f:aa:91:28:12:1e:8b:3f:31:fd:44:5d:
bf:ef:0e:53:10:9e:27:15:18:4a:4e:c7:54:31:3b:
af:e4:b4:e1:26:a8:66:3f:f8:52:45:38:d5:5f:0f:
3c:05:ce:5d:8d:dc:64:e4:33:39:cf:e3:da:e1:ab:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:70:D4:35:D5:FE:DB:29:1A:0C:D4:10:99:80:B2:70:7B:B1:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619DBCC4825B11F096FDF99BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.7.0/24
156.228.9.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0b:fb:fa:94:7f:5d:12:30:35:30:41:24:8d:a8:2a:67:94:
8c:74:5c:3e:96:04:86:b8:5d:2b:2e:da:3b:5b:d0:54:fc:c8:
dc:d2:ce:b7:37:80:44:4b:cd:b7:d1:fd:de:88:da:1c:74:3b:
16:37:33:75:c1:56:87:33:f2:9f:2f:27:3b:73:7b:ad:3a:82:
b7:5a:a6:3d:8b:5e:52:e1:a7:b1:a7:23:99:64:84:be:f8:44:
47:de:b9:9d:d8:d4:9a:2e:f8:ab:54:db:73:9d:2f:58:a0:f5:
0f:99:79:3a:aa:9a:9a:09:af:c4:c2:60:85:b9:e7:32:16:c7:
2e:3e:92:1f:8e:0a:89:90:6c:ca:b9:5f:61:a8:23:da:98:70:
ab:35:0c:e4:99:65:27:eb:f0:28:97:15:45:75:5f:0a:55:92:
92:60:8c:bf:35:b4:7a:b9:3a:a8:5f:dc:fe:c7:93:5d:26:11:
f9:4b:3d:f0:9e:36:81:32:95:96:ad:35:78:c8:ba:bf:bc:b6:
71:d9:1a:f8:cc:9b:64:de:69:50:9b:85:0c:1b:ee:66:79:a4:
6b:bb:68:c8:f9:d7:f7:64:df:3d:26:59:44:b2:99:fe:89:d8:
68:4d:ad:19:ce:4a:97:f0:64:fd:32:e4:d9:31:c2:28:8d:db:
9d:77:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:57 2025 by rpki-client