Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64367908946711F09124B399DAE4EC9C.roa
File: 64367908946711F09124B399DAE4EC9C.roa (raw, json)
Hash identifier: 7m8xraq1gECLuaScImea+9hOVjZAuxd9HiWEMdIAY+c=
Subject key identifier: 07:9C:D7:5F:BE:A7:E3:80:23:D5:0C:57:84:F3:57:75:17:8D:DB:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64367908946711F09124B399DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 08:13:44 +0000
ROA not before: Thu 18 Sep 2025 08:13:38 +0000
ROA not after: Fri 24 Oct 2025 08:13:38 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97241 (0x17bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 08:13:38 2025 GMT
Not After : Oct 24 08:13:38 2025 GMT
Subject: CN=68cbbf37-518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:b0:eb:e6:07:16:09:98:35:2f:19:32:2f:
07:16:6f:d3:4a:17:87:fc:7e:b7:35:2e:7d:87:4c:
c8:da:65:32:f1:e7:bd:10:ed:61:2a:0b:2a:74:54:
2c:94:cd:8d:f6:de:ed:c6:2e:1f:46:5e:af:f8:a3:
7a:e7:63:59:f2:94:f9:37:76:b5:4e:be:a2:5f:9f:
53:bb:2c:1b:50:f6:c5:1c:4e:f8:7b:9c:c1:87:64:
c1:17:c2:b8:8c:8e:45:62:3b:76:92:4e:03:82:28:
ca:33:4e:a0:cb:6c:84:72:b1:c4:98:0d:af:ca:9b:
8f:60:46:79:4f:2a:9a:41:17:88:cf:f1:e6:cb:88:
88:d7:91:5d:61:3e:24:53:a1:00:1e:8e:c9:b2:e1:
06:c7:1f:a3:60:4a:71:54:22:ef:e7:b0:cc:c2:9d:
29:30:53:aa:34:d3:0c:7a:57:f7:c0:86:fa:ff:ae:
5c:3c:af:b1:39:bd:de:98:a6:52:46:cd:0d:e6:77:
ad:c1:76:55:de:06:f9:ec:30:a9:a4:41:8e:aa:e8:
44:98:49:a6:63:89:82:50:40:d6:6d:73:0c:12:9f:
a2:22:d4:5f:1c:bf:1b:1c:4d:34:f4:73:30:4c:e6:
6f:7c:13:dd:37:ac:34:52:f1:db:6a:92:3e:ec:d3:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9C:D7:5F:BE:A7:E3:80:23:D5:0C:57:84:F3:57:75:17:8D:DB:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64367908946711F09124B399DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
5d:57:b6:82:a2:7a:66:87:25:e7:f1:61:cb:d5:7d:d3:0b:11:
22:77:76:52:28:1b:ab:93:90:20:8d:4f:af:27:77:1b:07:e0:
55:d6:a1:9a:7d:be:a6:09:8c:91:c1:4c:4c:83:82:dd:29:fb:
ae:19:35:91:6e:4c:67:a9:6b:08:3d:95:43:08:06:64:6d:67:
7b:42:a3:ed:0d:5c:1b:d2:23:b8:b0:ee:6e:a0:1d:35:f2:89:
99:7c:1d:4c:15:ac:46:f7:df:da:23:a1:a6:36:ea:71:25:24:
77:2c:13:39:38:8a:10:a8:73:1e:7b:74:46:50:47:0e:ef:9a:
f5:a5:50:24:a6:a8:fb:c5:ef:ca:33:06:35:04:fc:b5:de:75:
47:0a:37:60:3e:f6:73:2a:dd:43:42:8a:3b:2e:61:18:73:82:
62:37:08:e0:b2:69:4c:70:93:c9:79:ac:89:e6:d9:ee:c8:b9:
61:95:ed:6d:54:db:e1:05:0a:f0:f9:89:86:6b:11:6b:81:be:
c5:94:fd:8d:01:fe:c2:44:4e:b8:48:c4:ad:3f:dd:7b:9c:ac:
b9:1f:b9:c8:94:38:30:6d:65:94:59:52:ce:5b:6f:19:44:01:
9e:37:14:75:c5:c3:dc:11:88:f4:d2:f1:aa:ae:4d:22:df:ba:
a5:53:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:09 2025 by rpki-client