Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E80A18895611F09506E0ADDAE4EC9C.roa
File: 87E80A18895611F09506E0ADDAE4EC9C.roa (raw, json)
Hash identifier: 9f4gGIqjTfAkVqcSTcxw56BYQNEj1o4DrKHxmBLTqhg=
Subject key identifier: 8E:78:E7:74:3B:3A:9D:8D:D3:B1:79:D0:8B:F8:42:6C:A4:E5:B3:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01780F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E80A18895611F09506E0ADDAE4EC9C.roa
Signing time: Thu 04 Sep 2025 06:15:19 +0000
ROA not before: Thu 04 Sep 2025 06:15:15 +0000
ROA not after: Tue 30 Sep 2025 06:15:15 +0000
asID: 137547
IP address blocks: 156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96271 (0x1780f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 06:15:15 2025 GMT
Not After : Sep 30 06:15:15 2025 GMT
Subject: CN=68b92e77-7ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:c3:6e:f7:df:d9:64:68:94:32:97:71:c0:
96:5e:48:bf:21:f7:63:01:73:48:63:c5:47:cc:fc:
4f:82:97:4f:f3:8c:99:c7:4b:e4:90:5c:1a:9e:48:
0e:66:c3:dc:64:e6:8b:ea:dd:fd:36:fa:67:3f:17:
fa:81:9c:bc:e5:7a:44:28:23:60:47:a3:e4:4f:66:
72:d5:fe:4e:f0:6e:84:66:33:9a:63:e0:09:05:eb:
e7:80:2a:5c:f0:e3:06:42:84:d3:0b:91:57:26:bb:
30:36:3e:84:77:09:0f:09:1b:45:8d:2c:ba:98:9e:
51:92:b5:fe:25:b6:c9:71:4d:be:2c:0d:75:ad:e4:
97:2f:bd:4f:61:73:7d:99:68:b3:e5:cf:04:fe:e6:
4d:5f:d1:c3:a4:79:d0:2a:c1:24:f1:20:de:85:86:
e0:36:d0:8f:ae:03:1a:62:3f:d6:99:9e:ee:36:d5:
fd:1a:06:b4:b4:0a:4b:b4:41:b9:17:2c:3c:7e:69:
b3:b3:ad:7b:84:59:8b:22:1f:9b:89:cb:ba:83:5f:
86:31:29:82:d7:88:31:3b:16:a7:65:ba:8c:7c:ca:
45:3b:2c:8b:c6:b3:5e:34:02:6c:d5:7c:ad:63:08:
05:8e:78:cf:e6:36:8f:55:b5:36:9e:c7:58:5d:ef:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:E7:74:3B:3A:9D:8D:D3:B1:79:D0:8B:F8:42:6C:A4:E5:B3:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E80A18895611F09506E0ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:6a:41:1e:9d:a2:28:69:96:d7:83:f9:05:27:46:b7:93:30:
16:07:24:2d:09:5b:a2:9f:40:7e:b9:a9:8f:a2:f7:79:85:95:
9d:43:f5:1b:31:a2:2a:e0:21:a9:6c:03:64:b1:76:2e:64:75:
fb:b2:65:dd:3b:61:ee:44:de:a8:ef:43:58:0d:7e:fa:14:5a:
f9:95:e5:5b:10:da:af:3d:1b:4b:19:83:8c:4b:0d:11:98:72:
88:57:65:d0:2d:34:39:27:f4:b4:a4:a6:56:4e:06:d5:72:a5:
c8:cd:cc:02:3d:08:86:43:18:35:de:4f:15:9e:66:5f:e7:87:
d0:bb:7a:3d:a4:f4:8a:2e:fb:a6:a7:d0:4d:f3:96:d2:74:10:
f5:a9:23:2d:cb:6c:9d:c3:f9:b8:a9:64:06:fa:0e:4b:46:86:
54:44:38:22:a3:1a:f2:ea:b1:a2:89:9d:a3:6d:ae:f2:33:1a:
bc:d0:1c:d7:48:59:6c:ee:0a:d7:61:5f:8e:cb:99:dc:23:b4:
e0:30:9d:1f:50:8c:3a:d0:21:78:fb:3a:3b:00:78:85:49:63:
72:7b:d5:80:03:db:12:d2:3f:60:d3:10:a2:bd:7a:91:32:3b:
2f:67:08:a8:f0:39:7b:b9:c9:67:c0:1b:cd:a6:fd:92:f4:d3:
79:38:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:49 2025 by rpki-client