Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88DE360C896C11F0A33BC2BADAE4EC9C.roa
File: 88DE360C896C11F0A33BC2BADAE4EC9C.roa (raw, json)
Hash identifier: BUGJCKQnqoGRC2rOCir/09XGx94dTdB9fbI6En+ZAGc=
Subject key identifier: 8F:6D:89:BB:96:67:A6:85:C7:9C:25:17:F2:07:A8:F0:73:34:B6:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01784B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88DE360C896C11F0A33BC2BADAE4EC9C.roa
Signing time: Thu 04 Sep 2025 08:52:50 +0000
ROA not before: Thu 04 Sep 2025 08:52:45 +0000
ROA not after: Thu 16 Oct 2025 08:52:45 +0000
asID: 61112
IP address blocks: 156.224.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96331 (0x1784b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 08:52:45 2025 GMT
Not After : Oct 16 08:52:45 2025 GMT
Subject: CN=68b95362-def8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:de:54:a0:85:15:21:8d:f8:5f:a6:75:ff:
be:d1:5e:3e:06:37:ce:06:a9:6f:22:39:ff:09:9b:
cb:87:32:08:13:2f:67:c3:9e:69:33:c2:28:18:9d:
ce:fe:4a:59:12:46:b7:9b:7d:2b:66:58:43:60:25:
36:77:ca:f2:28:0f:36:14:5b:92:39:0c:4a:ba:ec:
c2:43:4b:b6:dc:a6:4e:a3:c5:db:60:c9:58:0e:ec:
cf:c1:81:1c:3d:c7:16:f3:56:1a:3c:38:e1:9c:9c:
4a:37:f9:e7:bb:41:91:64:da:81:4c:74:47:b2:c7:
6e:de:65:1c:87:52:a7:b8:37:8c:81:f6:29:e7:f4:
73:6f:e4:5c:39:87:ab:d6:6d:8b:fc:99:4f:ee:d9:
98:1b:8d:ee:cf:0b:ae:b5:4b:a7:53:d5:29:b2:93:
73:df:48:08:2c:62:79:4a:6e:47:70:75:a0:64:76:
5c:8a:b6:d0:d7:25:d1:83:5d:aa:fd:5f:cf:67:74:
34:b8:16:5a:62:9d:e7:77:41:5c:57:e2:d3:1a:4f:
e0:dd:10:1a:27:b3:fe:19:7c:9e:1c:5d:7e:fe:8f:
b9:e0:12:70:c3:aa:a7:bc:2e:47:54:4c:ff:d1:2b:
15:25:1d:1b:9d:88:96:de:9c:c4:93:51:1c:b5:8e:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:89:BB:96:67:A6:85:C7:9C:25:17:F2:07:A8:F0:73:34:B6:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88DE360C896C11F0A33BC2BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:27:c8:e0:14:5c:ca:8e:04:48:20:61:67:2a:45:9c:88:5a:
a7:df:a9:a3:51:b2:1c:61:1e:00:da:36:8c:99:01:14:83:a9:
f8:6a:8d:3b:38:bf:c9:61:d5:26:36:a7:45:7b:b7:9a:00:bc:
bd:5b:cf:88:9a:9f:8c:2a:a9:f4:a9:3e:54:53:eb:d4:48:57:
c9:2a:d1:e4:3a:b9:cf:af:c9:7c:7e:c0:07:d5:f2:78:d0:a9:
72:9d:fb:98:88:07:fc:ec:b4:01:cc:03:09:1e:94:b2:81:18:
24:b6:d4:08:11:dd:c6:3f:e8:0d:f1:d3:24:1c:52:82:a2:59:
f5:d9:71:20:a8:9c:08:db:91:23:6e:26:57:d7:55:45:94:ed:
f9:dc:6c:b0:d0:a6:35:61:3a:bf:a4:de:79:ae:69:da:dd:7b:
24:c3:04:f1:02:83:f1:46:1f:ba:f7:fa:c2:ce:5a:68:d3:5a:
f6:89:e7:d6:aa:e7:83:b1:51:00:fc:2e:e2:b1:7a:35:7d:b6:
02:be:a4:73:db:f6:9e:b3:f9:d9:a6:8c:22:0c:10:62:fc:fa:
bb:f4:ad:bd:f5:18:c0:75:b0:65:5f:44:4c:58:53:05:b5:c8:
09:25:6f:a5:07:6d:bc:8c:e7:3f:7a:bc:e1:a6:78:f1:ab:fb:
fc:e7:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:42 2025 by rpki-client