Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6A1DB4287D411F081B144E3DAE4EC9C.roa
File: A6A1DB4287D411F081B144E3DAE4EC9C.roa (raw, json)
Hash identifier: QznQvanQCps2b/RXkDVu1Ilu66iYS8GY1s6++TWV4sM=
Subject key identifier: BD:D9:49:32:6E:A6:61:22:05:EF:BA:9D:E0:3B:88:16:60:FD:BB:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017636
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6A1DB4287D411F081B144E3DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 08:13:05 +0000
ROA not before: Tue 02 Sep 2025 08:13:00 +0000
ROA not after: Tue 07 Oct 2025 08:13:00 +0000
asID: 44901
IP address blocks: 156.229.125.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95798 (0x17636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 08:13:00 2025 GMT
Not After : Oct 7 08:13:00 2025 GMT
Subject: CN=68b6a711-d88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:a0:f6:34:1c:c3:0e:1a:f5:00:b3:34:29:
92:55:f5:43:9e:5f:cc:bf:5a:e5:e0:1f:59:2a:17:
ba:ad:56:f3:0f:e4:90:50:d4:aa:8e:26:49:31:5a:
01:e7:2e:f3:60:18:d8:2d:51:b8:54:c1:dc:3f:3f:
dc:63:c4:26:ba:ed:53:7c:a1:7e:a5:e3:a1:4e:c0:
cf:64:d1:d5:ee:28:ca:fa:2f:bb:51:44:b9:05:0c:
a0:12:b3:af:9e:73:8c:c0:43:62:9f:2d:56:02:b3:
9f:52:86:09:40:db:f9:ed:42:e8:f8:f2:4f:40:07:
7c:e1:20:7f:4a:03:02:e1:00:40:17:6c:5d:bb:e3:
7a:3b:8d:74:74:5f:89:19:f3:85:2d:b5:e9:3a:15:
12:63:56:aa:60:6d:18:eb:2e:20:19:86:13:1a:98:
16:93:35:cf:f1:79:fb:b5:67:41:8c:e5:9f:0a:b2:
00:cf:1e:39:33:0b:34:7a:c6:21:32:ea:5e:81:ab:
61:76:28:65:d8:1f:9e:f7:12:f7:f2:17:a1:d9:47:
1b:a7:a8:40:ad:89:1b:9a:72:70:be:56:ba:2d:25:
6f:aa:8b:fb:06:9b:8e:61:30:a7:bf:47:17:c0:e1:
02:f3:de:fd:c3:88:f7:43:dd:3e:8f:03:98:70:1d:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:49:32:6E:A6:61:22:05:EF:BA:9D:E0:3B:88:16:60:FD:BB:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6A1DB4287D411F081B144E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.125.0/24
156.229.239.0/24
Signature Algorithm: sha256WithRSAEncryption
08:43:2b:13:ce:f1:64:5c:52:1f:cb:6a:c4:2e:8f:25:4f:9d:
82:af:19:75:0f:6e:5d:2b:cd:d2:fe:7c:1c:b6:09:4c:65:6d:
26:1e:06:52:39:31:67:88:d0:fa:77:f6:23:58:98:d0:51:af:
2c:21:40:d3:ec:70:6b:00:ac:b7:22:36:05:fb:5d:08:2e:22:
74:8e:4d:27:07:b0:be:6c:91:49:5b:d4:ea:ed:0b:3c:7d:7e:
c4:86:ca:97:30:73:78:6e:6c:03:34:aa:55:6f:ec:68:f2:61:
52:b8:e0:aa:a6:bc:da:8d:c8:65:7c:14:44:2c:d3:9e:9f:32:
5b:b2:5b:c9:08:33:00:25:3b:b5:2e:c4:a3:ba:1c:c3:1a:31:
e7:0d:c8:bf:0d:08:84:69:97:b4:2e:71:66:c5:70:33:1a:19:
c3:18:c6:34:8b:64:9c:61:03:3a:d0:e8:24:25:ad:e7:b0:2a:
7a:4f:ef:ef:74:aa:d2:90:22:1a:d9:65:e3:b6:31:36:18:ff:
ad:d9:55:74:4b:e7:ef:b9:f2:5e:5d:f6:5e:03:ad:7c:e5:87:
69:a3:b5:a0:ab:b5:f5:82:c2:1d:59:a2:90:ed:bf:ab:2e:01:
97:6b:c4:f2:a6:84:6a:02:0e:6f:71:c1:34:9b:89:c6:ad:41:
b3:2f:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:58 2025 by rpki-client