Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF0C88A2834E11F0AE778ED3DAE4EC9C.roa
File: AF0C88A2834E11F0AE778ED3DAE4EC9C.roa (raw, json)
Hash identifier: b+XiFJbSi0sWF5s3AHfh6hSb+rvhxG6SRY7x68OxSm0=
Subject key identifier: 82:8C:E1:02:7E:CD:EC:6F:E5:CF:CB:2D:F4:A3:5B:3A:C0:50:11:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF0C88A2834E11F0AE778ED3DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 14:04:02 +0000
ROA not before: Wed 27 Aug 2025 14:03:57 +0000
ROA not after: Fri 10 Oct 2025 14:03:57 +0000
asID: 138915
IP address blocks: 156.244.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94661 (0x171c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 14:03:57 2025 GMT
Not After : Oct 10 14:03:57 2025 GMT
Subject: CN=68af1052-582e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:46:14:67:de:2c:d0:34:a8:a9:c9:52:b6:
ae:92:8b:12:4f:8d:a3:17:b4:88:15:b9:39:d3:31:
d9:14:1b:66:db:86:56:a4:ff:32:b9:f4:0f:63:f3:
59:b8:d0:39:5d:03:df:c6:4e:ec:c6:e5:4b:15:ff:
99:cc:eb:32:d1:12:77:cf:b5:7e:63:af:2a:ad:5e:
c7:67:c9:be:2f:31:34:7d:c3:f5:cc:fc:0a:67:d7:
2d:c2:96:f5:9a:99:ae:fd:96:6f:0c:42:25:27:bf:
e9:0f:f6:79:bc:0d:6d:00:4f:87:99:2e:ec:a3:8c:
df:4a:e4:2c:16:5a:68:0a:ad:0d:37:47:95:2b:d6:
67:e9:4f:cc:19:fd:70:15:2e:d9:fa:02:0c:dd:57:
b3:92:ef:2d:bb:dc:77:a5:e2:40:db:2c:a9:57:e8:
79:a1:61:41:b2:df:11:32:13:22:2f:bc:c6:0b:77:
07:ab:4d:c4:86:03:02:b6:ca:e8:bf:c5:eb:e9:f0:
9b:a1:52:a9:2a:f0:36:72:8a:c6:e4:d0:d0:01:ea:
76:9a:5e:63:71:57:af:d3:15:10:a5:4c:a7:1e:13:
8a:1a:d3:7b:16:fa:f6:45:e3:31:60:aa:38:de:e3:
45:b6:0f:20:34:38:62:ab:87:34:f0:75:d1:b6:16:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8C:E1:02:7E:CD:EC:6F:E5:CF:CB:2D:F4:A3:5B:3A:C0:50:11:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF0C88A2834E11F0AE778ED3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:31:f3:d8:5d:89:4f:bd:c7:33:19:95:f9:7d:44:12:e1:f4:
6e:61:dd:0f:b8:83:5e:d8:ae:41:e8:6d:b4:17:8d:3b:08:c8:
14:66:d4:7b:70:c0:7b:42:24:37:ca:b7:77:fb:0e:19:2d:39:
a5:5c:c0:f9:56:64:d9:e4:4a:48:cd:2c:df:89:74:3a:19:7b:
02:5a:d8:78:bc:dd:a3:57:61:e4:3c:ce:bd:88:a4:da:f2:28:
29:d1:f1:93:d9:c2:c4:c2:2b:f1:f6:74:52:5a:0b:ed:92:71:
91:e3:dd:bd:70:b4:13:94:7d:8d:67:35:10:39:71:72:eb:06:
98:05:f3:6a:6a:ac:1a:56:ae:54:bf:e9:e1:eb:57:71:f6:5a:
de:13:f2:f0:09:cd:cb:d1:e4:63:4c:c8:2f:86:db:59:7a:7c:
9c:4d:7c:b8:89:82:d0:ba:7b:a6:99:0e:a6:82:3d:b4:3b:a2:
ba:ef:d7:fb:57:a4:a6:87:35:49:e7:aa:5c:dc:a3:b6:72:c2:
89:7c:fb:bb:02:38:98:29:b9:97:81:29:e9:51:db:cd:bd:eb:
16:8f:a6:46:20:9f:88:cc:55:49:57:d2:c6:6a:cf:e2:66:14:
43:c4:41:26:e4:72:7d:6d:18:a1:c1:15:e2:cb:ef:d0:a1:4a:
45:ff:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:51 2025 by rpki-client