Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86927D68EE111F0AD5A76DADAE4EC9C.roa
File: B86927D68EE111F0AD5A76DADAE4EC9C.roa (raw, json)
Hash identifier: HaxDarZ/Zi+ci3O5xrGdXGz81MZvd0ATV0xLETdFZvc=
Subject key identifier: BC:E4:75:85:B1:EA:85:93:69:45:B6:05:0F:2A:A6:C0:6D:60:76:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86927D68EE111F0AD5A76DADAE4EC9C.roa
Signing time: Thu 11 Sep 2025 07:34:17 +0000
ROA not before: Thu 11 Sep 2025 07:34:12 +0000
ROA not after: Fri 19 Sep 2025 07:34:12 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 06:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96909 (0x17a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 07:34:12 2025 GMT
Not After : Sep 19 07:34:12 2025 GMT
Subject: CN=68c27b78-877d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:ef:f3:cd:85:2e:74:c8:83:b5:7e:0f:33:
e4:78:67:a7:9c:a2:b2:f4:59:07:1b:0d:a4:68:10:
45:22:46:a9:64:be:7e:45:46:68:be:30:3f:3b:76:
7e:2f:c1:d4:00:0d:a7:80:47:2b:70:4b:fd:09:ae:
b5:9a:c8:c6:43:13:b9:34:be:64:c4:17:af:97:d0:
b8:8a:83:76:84:89:7a:cc:f1:0a:d3:4f:e7:25:cd:
44:7c:f8:76:c5:05:2f:2f:53:dd:cb:9f:f7:d7:dc:
e8:db:7b:c7:dc:9d:26:02:c0:33:09:60:fd:52:f5:
9d:ff:ff:58:b3:16:2a:eb:1a:3e:cd:bd:4a:4b:71:
62:1c:08:b0:4d:9b:6c:c8:92:e6:ec:ae:b5:e6:3e:
a5:b9:ee:53:c1:9e:ed:10:d6:24:ed:68:53:5a:13:
74:1c:15:ce:e0:1f:83:4b:2c:1e:67:b4:a7:5d:ef:
01:e6:2d:c6:82:2a:09:e8:fc:e7:a2:1b:f5:e2:e1:
9f:69:e4:05:a5:ed:fc:bf:54:bc:00:2e:7a:fa:11:
9a:25:91:a6:5d:c7:a3:6e:58:b1:72:c1:33:f0:65:
88:72:2a:1a:87:c5:46:a9:36:9f:18:b4:64:5f:e3:
cc:cc:8a:cc:b6:27:9c:d6:1d:53:79:4a:da:66:b8:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:75:85:B1:EA:85:93:69:45:B6:05:0F:2A:A6:C0:6D:60:76:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86927D68EE111F0AD5A76DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
10:31:34:21:12:5e:1b:73:2f:62:8e:dc:3a:b5:1e:a0:06:7d:
3b:e2:d1:59:f6:03:d3:e4:b9:cf:e7:b9:9a:5f:b8:78:5a:15:
86:95:49:ef:bf:58:8f:4a:70:e0:84:2e:a3:27:c9:f5:b3:59:
62:64:85:c6:8e:5a:a3:4d:a4:d0:f4:af:70:3c:b3:b7:87:03:
47:22:87:7a:06:d6:c3:d0:ea:9d:37:f3:95:b8:10:08:d3:76:
86:94:f3:6f:e5:34:52:7e:da:e4:78:80:e8:0c:91:cb:9b:33:
78:11:7d:67:c1:07:9c:2b:e3:49:c0:ff:64:c2:cd:26:e1:90:
49:af:d8:b5:98:0f:29:29:f3:c5:2a:b6:55:ea:67:99:be:3a:
98:2d:96:41:bf:80:7f:b8:86:30:6f:bd:81:c5:22:d7:89:43:
75:62:23:f1:c0:dc:0d:53:01:88:a4:07:be:20:d1:a8:7f:9a:
19:f9:3f:1c:de:87:31:c7:28:f2:08:f4:9a:bd:11:93:c1:10:
4b:77:64:1b:e9:62:37:df:51:ee:ba:8c:c9:2a:02:3d:34:e8:
12:d7:e7:08:35:01:c6:4c:c4:06:c3:5d:f0:ab:dd:35:e2:b5:
8d:9e:4b:4d:46:eb:89:b0:e5:8c:56:09:4b:70:85:04:c8:e6:
f6:79:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 21:07:10 2025 by rpki-client