Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBFB2A7E79B111F094C46B91DAE4EC9C.roa
File: BBFB2A7E79B111F094C46B91DAE4EC9C.roa (raw, json)
Hash identifier: LIaBVN/MPafxDz1mbm4pjdK/E/CjRWWzg5yk/57qF78=
Subject key identifier: 41:52:D4:D0:CE:99:7B:41:52:08:60:AD:53:B7:54:4B:C8:A1:2A:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016B2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBFB2A7E79B111F094C46B91DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 08:27:52 +0000
ROA not before: Fri 15 Aug 2025 08:27:47 +0000
ROA not after: Mon 25 Aug 2025 08:27:47 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92974 (0x16b2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 08:27:47 2025 GMT
Not After : Aug 25 08:27:47 2025 GMT
Subject: CN=689eef88-569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:c1:e4:0b:b7:28:39:c9:8a:48:a3:c2:8b:
8d:4c:28:b5:d4:41:04:ec:71:60:0a:13:f9:57:d9:
df:c8:a3:d0:f0:21:e7:b2:56:82:e8:78:dd:fd:4f:
fd:89:6e:dd:eb:b5:4a:13:e7:aa:4c:74:42:75:cf:
76:3e:3e:d0:e6:7b:a8:7f:58:79:1e:6b:8c:3e:51:
af:2c:05:6c:90:84:ba:b6:a4:65:f0:c1:d1:c1:df:
34:f0:05:7d:13:58:e6:89:39:ca:5e:58:38:bc:77:
a6:e6:14:1c:74:04:c4:fa:23:69:4c:87:64:a9:8e:
82:fd:65:25:8d:0d:74:62:c3:80:de:dd:4c:5e:98:
fe:9e:64:92:af:fb:8d:4f:45:0b:99:68:05:a8:33:
6e:4a:48:69:d1:55:1e:93:18:d2:11:d3:79:3d:46:
5f:27:98:ae:44:14:5e:98:1d:77:2c:24:1b:f6:25:
1f:f5:16:1a:54:42:fd:a0:36:40:4c:48:f9:3b:85:
60:a4:46:08:cc:c4:e2:2a:7b:6f:16:79:d7:a9:75:
84:3b:6e:c1:22:03:16:37:66:9b:45:ab:db:d6:74:
d5:3b:c4:c3:d3:c1:13:18:6c:24:69:ca:54:4d:65:
e7:2b:7f:6b:da:29:fa:82:55:f1:fc:94:e2:1c:9d:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:52:D4:D0:CE:99:7B:41:52:08:60:AD:53:B7:54:4B:C8:A1:2A:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBFB2A7E79B111F094C46B91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
07:da:ba:e9:21:4b:e2:72:2f:a0:f2:a7:c9:10:54:d4:5e:2a:
dc:32:8d:70:47:35:2a:1f:14:fe:88:f9:9a:24:9d:23:85:2d:
67:0a:06:b9:7c:92:0c:6c:8d:60:d5:d1:df:ee:fe:54:cd:d3:
e4:a3:ea:b3:97:d9:b6:de:d7:90:09:36:88:06:7c:96:c1:f8:
2c:2f:07:bc:72:b1:01:7a:19:65:7d:cb:9b:10:fc:b7:67:4b:
54:f6:c7:b6:bb:94:47:d8:41:18:0f:65:54:76:23:bb:e3:f8:
38:fc:cd:f2:fb:f9:df:1b:54:c2:a1:2e:92:ad:45:e2:62:3e:
a2:88:b8:66:e3:a4:eb:c1:aa:d4:94:c8:a5:56:83:42:8b:46:
cd:c7:3f:06:cd:50:b2:99:32:bd:74:e5:69:3c:5a:5c:94:71:
ac:fa:eb:f1:75:dd:54:6b:16:48:1f:0c:09:b9:c2:b3:11:c7:
4c:0d:11:99:91:a4:ab:74:2b:a3:5f:16:c7:26:2d:ef:c9:dd:
3c:59:ab:34:3f:39:6f:32:b2:ee:c1:2e:d7:9b:ee:4d:75:16:
61:b5:31:b5:d4:6b:a2:ab:a1:18:0d:09:73:62:5e:f4:0d:77:
07:1c:9e:2c:6a:06:64:60:54:7e:a5:99:11:f9:ee:7c:05:b5:
0d:66:0b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 23:26:42 2025 by rpki-client