Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0054BA2896711F08311409BDAE4EC9C.roa
File: C0054BA2896711F08311409BDAE4EC9C.roa (raw, json)
Hash identifier: AasHPPD+DDZdy7iktM69Hng9dB6hLks+OkMEeKSLKss=
Subject key identifier: C7:3B:E4:88:D1:4B:14:B0:45:0F:78:A9:D9:C0:61:5F:B1:04:86:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01783C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0054BA2896711F08311409BDAE4EC9C.roa
Signing time: Thu 04 Sep 2025 08:18:35 +0000
ROA not before: Thu 04 Sep 2025 08:18:30 +0000
ROA not after: Sat 11 Oct 2025 08:18:30 +0000
asID: 42689
IP address blocks: 156.241.48.0/21 maxlen: 24
156.241.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96316 (0x1783c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 08:18:30 2025 GMT
Not After : Oct 11 08:18:30 2025 GMT
Subject: CN=68b94b5b-94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:93:dd:65:ee:1d:52:91:5c:b6:8b:c9:d6:
dd:de:35:59:93:91:30:06:e9:3b:81:3b:d4:09:b1:
5b:41:6a:b1:4e:80:80:49:dd:68:c4:45:3f:cd:84:
c3:5b:db:dd:2f:3d:b9:fa:b3:bf:69:ce:6a:ec:19:
94:d7:2a:d5:14:62:57:c3:7b:12:f7:a6:40:92:18:
d4:e9:c4:d3:60:51:c0:10:9d:c5:f1:db:b2:86:f5:
48:8d:30:cb:74:67:c2:43:96:7a:4e:9e:a4:44:af:
ae:ef:f8:8d:26:59:f6:91:8b:59:a5:52:7f:b7:76:
a0:c8:d3:ec:15:2e:10:26:d9:98:c4:1a:4f:bc:e0:
4b:63:49:9a:3d:3d:d7:e0:cd:b6:6c:77:73:7a:13:
2f:69:3d:d4:95:dc:d3:e5:0e:5c:09:20:ba:0a:94:
25:48:03:40:52:87:ab:56:20:95:f5:f5:78:d4:60:
0c:68:dd:12:de:c2:be:07:62:5b:45:8b:70:04:8f:
99:2f:2c:66:20:3b:f9:33:4b:4a:1f:08:89:2d:7c:
bf:47:25:a6:a9:95:9f:eb:00:2a:d3:2b:c9:98:7f:
b0:2a:40:2b:6f:9d:4d:46:3c:f6:ab:fb:36:7d:d9:
f6:20:a6:0e:e4:d8:8f:e9:28:a9:71:03:b7:9b:86:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:E4:88:D1:4B:14:B0:45:0F:78:A9:D9:C0:61:5F:B1:04:86:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0054BA2896711F08311409BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.48.0-156.241.59.255
Signature Algorithm: sha256WithRSAEncryption
84:75:f1:ad:b2:79:64:71:3e:71:37:bc:e2:f7:fd:e4:aa:c7:
9b:c3:b2:d9:9c:c7:24:a3:29:de:88:09:7c:c7:e4:61:4e:92:
15:38:73:db:04:da:9d:2f:5a:03:44:2a:f0:07:13:84:cb:fa:
6a:59:c4:da:f5:e3:40:49:fb:6e:25:1e:ba:32:8a:b9:ef:a9:
36:8c:07:13:af:fc:a4:27:c5:27:99:a0:61:df:63:6d:ea:71:
44:4f:a6:bc:98:b9:77:e2:cb:d9:eb:4a:fb:5f:a8:f5:6b:c9:
f3:e8:9d:ef:16:7d:e6:3b:eb:cd:29:51:a4:0c:1a:d5:cf:24:
8a:db:5f:72:68:c6:6a:97:b1:cc:34:5a:68:ba:5d:cf:21:4d:
6c:4d:fb:2c:9c:ea:f1:8b:14:9b:32:de:cb:42:d3:4f:71:0e:
10:f8:ed:9b:76:c6:6c:cf:98:24:5a:3d:3d:05:38:05:38:e9:
43:61:37:5e:21:73:83:ca:e8:aa:36:1f:d6:8f:40:89:4c:e0:
b8:bc:14:a9:3d:fc:5e:05:dd:e8:aa:39:d2:f2:8e:d5:42:7b:
2b:ad:2f:d7:e8:32:ba:2b:df:78:72:fb:49:75:0a:6b:43:6a:
3d:0b:d9:87:48:f1:3c:04:4d:05:c4:52:0f:ae:99:f6:c0:d4:
5b:9a:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:12 2025 by rpki-client