Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4378024831C11F09EDC7D90DAE4EC9C.roa
File: C4378024831C11F09EDC7D90DAE4EC9C.roa (raw, json)
Hash identifier: K0tzH/Lcc7l0uXwyhur7B+iWUvDmV540xoqH46BuT5s=
Subject key identifier: D1:6C:DC:1F:CF:F0:4C:0D:6C:F5:C6:BE:A3:9C:E4:59:40:42:F9:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017133
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4378024831C11F09EDC7D90DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 08:06:43 +0000
ROA not before: Wed 27 Aug 2025 08:06:37 +0000
ROA not after: Sat 20 Sep 2025 08:06:37 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
156.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94515 (0x17133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 08:06:37 2025 GMT
Not After : Sep 20 08:06:37 2025 GMT
Subject: CN=68aebc92-6b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:8d:58:2f:71:62:dd:9f:c8:a1:4b:7b:c5:
6c:26:db:d6:b1:01:73:51:88:7c:0f:a3:a7:1b:d5:
ca:48:b7:4c:c3:7d:5a:a6:90:5b:e5:51:78:3b:19:
9c:5f:39:12:97:df:80:29:c1:16:97:53:66:6f:13:
e5:ce:3e:42:07:c1:a0:c8:ad:9d:d6:9c:fe:a6:67:
a3:75:81:92:5a:2e:97:4b:77:9a:de:3f:c7:40:3b:
6d:e9:83:8f:3c:46:de:a0:2f:cf:24:4b:bc:27:45:
c8:5a:33:19:09:38:c3:7b:b0:6d:58:74:e7:75:a5:
56:d1:84:fa:35:e5:2a:13:13:60:e9:fe:1e:62:95:
b2:1f:40:b8:77:e3:7c:28:4b:07:7f:bc:34:1b:e8:
04:60:f2:39:d4:33:31:de:05:0a:2f:ce:b3:10:00:
9c:bf:04:ca:5d:5c:58:63:10:42:49:4a:d5:1f:63:
52:a2:07:bc:5d:c8:54:df:50:21:8f:39:2a:60:f2:
45:24:d6:a1:dd:8e:4f:22:5f:c1:fc:d8:1a:a8:dd:
c8:ac:f2:15:db:99:29:10:7f:0f:8f:b9:5b:55:92:
98:c2:da:99:91:5b:2e:e4:1d:0d:92:05:cf:f3:cf:
ad:9f:f2:81:8d:3d:60:f4:a6:bb:21:86:8a:93:3f:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:DC:1F:CF:F0:4C:0D:6C:F5:C6:BE:A3:9C:E4:59:40:42:F9:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4378024831C11F09EDC7D90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
83:0a:b0:30:1a:a2:37:64:5c:05:7e:72:04:4d:fd:13:99:c6:
f7:ed:cd:4d:a3:f4:5b:ff:30:82:40:4a:40:5a:63:db:8d:17:
67:11:5c:75:6f:35:01:d0:da:4f:f5:94:63:83:36:e4:b7:3d:
42:97:8a:d0:f0:2d:87:0f:d6:62:d6:34:f8:0d:39:a7:63:cd:
34:c9:24:2e:ea:98:ec:d9:98:f5:e5:74:05:37:4d:4e:5a:08:
d5:d6:4e:fa:01:cd:34:ac:35:20:1e:e0:08:c4:32:6d:16:86:
a3:16:72:68:e8:44:38:11:8e:7c:5b:ec:b4:3b:d1:1a:36:39:
66:39:f3:7c:67:a4:2b:96:16:a1:d0:45:7d:7d:db:16:40:5a:
4f:f7:b8:fe:07:4e:f5:2e:c9:71:bb:e5:ae:93:7a:74:c7:65:
d7:8f:7c:9d:f6:1e:71:68:5c:24:aa:9b:06:32:9d:0f:7e:aa:
b4:dd:af:f7:bc:92:f1:b4:93:c5:ec:ee:c3:90:9d:0f:5d:d1:
da:35:09:5a:07:ab:98:6b:25:0b:e4:11:44:05:86:03:62:4b:
f0:5b:fb:74:f8:b7:80:d7:5d:9b:0b:b4:3c:21:c8:20:c1:e6:
fa:63:b5:41:66:7b:8b:1e:26:d4:dc:a8:37:6b:d5:37:e7:01:
d8:58:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:21:58 2025 by rpki-client