Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8F86C08879B11F0A404E9DFDAE4EC9C.roa
File: C8F86C08879B11F0A404E9DFDAE4EC9C.roa (raw, json)
Hash identifier: 1QXcqP9JbcQqC6C7DUj5l0o1A/Mj864IJXBPm9OKsao=
Subject key identifier: A4:60:66:65:F3:20:39:85:81:23:89:04:DD:66:63:15:90:0D:44:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0175CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8F86C08879B11F0A404E9DFDAE4EC9C.roa
Signing time: Tue 02 Sep 2025 01:26:01 +0000
ROA not before: Tue 02 Sep 2025 01:25:56 +0000
ROA not after: Thu 02 Oct 2025 01:25:56 +0000
asID: 62513
IP address blocks: 156.225.32.0/21 maxlen: 24
156.225.56.0/21 maxlen: 24
156.225.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95691 (0x175cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 01:25:56 2025 GMT
Not After : Oct 2 01:25:56 2025 GMT
Subject: CN=68b647a9-c956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:57:60:60:18:d9:15:cb:8e:42:3f:59:23:
86:20:04:09:1a:cd:47:45:1d:27:1f:f4:78:e6:f9:
63:12:06:e3:bc:bb:db:6b:19:d3:bb:a5:94:e5:04:
62:4d:ab:ab:1c:b5:0d:0f:ae:45:14:1b:e9:fa:1b:
43:3e:09:9c:ff:cc:78:0d:21:df:e0:56:43:21:e0:
2e:31:70:01:88:7c:a3:b5:ac:43:ff:6e:83:8f:ad:
d7:1b:96:27:fa:d1:a6:be:06:14:89:db:ed:9c:f5:
cc:7a:75:66:44:f0:55:f0:1f:9f:24:4c:42:e6:b7:
46:2a:9a:72:81:38:a5:40:64:a7:5e:ab:7e:c2:1d:
05:b3:d4:e2:d1:e1:ee:57:9b:a7:3c:06:03:b8:54:
8a:0b:21:54:9b:97:de:b5:be:90:65:c3:d9:83:20:
f3:27:c9:0b:7f:cf:2d:ff:38:2a:b3:2d:a7:95:14:
c3:02:23:45:67:bb:c8:38:e2:55:14:94:5f:9c:44:
e8:56:80:75:12:8f:8d:cd:4e:8e:05:30:6e:dc:75:
ee:2f:3e:f4:73:e0:0b:bb:6c:8d:22:2c:98:8b:70:
5a:0d:13:bb:6f:a8:b9:d3:a9:43:8a:72:b5:0b:3a:
d3:c1:d7:3b:ae:f1:2b:cc:db:58:31:33:40:64:2c:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:66:65:F3:20:39:85:81:23:89:04:DD:66:63:15:90:0D:44:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8F86C08879B11F0A404E9DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0/21
156.225.56.0/21
156.225.184.0/21
Signature Algorithm: sha256WithRSAEncryption
17:45:f5:1a:b5:1e:94:13:eb:24:2f:40:f5:d7:a4:64:95:1c:
83:06:8b:4c:8c:3f:69:f5:17:0b:41:9e:1d:87:e9:4e:c9:c4:
23:f1:cf:3c:8e:7b:10:30:87:2f:5f:2d:a7:3b:df:e8:0d:9a:
ad:f9:00:ca:ba:7d:f2:3c:3e:5b:33:d7:7b:65:e7:8c:fd:d3:
88:a2:53:dc:50:eb:ff:63:2e:0e:62:52:f5:cc:35:da:7c:ce:
7d:07:cd:b9:95:e9:d8:bc:41:1f:78:7c:92:30:52:fc:4e:f4:
a3:03:80:3a:77:2e:ad:a8:71:4e:d4:d1:fb:b3:2a:9d:b4:2a:
29:9d:7b:2f:74:83:c7:85:7b:ae:55:09:47:fd:8d:40:ef:1e:
63:84:49:01:08:c1:49:f2:38:52:3c:aa:d4:e4:c0:19:5f:9b:
fa:75:70:82:fb:8a:59:a0:b8:0b:a0:83:0e:c7:54:a3:42:3d:
21:69:9c:e7:06:65:be:72:c9:d7:dd:17:53:1c:39:28:06:2a:
0f:5d:20:4a:f6:15:ef:15:67:a7:7b:e0:72:7f:5d:c6:a4:fd:
40:55:ce:7f:00:26:dc:12:9f:b2:64:30:7c:7a:04:56:11:60:
5e:82:0c:74:ef:68:cf:77:18:2a:cc:3a:53:ad:0c:ab:48:9b:
c3:bd:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:12 2025 by rpki-client