Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4712FD2841D11F09E0A17A2DAE4EC9C.roa
File: E4712FD2841D11F09E0A17A2DAE4EC9C.roa (raw, json)
Hash identifier: LDZ3E38uSVhUTTTX1pBN04bG15MNKSUubTEpKd9eb3o=
Subject key identifier: CE:D5:AC:B2:35:18:EB:F7:FD:3D:55:D9:BC:46:80:26:89:3E:D6:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4712FD2841D11F09E0A17A2DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 14:47:17 +0000
ROA not before: Thu 28 Aug 2025 14:47:11 +0000
ROA not after: Wed 01 Oct 2025 14:47:11 +0000
asID: 202656
IP address blocks: 156.236.105.0/24 maxlen: 24
156.236.106.0/24 maxlen: 24
156.236.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94898 (0x172b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 14:47:11 2025 GMT
Not After : Oct 1 14:47:11 2025 GMT
Subject: CN=68b06bf5-85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:06:24:45:48:bb:f1:65:27:05:01:26:5a:80:
00:0c:af:b6:5b:e5:88:6d:0a:c0:45:e6:59:7e:08:
88:35:cd:70:b8:00:87:6a:b4:9d:43:12:22:02:f3:
91:ef:83:d2:d1:45:f7:98:3f:63:62:12:97:c3:d7:
fe:a1:2c:30:0d:5a:5a:91:f9:9c:65:b1:10:64:f0:
3a:91:20:0a:29:14:92:8e:1b:98:7e:ce:af:e3:c1:
73:c4:31:f6:6e:af:cd:d5:cf:0b:a1:e1:fa:8d:5a:
98:a0:62:60:ac:cb:99:b3:13:98:2f:84:b6:ff:c9:
b5:5e:9a:c6:ff:58:3a:c8:ce:25:b2:99:38:31:3e:
a5:34:87:47:80:e2:4a:8c:7d:d4:32:78:e0:88:8c:
66:b7:9e:e9:2c:41:b2:4b:4e:63:b6:91:e4:27:a9:
27:d6:0d:d1:da:e1:31:2f:b2:30:69:2d:44:78:22:
3c:ce:67:15:e0:23:68:ce:e8:38:27:cb:3b:c4:d7:
21:39:f1:b7:6b:c3:80:18:0b:02:56:6f:51:7b:d9:
3f:36:f9:44:5e:ce:c0:54:3d:3b:c2:ed:71:9e:69:
68:f7:9c:49:7c:f2:81:45:93:94:df:4a:58:94:d4:
1e:af:f6:e6:dc:ce:28:4c:64:ed:cd:30:7f:f4:91:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:AC:B2:35:18:EB:F7:FD:3D:55:D9:BC:46:80:26:89:3E:D6:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4712FD2841D11F09E0A17A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.105.0-156.236.107.255
Signature Algorithm: sha256WithRSAEncryption
57:d2:3a:db:7b:cb:e0:52:62:dc:49:53:7e:77:0d:40:f5:15:
4d:34:69:47:64:13:12:c7:a5:3c:83:23:11:94:7a:5c:8d:af:
b6:5d:bb:3d:7f:f8:56:94:51:02:4d:69:aa:19:ac:9c:92:83:
ed:7b:30:4a:9d:67:d8:e7:ae:9e:84:ed:4d:a6:1a:5e:91:80:
e3:9e:63:b5:45:00:bf:54:32:7a:1d:69:29:53:49:5d:79:2d:
fa:84:cf:00:8c:53:3e:0d:2d:1a:93:5b:e3:41:42:13:97:b1:
fd:ec:1e:f0:0e:c6:52:1f:51:6f:27:7e:d3:59:1e:03:bc:bc:
94:82:10:eb:50:7b:98:d0:fc:a8:5a:84:81:39:5c:72:49:dd:
e8:cb:b7:79:64:9a:90:d6:76:1a:e3:7e:c4:77:48:af:3a:ad:
af:52:fb:a7:f6:0f:8c:f4:47:4b:9b:09:55:a5:77:23:86:1f:
fb:ca:29:b9:ca:18:14:a6:2f:cf:43:40:de:34:90:1f:67:9f:
ee:26:97:8a:7f:2f:44:a5:a5:d2:03:1c:5c:c0:53:c2:09:b1:
37:5b:02:d2:a5:4b:1a:b3:16:e0:46:32:3b:9f:f2:fe:1e:56:
e7:2f:25:98:70:43:28:c4:c7:c9:2c:a7:d1:48:0e:df:79:83:
2d:11:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:15:28 2025 by rpki-client