Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF93A32A834D11F0BBB802CEDAE4EC9C.roa
File: EF93A32A834D11F0BBB802CEDAE4EC9C.roa (raw, json)
Hash identifier: f6ld62nEPS+5QudboWdUDOUMT5TNozMBTiD4pI5ylBc=
Subject key identifier: 54:CE:72:ED:57:50:7E:D0:FB:41:07:F4:60:60:4C:1D:DC:72:1E:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF93A32A834D11F0BBB802CEDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 13:58:41 +0000
ROA not before: Wed 27 Aug 2025 13:58:36 +0000
ROA not after: Fri 10 Oct 2025 13:58:36 +0000
asID: 138915
IP address blocks: 156.244.9.0/24 maxlen: 24
156.244.10.0/24 maxlen: 24
156.244.11.0/24 maxlen: 24
156.244.12.0/24 maxlen: 24
156.244.13.0/24 maxlen: 24
156.244.14.0/24 maxlen: 24
156.244.15.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94659 (0x171c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 13:58:36 2025 GMT
Not After : Oct 10 13:58:36 2025 GMT
Subject: CN=68af0f11-c6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:a3:26:bd:9b:7f:47:70:15:f5:e0:55:8e:
14:37:26:9d:85:ce:84:53:1a:24:6d:d2:b4:ec:ab:
58:b7:2e:11:cc:39:8b:ad:75:c0:d9:a4:12:68:f8:
4f:a5:a9:35:2d:6f:2b:69:01:71:d7:25:06:62:db:
d0:d3:0c:da:6b:06:9a:55:41:53:f6:ac:1e:a5:a6:
bc:e1:32:03:96:36:75:8f:fd:1f:aa:42:67:cd:a4:
11:7b:5e:de:08:42:0e:f7:6f:67:cd:c0:70:3c:a3:
68:cc:98:b2:d0:69:c9:7f:5c:bc:02:e2:2d:b3:c6:
d0:5e:79:da:ff:9d:74:6a:68:4f:ff:4e:82:0f:72:
9a:c9:57:85:e3:e1:88:98:ae:f0:e5:28:68:ba:e2:
f2:65:9f:ad:56:5e:33:90:9d:fb:2e:25:3e:67:b9:
67:3e:1f:78:2b:ed:1e:aa:c6:25:7f:18:1f:6c:52:
92:32:49:c4:c8:f6:6d:6b:c8:f7:c0:91:68:5d:f0:
e0:91:a9:bb:41:59:ba:82:83:19:42:85:c4:47:c7:
e4:37:be:d2:20:71:9c:24:f9:b4:7d:d8:ac:a9:1a:
b9:9a:d1:a6:1e:39:48:3d:d5:30:90:27:d3:04:06:
45:3d:57:d1:fc:12:07:9f:1c:50:86:b3:a3:70:df:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:72:ED:57:50:7E:D0:FB:41:07:F4:60:60:4C:1D:DC:72:1E:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF93A32A834D11F0BBB802CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.9.0-156.244.15.255
156.244.37.0-156.244.38.255
156.244.62.0/23
Signature Algorithm: sha256WithRSAEncryption
57:48:9f:ef:4a:76:6d:0a:1a:0d:67:44:4e:45:67:39:67:4c:
3f:3e:81:1b:3f:37:98:8b:85:08:26:e2:4c:87:6a:d7:92:4b:
a5:69:44:ff:19:4c:2a:d5:4a:4f:ea:2d:e3:f1:aa:59:29:a5:
12:f2:28:53:f3:62:d3:65:d4:8e:81:ca:64:fe:4b:e8:7f:4b:
ac:b7:49:81:a7:2d:4c:c7:11:f7:5b:05:b3:38:8a:cb:6e:81:
65:ff:f6:88:78:cc:7a:fc:27:df:f5:8d:94:1a:97:bf:24:81:
33:25:28:89:75:8a:32:f6:93:26:48:3a:91:41:76:bb:b5:09:
a1:89:fd:4e:d2:c0:c1:1e:8e:b9:fc:e1:c8:2d:92:94:e2:cd:
26:fa:0d:27:ed:02:f5:80:ec:d7:a2:b8:5c:16:c8:ae:a0:63:
1f:6c:eb:ea:52:d5:bf:a1:20:8c:e4:b7:50:a6:21:9d:0c:bb:
bb:4b:f4:39:9a:c9:67:4f:38:94:0d:8b:6b:2c:29:7a:fd:ce:
eb:87:1a:4a:22:b2:85:8f:05:e7:14:db:3a:0f:19:2e:4d:56:
7a:2a:cb:83:61:61:ae:46:16:7b:eb:ae:7f:a4:62:a0:e6:11:
fb:03:0b:b8:a9:47:ff:2d:45:9d:67:99:9f:e3:e1:1e:10:ee:
c5:0b:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:10:52 2025 by rpki-client