Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6C97D30946A11F080C284AFDAE4EC9C.roa
File: F6C97D30946A11F080C284AFDAE4EC9C.roa (raw, json)
Hash identifier: HD1THiUeqnKkiNUEKuErBme6COn2xu27FQcJ/gkgWHA=
Subject key identifier: FD:5D:DA:29:13:F1:D0:6A:34:F7:2F:CE:B2:64:AD:31:42:E1:17:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6C97D30946A11F080C284AFDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 08:39:18 +0000
ROA not before: Thu 18 Sep 2025 08:39:13 +0000
ROA not after: Thu 25 Dec 2025 08:39:13 +0000
asID: 142286
IP address blocks: 156.253.64.0/18 maxlen: 24
156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97247 (0x17bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 08:39:13 2025 GMT
Not After : Dec 25 08:39:13 2025 GMT
Subject: CN=68cbc536-3649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:71:fb:57:e9:41:00:f5:c7:c7:7b:13:8c:
dc:6f:1a:28:aa:ee:70:00:79:2b:2d:b5:c5:6a:06:
5a:36:0d:84:5c:f6:7e:20:81:6e:df:13:a1:ea:fe:
af:e9:97:40:18:ac:96:43:71:31:75:a9:8f:ab:fb:
9a:9e:b6:2b:1d:1c:45:5d:b5:66:09:4c:ed:1d:75:
d7:79:5b:e9:3a:a5:5c:39:16:63:d5:e3:4a:b0:63:
15:4d:b5:c0:1d:69:0f:a9:79:a9:59:9f:37:a0:24:
d0:e7:60:25:69:03:0f:21:6f:3e:63:6d:6a:a4:60:
45:20:4b:7f:8c:eb:5e:35:e5:9c:db:59:09:d6:e8:
da:b9:40:ce:81:02:7a:ae:59:90:cb:f1:15:ae:a3:
e1:12:8b:40:4a:c9:e9:25:ff:a7:32:6d:35:46:a7:
4b:db:53:1d:5f:58:4e:a7:a6:e4:ee:cf:f5:6d:e5:
46:ee:af:db:0f:06:de:71:a3:6e:42:e4:08:d9:a7:
79:8a:8c:7d:f1:3a:fa:db:88:f7:83:a6:f7:2a:a2:
b1:2d:3f:d3:75:7e:6c:b2:8f:7e:24:c8:13:7a:ce:
5b:44:58:f5:be:46:2b:01:95:e7:bf:be:06:65:81:
09:90:20:82:f6:16:93:eb:24:75:fd:c0:81:78:32:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:DA:29:13:F1:D0:6A:34:F7:2F:CE:B2:64:AD:31:42:E1:17:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6C97D30946A11F080C284AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.64.0/18
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b4:73:73:72:be:a1:fd:1f:14:c6:de:2f:ed:c5:01:37:3f:ca:
98:05:f0:1e:63:77:5c:f1:e8:f9:8d:95:58:41:a6:23:a3:6e:
9d:3d:ca:fc:59:04:b7:67:89:2a:08:b0:95:fb:cd:11:81:6c:
bb:1a:80:c1:b1:d2:b3:bc:5c:c6:dd:a1:7f:cd:cc:ee:dd:45:
63:57:39:c8:b3:82:97:df:32:90:4d:0f:f4:58:8f:0d:71:ed:
eb:e9:cc:a6:a7:e3:90:aa:f1:f7:a5:4b:ab:80:14:1a:34:83:
4c:9a:7c:4b:89:da:61:ae:26:4b:f5:b4:b5:fa:a4:b5:cb:1b:
66:fa:5c:b9:47:57:80:82:81:50:58:bc:ba:e7:50:d8:3e:7e:
e9:4a:be:db:74:85:09:46:e4:41:a7:33:79:2b:e9:32:ef:3b:
37:29:67:a9:84:e6:fe:cc:7a:9a:08:a1:f2:96:48:45:0e:13:
dc:44:64:90:34:a7:89:64:19:62:d0:db:a5:1a:f3:6e:3e:fc:
d0:82:14:bb:e6:3d:30:af:0e:14:e0:b2:8a:e9:5f:1f:fb:29:
f2:dc:e9:97:8e:80:76:51:a0:62:71:45:e1:4c:de:54:24:0f:
76:1c:92:a9:2d:ba:fb:15:f1:77:87:27:fe:52:31:e6:2b:9d:
1b:84:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:44:53 2025 by rpki-client