Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/9B39CC26859D11F0A5E988E7DAE4EC9C.roa
File: 9B39CC26859D11F0A5E988E7DAE4EC9C.roa (raw, json)
Hash identifier: ZTzhPubHt4ABYcrQAhS3FW42RiDE5CrvBfVwIcAQoPA=
Subject key identifier: 41:02:3C:B6:E3:C6:FD:FE:0B:21:EC:86:0F:03:A8:AE:DE:8E:57:B1
Certificate issuer: /CN=F36F5D39AR/serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
Certificate serial: 02AA
Authority key identifier: 02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
Authority info access: rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/9B39CC26859D11F0A5E988E7DAE4EC9C.roa
Signing time: Sat 30 Aug 2025 12:34:01 +0000
ROA not before: Sat 30 Aug 2025 12:33:56 +0000
ROA not after: Mon 30 Aug 2027 12:33:56 +0000
asID: 328180
IP address blocks: 156.38.8.0/24 maxlen: 24
156.38.9.0/24 maxlen: 24
156.38.10.0/24 maxlen: 24
156.38.11.0/24 maxlen: 24
156.38.12.0/24 maxlen: 24
156.38.13.0/24 maxlen: 24
156.38.14.0/24 maxlen: 24
156.38.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F5D39AR, serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
Validity
Not Before: Aug 30 12:33:56 2025 GMT
Not After : Aug 30 12:33:56 2027 GMT
Subject: CN=68b2efb9-6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:f9:7d:c3:fb:ff:65:52:27:2d:e8:84:a4:
d0:14:3c:1b:c1:d0:2a:a5:51:49:03:b8:e6:0e:b6:
92:83:84:cc:01:db:42:5a:17:a5:35:fd:97:c0:85:
aa:5b:7b:f7:41:62:4f:84:49:d1:0a:f0:40:79:36:
3e:cc:b9:17:cc:fc:bf:8e:b8:cf:d6:45:a9:28:92:
db:1a:37:ab:37:4b:8f:f6:39:fb:08:d3:bd:1a:fc:
8f:09:bb:66:ae:cf:e8:bd:8c:d1:b3:4d:a8:63:6b:
14:05:e8:fa:1f:2c:93:72:ac:98:8c:02:43:96:67:
01:ee:1f:63:15:bb:42:d4:e6:cd:f8:4b:14:c4:01:
e9:06:07:84:e6:d2:7c:8a:69:ec:e4:c4:41:31:2a:
1f:44:b5:f6:33:fd:34:21:5a:83:fc:4d:ff:56:98:
97:1c:18:0d:3b:9e:b7:85:77:0d:08:67:b8:14:d1:
d3:ba:e2:63:83:72:4d:69:46:e3:da:8b:18:86:ef:
0d:96:97:6e:9b:aa:b6:be:0f:2b:2e:e2:49:12:02:
d9:d3:61:0c:a8:4f:7b:67:d2:de:8f:ab:63:6e:63:
ea:a8:20:fb:97:86:ef:d3:36:d6:69:87:e3:92:df:
19:c6:94:93:06:38:4f:29:25:dd:a2:a9:aa:4e:45:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:3C:B6:E3:C6:FD:FE:0B:21:EC:86:0F:03:A8:AE:DE:8E:57:B1
X509v3 Authority Key Identifier:
keyid:02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/9B39CC26859D11F0A5E988E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.38.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:83:80:0c:49:4f:bf:8c:11:6e:b9:37:c7:e8:dd:88:7d:cf:
c0:b7:14:b7:ae:a2:4d:fe:ba:05:f7:cd:d8:d1:4e:02:f6:a9:
19:65:b6:c6:84:93:c8:29:a1:8b:0b:bb:b2:f0:1e:33:05:89:
1c:81:9e:2a:be:59:e1:e5:e6:19:03:6c:af:c0:ac:2f:67:86:
bb:19:b1:6f:48:bb:a9:94:91:21:bc:ab:e2:a1:9c:0b:ce:1d:
af:18:89:e6:2f:2d:0c:ef:7f:83:31:2b:8d:e9:fd:54:3b:5d:
66:57:17:b4:1a:48:6e:de:12:a4:bc:a1:8f:d1:62:fd:2d:31:
cc:28:8e:1b:a1:3b:41:66:80:0d:91:82:3b:44:69:32:2a:24:
fb:a4:14:02:f5:46:13:97:8a:8b:26:d1:fa:35:db:45:6f:07:
99:1a:e9:29:0e:82:e5:fe:9b:c5:4d:5e:e5:11:a8:64:1a:6d:
09:b6:f8:93:75:e1:67:b1:06:15:ac:04:48:eb:39:50:44:d2:
a0:ad:4a:c1:c8:ee:22:1c:dd:b9:fb:0d:c2:67:56:aa:79:9e:
39:fe:83:b0:c9:6a:eb:6c:ae:d7:78:3e:bd:55:c5:f0:ef:40:
44:08:74:2f:a1:14:d3:92:86:92:b8:f3:ac:f0:ec:4a:1c:6c:
ae:a7:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:52:09 2025 by rpki-client