Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08F0C6CA6FCD11F0A464798BDAE4EC9C.roa
File: 08F0C6CA6FCD11F0A464798BDAE4EC9C.roa (raw, json)
Hash identifier: dAW0r9FSAbB4Ij/Zz1/E0rA6ky7dkLhN5IvpRHpDWog=
Subject key identifier: 9A:84:18:D9:36:A0:C9:35:F5:C1:AE:BA:57:DB:ED:3B:97:6E:AB:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08F0C6CA6FCD11F0A464798BDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 18:18:06 +0000
ROA not before: Sat 02 Aug 2025 18:18:01 +0000
ROA not after: Wed 10 Sep 2025 18:18:01 +0000
asID: 8796
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92358 (0x168c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 18:18:01 2025 GMT
Not After : Sep 10 18:18:01 2025 GMT
Subject: CN=688e565e-6881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:a6:10:ec:fa:3f:a8:b5:f4:de:18:6a:29:
23:a8:76:2a:16:33:b1:65:13:92:f4:03:68:9d:93:
db:6f:b5:84:3b:63:30:fe:17:23:1a:8c:81:a9:b1:
af:08:66:80:d1:f5:73:7d:32:b5:39:ef:ef:66:f1:
23:e5:c8:32:9d:f3:a3:34:61:c2:eb:4e:e9:c1:31:
2f:6e:23:8b:60:1a:e6:e1:04:e2:a8:5c:a1:55:69:
bb:cc:24:6c:10:a1:34:3a:5f:d2:4e:05:7e:a4:11:
49:7a:64:2b:40:b4:6d:d9:28:51:9d:ec:ad:57:f7:
1b:a4:34:37:ff:10:88:a0:b0:92:83:90:7e:93:e1:
a4:e5:6c:1e:c1:bd:fc:e5:93:6b:f4:a5:c2:d1:49:
7b:c2:63:bc:1e:f3:10:56:4a:be:81:5a:b0:08:7d:
04:f8:70:a8:dd:54:59:d4:c1:a8:b9:63:14:f2:35:
c4:5e:57:69:d9:99:a1:c4:35:c3:a3:f6:35:04:ae:
f2:7a:4d:b1:db:d9:44:82:fb:3a:9f:b2:cd:36:32:
da:2c:72:22:bb:ab:fe:2f:3a:cd:73:1b:f7:21:b0:
eb:94:2b:66:58:bc:7d:22:0d:3a:8f:59:72:56:30:
d4:92:5c:18:cf:f9:c5:7d:e6:d0:37:cc:54:31:ef:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:84:18:D9:36:A0:C9:35:F5:C1:AE:BA:57:DB:ED:3B:97:6E:AB:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08F0C6CA6FCD11F0A464798BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
92:48:0e:87:1e:d9:31:b8:bb:34:25:ec:dd:a8:14:74:c7:e7:
c5:16:08:d5:e8:88:0f:09:76:d4:e2:76:e1:66:07:08:27:29:
7f:03:bc:3a:5e:c5:57:9c:4e:93:90:f1:7b:d2:26:86:ca:1b:
67:ab:c0:5d:e8:55:f7:18:8e:b5:89:20:72:4d:8b:1e:0e:91:
0a:17:c6:6d:03:26:5d:43:6f:ad:25:a6:35:81:13:a7:44:e1:
15:09:85:f7:8d:ba:52:82:7d:cd:44:0a:6f:b1:2f:ea:b3:1a:
64:bb:61:2d:87:e9:e6:ff:63:8e:ba:cd:e0:0d:77:a2:21:93:
16:8d:af:ec:c0:7c:2d:94:1c:b2:f3:72:26:88:9c:07:88:46:
05:0d:da:58:b7:df:16:c4:c4:a8:3a:9f:4e:b1:9c:43:73:2c:
f0:5d:ff:52:df:fc:2e:d4:e6:3e:e3:8c:1a:45:b6:b1:bd:27:
96:3b:42:e0:05:ec:3b:53:cb:6b:77:7d:d5:3b:d2:3f:1d:c6:
fc:c1:34:51:7c:39:ab:96:ed:f3:f5:1b:22:71:2d:c2:ef:86:
43:9a:17:ac:2a:48:b3:aa:db:f6:a5:91:4b:60:ad:86:0e:82:
9d:61:83:54:2c:86:45:ac:3d:8c:8a:eb:9c:e1:07:54:85:2a:
fb:fa:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:04 2025 by rpki-client