Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35F1C8326ABD11F0BA197EA0DAE4EC9C.roa
File: 35F1C8326ABD11F0BA197EA0DAE4EC9C.roa (raw, json)
Hash identifier: cAP45sioEjWQA7WRXyJE7OIUU2K0mAVXlrYNYnmDHx8=
Subject key identifier: 5F:3F:A2:E3:99:6A:E0:2F:F0:8F:C5:8E:E4:5C:D3:4B:79:16:CD:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0167CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35F1C8326ABD11F0BA197EA0DAE4EC9C.roa
Signing time: Sun 27 Jul 2025 07:42:14 +0000
ROA not before: Sun 27 Jul 2025 07:42:09 +0000
ROA not after: Fri 15 Aug 2025 07:42:09 +0000
asID: 138415
IP address blocks: 156.226.167.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92109 (0x167cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 27 07:42:09 2025 GMT
Not After : Aug 15 07:42:09 2025 GMT
Subject: CN=6885d856-b445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:5c:3c:45:87:be:92:c2:ed:37:af:3d:93:
53:29:15:86:bb:f6:b7:36:24:3b:16:ee:b4:36:ee:
76:46:75:3d:e9:6c:00:45:c9:2d:b5:5b:e5:91:28:
79:30:0d:53:e3:65:c9:05:d2:6b:58:d4:c6:ae:e6:
03:95:c7:2b:61:fd:c7:50:8e:9a:8e:a1:be:71:bb:
46:b8:b8:b3:62:a4:0f:a8:5f:c6:3b:46:15:0a:09:
6f:7c:31:62:d7:a8:8e:cf:07:2e:88:cc:95:25:8a:
7b:91:c5:fa:e7:ca:76:25:f2:0e:9d:73:98:04:99:
a2:43:76:1d:28:ca:51:c4:ab:b8:23:6a:48:62:a0:
ee:1e:54:12:e6:4e:03:09:61:3e:f6:a6:1c:3e:69:
f6:66:83:8d:87:d8:88:49:32:0b:bd:a4:6b:8f:90:
81:92:bc:c2:ba:54:8e:60:9d:da:2d:18:51:16:50:
46:14:26:60:f0:51:16:90:93:bc:65:88:ad:e6:29:
48:96:a9:d7:66:9f:45:f0:84:9e:a4:e7:62:f7:43:
48:89:9c:54:a3:1a:8e:32:92:0f:b4:7e:b5:74:72:
31:5e:e7:91:3a:b5:e1:76:3a:3c:d9:08:15:b0:2f:
5d:bc:03:64:dc:8f:4c:67:1f:22:b3:fa:1e:86:de:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3F:A2:E3:99:6A:E0:2F:F0:8F:C5:8E:E4:5C:D3:4B:79:16:CD:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35F1C8326ABD11F0BA197EA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.167.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cf:23:8e:3d:19:71:e8:c2:f3:83:61:d0:f9:cb:c7:97:78:
06:7a:c3:38:e3:69:3f:ce:7f:07:ba:42:ee:a6:fa:ed:63:98:
c2:8e:eb:ff:34:22:53:74:c6:d0:e3:92:d9:a6:23:7e:8e:f6:
71:5a:03:24:f7:ee:b1:e9:d1:e2:90:56:c7:a6:52:bc:95:b4:
3b:db:a8:61:95:46:32:18:ac:2d:39:8a:f8:c4:f4:b4:f9:24:
3f:a7:95:42:51:81:f2:f3:28:d1:7b:7e:02:70:2e:36:06:82:
91:ce:fd:74:51:e1:95:22:6f:af:c1:d3:53:b6:66:2e:04:62:
79:8c:76:26:31:18:31:a8:3d:8c:64:66:ce:30:09:f6:14:5f:
fc:c0:04:b8:40:34:26:66:2b:5f:40:c4:d5:2e:68:d3:93:b8:
c7:34:b0:41:2c:81:45:48:d5:07:a5:2a:53:ed:e0:ad:2c:3c:
0a:25:79:fd:ed:4f:94:e5:c3:2d:39:89:10:83:07:0f:45:0e:
9d:1a:cb:5e:41:ec:a5:ef:1a:c8:f1:a9:b8:07:75:99:c5:e5:
81:e4:28:76:eb:b5:ee:e9:58:8a:9b:dd:74:12:de:e7:06:4d:
60:69:02:db:16:62:23:4e:d8:cc:3a:0f:bf:ed:39:49:14:b3:
5d:1f:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:52:27 2025 by rpki-client