Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FAF0C6665411F0945B1DDCDAE4EC9C.roa
File: 87FAF0C6665411F0945B1DDCDAE4EC9C.roa (raw, json)
Hash identifier: JoHmfjsi+H58LwdthYtl6gPHEt3uACJpoaRqTSoezcw=
Subject key identifier: 7F:91:F5:5F:72:14:D2:56:AA:F3:8B:21:9D:58:78:B6:DC:77:BF:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016646
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FAF0C6665411F0945B1DDCDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 17:02:50 +0000
ROA not before: Mon 21 Jul 2025 17:02:43 +0000
ROA not after: Thu 28 Aug 2025 17:02:43 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91718 (0x16646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 17:02:43 2025 GMT
Not After : Aug 28 17:02:43 2025 GMT
Subject: CN=687e72ba-eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:6a:78:e4:1d:89:c3:22:84:21:b2:4b:cd:
30:02:b2:2d:7d:4d:20:60:15:dc:28:b3:41:de:33:
d9:9e:4b:e5:8e:aa:e9:98:92:5e:a3:f3:27:c1:78:
4a:2c:c5:3b:38:bf:38:96:91:59:df:04:92:27:d2:
29:16:54:a0:bc:87:a5:43:62:36:f2:00:6d:5f:d6:
79:ea:ea:8b:e4:5f:28:f9:c7:b5:82:3a:32:f2:52:
c6:31:f8:31:af:2f:ca:a5:bf:25:fe:4a:28:5d:74:
a4:ac:07:78:f5:c4:91:2f:7a:eb:c1:b8:8b:6f:db:
1a:49:a1:51:dd:64:18:c4:1c:75:cb:3f:b7:04:10:
32:a6:b2:4d:41:0a:da:d8:9d:44:31:be:d5:bf:b3:
93:30:99:1d:f4:b9:cf:ca:9c:f6:48:31:fd:87:79:
3d:c4:dc:ee:5f:4b:ff:08:de:4f:22:2c:fc:46:d2:
6c:59:70:1d:10:3c:1f:20:73:d0:c8:05:f6:04:25:
ba:3a:be:50:63:ce:b7:1a:8e:f0:4c:a5:c0:00:e3:
12:2f:1a:57:b3:52:ae:15:5d:e4:53:6c:02:37:e0:
68:70:fd:e0:d0:aa:00:93:b1:5b:10:90:84:92:2a:
fb:86:f4:fc:14:8a:fe:8d:72:6f:e3:8f:e4:d4:61:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:F5:5F:72:14:D2:56:AA:F3:8B:21:9D:58:78:B6:DC:77:BF:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87FAF0C6665411F0945B1DDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
11:07:44:63:f4:d1:2d:ad:f4:e9:63:bd:a4:12:a9:70:31:33:
ba:bd:00:26:aa:57:01:7a:ba:57:29:c0:fb:d6:03:37:40:df:
5b:43:aa:dc:7c:76:9a:85:8c:90:c0:86:f5:a6:e1:1a:07:c3:
b2:73:1a:c8:b1:d5:e1:a8:e5:98:fe:65:16:fa:f7:76:53:f8:
49:1c:98:ba:f0:1c:46:c0:31:91:79:b0:13:6b:31:55:6b:6f:
8c:02:aa:57:c2:97:d5:5d:51:0b:33:d8:d1:67:63:46:0a:d4:
3c:fa:70:a9:42:82:c9:03:fb:8f:c9:0d:83:48:5c:29:1b:c9:
c0:85:2c:d6:e0:40:57:86:dd:fd:bc:d9:ae:44:84:7c:e4:c2:
3b:39:65:47:84:98:dc:14:4f:66:74:f4:2f:3b:2a:4f:93:5d:
c9:87:d3:e5:c4:bc:46:41:81:2e:6e:ec:62:24:6f:88:87:aa:
25:f5:24:48:1b:ce:ff:7d:a7:06:f8:b4:70:e3:ff:db:8a:28:
14:f1:29:73:be:1b:c9:3d:fd:74:19:1b:08:fd:55:49:ea:71:
58:b1:15:e8:23:be:45:d6:2d:e6:8d:d0:4f:1b:06:5e:fd:10:
cc:40:42:c3:ec:d8:1d:12:5d:48:d8:91:7b:50:d3:2d:04:36:
ff:e6:a4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:55 2025 by rpki-client