Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A2DCC104C4611F08B2AF3EEDAE4EC9C.roa
File: 8A2DCC104C4611F08B2AF3EEDAE4EC9C.roa (raw, json)
Hash identifier: ZYmYwuVPyd5khBT3u3+TAXdrcKwQr+DN60rCWUhvAtY=
Subject key identifier: B0:11:F8:5E:DF:A6:1C:F5:CA:61:98:8E:15:73:73:E5:A7:6E:C5:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015CD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A2DCC104C4611F08B2AF3EEDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 13:17:10 +0000
ROA not before: Wed 18 Jun 2025 13:17:06 +0000
ROA not after: Fri 19 Dec 2025 13:17:06 +0000
asID: 272018
IP address blocks: 156.235.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 22 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89296 (0x15cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 13:17:06 2025 GMT
Not After : Dec 19 13:17:06 2025 GMT
Subject: CN=6852bc56-1e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:45:3b:ad:7b:7f:28:5c:a7:b0:dd:cc:87:2d:
f4:07:cb:2d:c6:8c:09:4c:c1:25:e7:0e:e9:2d:58:
30:fa:03:3f:36:2a:d0:ef:0c:c9:5d:e2:89:43:22:
58:4d:c2:47:4e:8e:24:4f:c1:49:88:f8:b6:bd:3f:
47:fb:bd:dc:7e:0e:b1:0c:93:6d:e7:30:e5:f4:79:
d9:10:1f:54:02:1e:9e:3e:72:14:06:6a:0f:62:55:
c7:ba:d2:88:82:82:ae:69:b5:82:c5:ec:cd:f6:3f:
09:be:f6:a9:ff:af:2f:dd:ed:b3:18:f8:f5:aa:71:
27:17:ca:07:7d:bd:09:00:97:f5:a7:c6:e2:da:4e:
2a:58:3f:27:3c:b9:1d:95:49:63:ae:90:6e:2f:84:
a5:fc:64:77:36:bf:60:50:0d:c6:55:97:82:4b:fe:
34:fb:1a:5c:bd:f9:a6:41:31:8d:43:00:e5:fa:67:
96:0d:26:30:08:1b:bc:bd:2a:8c:a9:d9:06:8b:32:
09:8b:fd:da:85:ef:5b:8b:64:91:01:13:0f:26:84:
41:5a:36:ad:5d:d0:f2:d2:f9:2c:32:4d:f4:8b:5c:
84:2f:ea:1a:60:c3:13:3e:8a:43:4a:df:73:c6:53:
51:0d:ed:55:f0:35:cf:63:5e:01:f0:9e:52:1b:d7:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:11:F8:5E:DF:A6:1C:F5:CA:61:98:8E:15:73:73:E5:A7:6E:C5:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A2DCC104C4611F08B2AF3EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.91.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c4:e4:38:a5:6e:9c:03:42:ab:fa:9f:94:e1:d5:ad:b1:7c:
d2:c4:7a:1b:a7:68:4e:11:c4:bd:f5:39:23:87:2f:c7:31:36:
96:49:84:a9:c8:1a:27:f6:0c:65:a1:de:e2:45:ff:28:a8:6c:
a9:82:98:bd:81:b6:cf:c4:08:80:eb:4c:c8:c0:8c:04:f5:b3:
6f:ea:b3:60:55:c4:7f:fb:99:ec:33:57:b8:c6:13:be:e5:a8:
ed:4e:83:ce:7a:87:ab:be:b7:6f:97:cb:e5:46:84:2f:78:fe:
e7:44:55:5e:2f:40:d0:1b:33:4a:43:6e:27:7b:25:75:ac:53:
ef:f0:38:58:ff:0a:07:3f:43:6c:db:3c:70:eb:80:b2:3b:d3:
7c:1c:de:70:19:da:e0:b3:66:f8:6d:23:bc:60:96:d1:b4:7e:
5c:8e:bf:c5:f6:21:51:d5:b2:f6:8e:22:da:1f:d2:c1:97:78:
ac:77:8d:1c:ad:f6:f6:e9:d7:06:1e:8a:a3:da:fb:de:2a:a8:
c8:26:47:67:9c:23:5f:28:0d:1f:a7:09:75:11:41:f4:15:6d:
39:47:a6:dc:1c:23:36:4e:f1:18:50:1d:38:7a:9f:7c:79:8a:
b4:9b:1e:94:64:90:2f:b9:f7:5c:f4:ae:b2:79:5b:12:e7:4d:
1a:72:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:44:26 2025 by rpki-client