Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6EEBA826F9911F098237CC4DAE4EC9C.roa
File: A6EEBA826F9911F098237CC4DAE4EC9C.roa (raw, json)
Hash identifier: A2oLcJiniLTnC6c5YSDEPW6fjTeG5CTLHv1i5yqrw8E=
Subject key identifier: 28:CD:81:83:D1:C2:F1:36:2F:03:E0:00:6F:BD:F3:0B:10:D4:A7:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01687E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6EEBA826F9911F098237CC4DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 12:10:17 +0000
ROA not before: Sat 02 Aug 2025 12:10:12 +0000
ROA not after: Sun 07 Sep 2025 12:10:12 +0000
asID: 9009
IP address blocks: 156.238.4.0/22 maxlen: 24
156.238.8.0/23 maxlen: 24
156.238.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92286 (0x1687e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 12:10:12 2025 GMT
Not After : Sep 7 12:10:12 2025 GMT
Subject: CN=688e0029-c035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:c4:d3:6c:b6:07:e3:2d:38:a0:e1:ab:b6:
fe:11:1d:17:31:7f:0a:67:85:19:10:dd:0f:14:03:
78:71:67:7f:43:dc:6f:fb:fb:5b:fe:80:8c:8c:99:
d7:35:dd:a2:c8:45:73:c0:c2:6c:e7:d9:4e:09:46:
cb:62:83:6f:fe:77:a4:4b:71:cb:d5:85:85:8f:65:
99:96:51:d3:50:65:c2:df:ce:4a:0c:4f:78:47:1f:
10:69:87:80:db:9f:0a:d8:ba:07:34:03:d7:88:1a:
83:20:2f:89:39:e6:c1:dd:db:48:26:df:fc:a9:93:
c4:97:42:39:b8:42:71:3e:a8:31:d6:e8:e2:df:e7:
f2:db:23:ea:5b:ef:07:b2:76:e1:8e:47:3b:67:a4:
e9:f2:c2:44:67:db:07:4d:ea:f0:2e:6e:73:58:e7:
b7:8e:f9:60:c2:f8:cd:35:36:bf:4d:a5:6c:e0:03:
3b:7e:ef:24:a5:66:6d:a7:6a:6b:c8:14:85:9d:14:
54:bc:c8:91:df:eb:73:84:d8:39:81:87:31:b1:6c:
34:7d:45:38:8b:37:9b:4a:8a:48:ff:95:cc:29:87:
c8:d7:82:de:03:2e:49:67:fa:3d:1d:5c:36:06:ad:
c4:e5:b2:aa:a8:2a:35:2b:7a:ca:d8:49:7c:96:50:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CD:81:83:D1:C2:F1:36:2F:03:E0:00:6F:BD:F3:0B:10:D4:A7:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6EEBA826F9911F098237CC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.4.0-156.238.11.255
Signature Algorithm: sha256WithRSAEncryption
32:b3:8b:13:9b:b7:8a:08:0a:31:09:8a:f7:10:2b:4d:83:01:
51:66:67:c4:fd:d0:30:c3:d6:10:71:9d:c3:86:36:10:e8:00:
32:0e:f3:50:59:81:63:8a:ee:7a:7b:58:32:08:66:3b:c8:b4:
5c:32:cd:df:ef:60:f1:ed:bf:b6:13:20:0c:34:4a:1e:f9:d4:
23:4d:de:7b:4d:aa:2e:56:bb:35:ef:0b:94:98:6e:a2:ba:c6:
64:aa:b3:ab:b3:d8:fb:19:62:23:d4:b9:f3:a0:81:ed:b0:33:
5e:bf:6c:e0:09:f5:b0:0f:a0:d6:03:5b:5f:76:83:a5:db:6d:
6a:5d:99:f1:06:45:84:9c:de:33:0a:d8:06:14:b1:6c:3a:4a:
9a:a4:16:00:23:9f:6f:d8:fe:d1:b5:04:ce:71:56:4f:46:09:
62:6d:c0:f2:36:a5:bd:73:af:07:99:48:bd:1f:8c:73:3c:ea:
38:ed:d2:1e:8b:51:78:59:97:2a:48:cf:4e:28:e3:43:f4:a3:
ce:37:60:da:d4:b0:90:3a:cf:9a:11:0a:71:f2:7d:98:b2:a7:
2c:84:a5:c4:d1:8d:ed:2d:42:55:a0:67:3c:46:61:91:e2:1a:
55:97:9d:b5:0a:4d:d9:4d:bb:a8:bb:51:a0:34:e1:2e:c8:d0:
23:4c:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:34 2025 by rpki-client