Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B49BC1BC6F9D11F0964067DEDAE4EC9C.roa
File: B49BC1BC6F9D11F0964067DEDAE4EC9C.roa (raw, json)
Hash identifier: SQ2jeNCZKaU16HHtd3vwdeSVd5zi26PP+FtnMP4pq1Q=
Subject key identifier: 77:32:B6:51:9E:67:A9:C1:50:38:2B:B4:21:10:3C:23:AE:89:D8:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016884
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B49BC1BC6F9D11F0964067DEDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 12:39:18 +0000
ROA not before: Sat 02 Aug 2025 12:39:13 +0000
ROA not after: Sun 07 Sep 2025 12:39:13 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92292 (0x16884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 12:39:13 2025 GMT
Not After : Sep 7 12:39:13 2025 GMT
Subject: CN=688e06f6-f2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:73:b7:cf:c1:2a:3d:a3:bd:13:81:3d:1d:
45:e3:fb:90:ad:9e:23:80:d9:93:1e:b1:01:34:63:
85:07:c9:4b:a4:d8:46:42:ce:d0:65:32:df:92:dd:
15:5f:39:59:2e:47:47:ee:19:40:11:bc:96:59:bc:
71:41:39:92:fe:cf:1f:69:74:6c:c6:95:76:ab:a2:
34:4b:09:b6:99:05:5e:bc:20:15:e6:2e:1d:f0:15:
2e:76:8f:6c:ab:3e:39:ae:34:11:1e:46:4a:0e:0c:
6b:38:18:fd:84:82:86:59:af:3d:4b:99:4e:15:88:
88:d4:34:68:f9:a8:20:c5:3e:c8:05:77:5d:b5:ac:
9b:6a:f4:e7:1e:90:92:52:05:d9:dc:4d:28:cf:50:
f8:e5:52:0b:ae:b6:9e:73:83:9d:bd:7e:13:28:f1:
42:5d:e2:e4:c7:fd:1c:f5:07:53:0f:a1:26:95:24:
aa:21:fe:40:65:b7:3b:a3:c2:3b:e3:3e:31:a3:44:
3a:1f:2b:a3:30:07:c2:fb:c9:e9:f8:b2:a2:ed:7b:
57:06:2d:2b:a8:a0:96:96:68:8b:85:c7:3b:42:6c:
6e:73:94:7f:5d:0a:9f:68:49:1a:a3:27:f5:52:80:
7d:aa:20:34:30:12:a1:89:ef:bc:3d:ff:f9:54:d7:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:B6:51:9E:67:A9:C1:50:38:2B:B4:21:10:3C:23:AE:89:D8:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B49BC1BC6F9D11F0964067DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
59:59:d1:71:bd:40:83:31:df:95:a9:96:8e:01:25:aa:22:83:
43:65:4a:99:f0:c1:b6:81:53:bf:c7:fb:89:26:1f:6c:ce:7d:
e7:2e:14:62:ca:69:31:e4:e2:73:58:59:32:a3:5d:27:48:e7:
60:ab:29:12:6b:3c:e9:3b:78:b8:4e:1e:50:bd:45:fc:32:ef:
89:18:d8:cc:37:fe:44:e4:16:9a:12:be:9b:fe:a8:87:7c:50:
a2:e5:cc:71:00:e5:07:98:e4:9a:d5:aa:87:0f:eb:a4:7c:04:
9c:85:7b:00:90:1b:80:dc:05:a1:22:46:36:f7:54:cc:8c:cc:
63:bf:d2:e9:a4:e7:7a:02:94:70:a7:53:c2:3c:ca:62:0d:a3:
9f:8d:ef:fe:74:6b:7e:ad:13:42:dc:e6:e5:24:16:d6:c7:5d:
26:e0:48:90:e7:57:65:83:ae:bf:5c:59:4b:ab:01:9d:14:ac:
38:59:9d:1b:db:f4:2e:2e:28:0b:2d:8d:c4:ef:33:76:e1:9d:
ac:54:38:e6:32:47:02:6b:67:2c:1b:59:12:c3:19:33:45:71:
a7:f6:05:53:93:ef:04:51:39:d5:aa:b4:e9:cd:d5:26:50:6a:
38:ed:26:67:e6:d3:53:75:05:98:ce:ff:2d:c0:b7:88:a7:b0:
99:d2:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:41:17 2025 by rpki-client