
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBB5976C719F11F0851EEEE9DAE4EC9C.roa
File: BBB5976C719F11F0851EEEE9DAE4EC9C.roa (raw, json)
Hash identifier: F21b5iKl7YE9o5vaoOP0BIRKeaHfIIC3Wqg0+mACjFw=
Subject key identifier: 54:9A:E3:3E:FF:25:72:2A:E8:1E:18:78:00:2D:02:C6:53:90:F2:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01692D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBB5976C719F11F0851EEEE9DAE4EC9C.roa
Signing time: Tue 05 Aug 2025 01:58:51 +0000
ROA not before: Tue 05 Aug 2025 01:58:45 +0000
ROA not after: Sat 23 Aug 2025 01:58:45 +0000
asID: 62468
IP address blocks: 156.245.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92461 (0x1692d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 5 01:58:45 2025 GMT
Not After : Aug 23 01:58:45 2025 GMT
Subject: CN=6891655b-f8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:09:5b:7d:f6:12:0a:48:7c:a6:63:5e:dc:
40:a4:bf:55:9d:4b:a4:f7:b2:cc:2e:f4:f2:37:2f:
ba:8f:f0:76:cc:1f:21:a4:bc:a5:1f:8b:66:fc:8e:
0c:2d:c7:0f:94:f8:3e:b6:69:ef:1c:85:cf:a0:44:
41:c9:b4:f5:70:d7:bb:c3:8e:0d:a4:58:19:09:16:
8f:5d:bc:d9:96:6d:30:e8:7d:6c:ce:2a:3a:c3:45:
5e:8a:17:7f:13:ca:7b:fb:0e:f4:f7:26:9d:06:7e:
c0:be:39:2e:0b:ce:37:ca:a4:ce:9c:cb:db:b6:45:
33:42:e1:01:ce:f4:3a:d2:2c:02:80:49:8d:89:be:
51:ee:33:3e:f7:f8:8e:f8:f5:88:0b:dc:8a:81:00:
dd:d6:b1:d6:f6:5d:ca:e0:6a:af:8d:79:19:29:7b:
43:ce:e4:50:7e:cf:23:6d:48:20:9c:7c:20:d8:12:
be:cc:5d:39:ea:9f:3d:b2:8f:4a:d7:12:09:c7:46:
91:0e:af:4b:b4:10:e6:61:df:60:ff:65:1f:0c:de:
ef:87:e9:07:b0:ee:fb:f7:00:98:be:cd:7b:5c:38:
99:95:22:dc:17:b4:7e:fc:fd:4f:0d:e2:84:aa:e4:
02:04:28:74:39:18:53:47:9b:6a:0c:bd:7b:6d:20:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:E3:3E:FF:25:72:2A:E8:1E:18:78:00:2D:02:C6:53:90:F2:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBB5976C719F11F0851EEEE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:af:9e:74:5c:6c:53:0d:ab:6b:67:f2:34:52:00:c7:0e:3e:
cf:44:54:e3:20:da:3d:82:41:6b:7d:2d:42:22:c1:99:76:d2:
94:74:a2:ad:de:3d:bb:b8:4c:7d:5b:e4:93:ad:37:e6:bc:cd:
12:6d:8d:7f:61:62:84:1b:90:10:1a:fe:cb:fa:51:4d:fc:ec:
a9:26:a7:06:6a:9d:e9:3f:bc:1e:89:dd:f1:17:06:b0:6a:00:
70:0c:ea:8b:1f:2d:3e:5f:58:42:96:61:33:96:06:9b:fd:e8:
e4:90:56:67:23:fa:42:33:1a:0d:24:15:19:c2:b2:57:fc:81:
e6:ab:d8:1b:cf:fe:90:38:42:3d:c5:41:0c:b2:39:80:0f:06:
30:67:9e:69:11:0a:53:eb:80:90:04:2c:67:81:2d:43:b8:07:
a8:c6:f7:dd:a3:d9:9d:0a:f0:61:e5:15:85:4c:9a:d4:24:74:
71:41:18:29:02:f7:9c:b5:41:6b:94:9b:9f:0c:55:56:f4:0d:
54:26:32:bc:6d:37:a0:2e:72:09:51:2d:b9:2b:98:19:f1:dd:
d5:47:86:27:3b:eb:fa:c3:2a:bf:b0:df:69:ca:64:43:af:77:
cc:82:04:bc:5c:91:2d:aa:2d:23:ee:fc:30:96:f0:66:62:ea:
a5:d8:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:04 2025 by rpki-client