Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AD51406EAD11F09F23E2C7DAE4EC9C.roa
File: C1AD51406EAD11F09F23E2C7DAE4EC9C.roa (raw, json)
Hash identifier: V7QwEYSb88voDNlRc+ileBfN51W0M0GDyDUjpjgQO5g=
Subject key identifier: 90:CB:95:98:1E:84:65:CC:5F:57:4D:B8:51:FC:95:3B:9B:F0:8B:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016866
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AD51406EAD11F09F23E2C7DAE4EC9C.roa
Signing time: Fri 01 Aug 2025 08:01:41 +0000
ROA not before: Fri 01 Aug 2025 08:01:35 +0000
ROA not after: Sat 06 Sep 2025 08:01:35 +0000
asID: 20326
IP address blocks: 156.229.26.0/24 maxlen: 24
156.242.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92262 (0x16866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 1 08:01:35 2025 GMT
Not After : Sep 6 08:01:35 2025 GMT
Subject: CN=688c7465-8287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:10:06:2c:f6:e6:df:60:f4:45:12:87:d5:
46:9b:ad:b8:46:c3:f7:3a:21:ce:6f:bf:c1:0c:15:
c6:21:77:aa:9b:df:fb:5b:d6:fc:5c:22:96:9e:f6:
34:48:65:ac:0d:6d:f3:2d:1f:eb:d7:83:c8:06:6d:
03:ac:ae:09:97:bc:19:1b:fd:0c:b3:48:7e:26:19:
57:ef:ee:ba:4e:24:be:8b:ba:ee:cf:e0:ec:41:68:
8b:c0:f2:93:f1:65:98:7f:d2:41:a4:c3:f0:28:7e:
7f:0f:5e:83:b5:93:5c:1f:c2:b0:28:4f:6e:a9:ed:
ca:cd:cd:cc:16:d6:5f:06:40:42:37:cb:6b:87:5e:
4a:51:9b:f0:d9:07:8b:9b:da:52:e9:e8:c2:16:37:
2a:df:b8:fb:6f:b3:69:4c:db:90:77:fd:91:8d:92:
92:5c:b7:95:63:53:ae:f2:e3:7e:81:9b:46:5e:f1:
40:c1:16:e6:fe:2a:2c:9f:6b:26:6f:f2:01:9e:99:
57:c9:84:43:5a:8e:5e:69:44:47:6f:a0:c8:ef:6b:
9d:6c:e9:1c:72:96:4e:8b:ea:05:b8:1e:68:35:75:
92:b0:3f:40:c7:c8:47:51:59:d2:88:89:a1:50:e0:
8d:99:44:eb:ce:a7:a9:22:73:4e:08:3a:e8:e3:4b:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:95:98:1E:84:65:CC:5F:57:4D:B8:51:FC:95:3B:9B:F0:8B:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1AD51406EAD11F09F23E2C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.26.0/24
156.242.124.0/24
Signature Algorithm: sha256WithRSAEncryption
26:93:58:90:23:72:74:87:b8:d2:ae:ac:b4:5f:2a:c5:8a:57:
ee:0b:8b:6f:bc:18:39:45:bd:df:29:12:e1:fe:e5:8f:1b:46:
33:aa:f2:0c:04:b9:5d:0e:a5:ed:81:c3:6a:65:ca:33:03:db:
b3:22:19:e4:3c:3a:49:9a:a5:5e:09:6c:dc:2a:cb:79:cd:28:
90:70:65:d8:14:03:16:71:ea:b6:c0:8a:cf:61:89:96:e7:90:
c8:f2:82:a8:62:8f:a1:42:a7:79:8c:8a:cb:9d:52:b1:56:e2:
a8:c0:3a:76:0b:d7:df:6b:dd:b8:be:07:49:8c:05:b5:ea:47:
dc:f4:bb:08:b8:7d:bb:4f:a1:70:4d:61:f1:22:43:d1:52:61:
90:a9:a9:44:e9:86:09:f8:f0:06:57:35:66:11:fd:3c:5b:06:
39:ff:80:ed:b4:3b:47:16:b2:7d:ec:4f:b1:c8:ec:06:62:f6:
65:9f:8b:cc:e2:02:9d:19:08:19:a6:df:b6:d6:91:74:63:96:
b2:6e:dc:49:d5:fa:63:8b:5b:a2:26:e5:8c:40:d1:5f:7d:28:
99:b4:85:db:8b:c6:ba:6d:54:1a:d5:86:36:d0:22:e7:dd:18:
71:39:d7:6d:9b:f3:61:34:78:d0:dc:c5:7c:e9:7a:db:29:a7:
62:8b:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:52 2025 by rpki-client