
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB2C2DB26FD511F0ACE7D4C4DAE4EC9C.roa
File: CB2C2DB26FD511F0ACE7D4C4DAE4EC9C.roa (raw, json)
Hash identifier: /sR0Vdb4XcuWJ8xn2i0zhk1nN9Vj2f0KEQNsLM+WMds=
Subject key identifier: A2:3C:D8:E7:AC:41:AF:A7:3E:7D:FD:70:85:E6:9D:24:AC:3F:2F:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB2C2DB26FD511F0ACE7D4C4DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 19:20:48 +0000
ROA not before: Sat 02 Aug 2025 19:20:42 +0000
ROA not after: Thu 19 Feb 2026 19:20:42 +0000
asID: 55020
IP address blocks: 156.254.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92372 (0x168d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 19:20:42 2025 GMT
Not After : Feb 19 19:20:42 2026 GMT
Subject: CN=688e6510-2016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:af:8e:96:52:94:f0:b4:3c:b8:60:df:a2:
e6:3c:14:5f:bc:03:13:0d:a6:7d:e5:29:84:46:b5:
89:a8:8c:7c:63:84:20:99:24:40:bb:9d:4a:32:31:
45:f3:86:69:f7:7a:d2:9a:71:1f:a7:5c:75:62:11:
6e:87:30:0e:f0:0a:f8:c9:a6:a7:1a:c6:15:47:bd:
c9:1b:d2:9f:da:47:c6:d3:70:ff:9c:0f:23:8f:f8:
96:1f:b8:67:c1:b6:b7:df:4c:d3:3d:00:41:29:2d:
31:61:59:35:57:c9:4d:d8:6d:76:19:64:5b:a4:57:
e6:a9:61:29:b1:6b:ca:51:ca:4d:4d:75:c7:4b:7d:
d2:bb:e8:ec:14:af:34:cb:a8:9a:1a:a1:6f:f8:e5:
2c:bb:11:2a:e8:b5:a1:13:88:be:e9:e1:c2:89:66:
f4:b6:50:a8:0c:3f:89:c1:01:f4:7e:47:76:85:f7:
d7:f3:b2:4b:62:d0:1a:fd:15:38:62:33:a7:2e:c5:
48:9d:7f:c3:55:ea:6d:72:89:97:77:64:0b:e2:d3:
b6:b9:e7:93:1b:0e:d5:28:72:35:57:01:76:3c:83:
b9:f0:e9:3e:66:b5:89:e2:c4:f6:a6:c9:09:e2:5d:
b2:b2:33:69:ae:b9:07:9d:57:85:10:83:c4:aa:be:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:D8:E7:AC:41:AF:A7:3E:7D:FD:70:85:E6:9D:24:AC:3F:2F:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB2C2DB26FD511F0ACE7D4C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/19
Signature Algorithm: sha256WithRSAEncryption
55:f9:a7:5f:2a:35:4c:5b:ea:56:c1:06:77:2f:ac:b9:c9:17:
9d:a4:62:81:57:80:13:78:37:56:82:83:22:fc:98:55:75:48:
b2:4a:7b:4e:46:99:ef:38:ba:e1:97:7a:1e:7d:15:0b:c4:a8:
02:6e:40:6d:dc:02:5f:c7:75:00:93:42:c5:d6:1b:d0:b4:e7:
c2:94:fa:92:fa:d3:70:88:19:27:5b:58:ac:55:db:5e:9a:c2:
71:ec:9a:53:5c:01:82:23:34:d0:f2:ed:45:a0:7e:0b:5f:c0:
7b:04:b7:1a:28:04:aa:57:67:95:f5:8a:cc:82:72:ab:1f:f0:
2b:cb:64:71:16:3e:99:2b:3e:20:a9:f1:31:05:80:f5:a5:74:
a2:95:96:0a:49:88:0e:ed:f0:b9:c9:ac:49:78:45:7f:50:76:
52:72:48:d1:eb:82:03:93:d1:58:3f:14:a3:f9:2a:a9:8c:f8:
55:bb:0f:eb:a8:65:c9:34:08:de:e3:99:90:7a:28:87:a6:83:
ea:53:98:a3:f3:ec:0d:6d:ba:84:2b:bf:ac:0c:4d:97:c1:18:
14:38:0f:99:da:10:a3:58:48:9c:3d:94:2c:47:93:5d:4a:2b:
8e:7d:c5:b1:e6:a8:96:f4:30:02:6a:a5:b6:fa:4c:75:ab:ce:
c2:1f:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:31 2025 by rpki-client