Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC6274C2687A11F081D600E6DAE4EC9C.roa
File: DC6274C2687A11F081D600E6DAE4EC9C.roa (raw, json)
Hash identifier: El2/vSk/CKUFnfqAAa5H9+ytQ5fKvU/+uPNPIKrJEA0=
Subject key identifier: AD:90:68:CF:ED:C4:92:1F:EE:17:48:7A:61:44:C2:21:50:00:4B:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01673D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC6274C2687A11F081D600E6DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 10:42:15 +0000
ROA not before: Thu 24 Jul 2025 10:42:09 +0000
ROA not after: Thu 28 Aug 2025 10:42:09 +0000
asID: 44559
IP address blocks: 156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91965 (0x1673d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 10:42:09 2025 GMT
Not After : Aug 28 10:42:09 2025 GMT
Subject: CN=68820e06-2b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:7e:af:79:cc:b9:e9:00:5d:9e:25:72:2a:
2e:9b:8f:21:61:21:4f:24:0d:81:f6:e0:ee:a2:81:
61:15:59:ea:1c:85:3a:c6:04:51:0b:84:a6:b9:6e:
58:e8:34:25:d5:ee:fd:24:c1:e4:4a:47:6c:42:8f:
f4:57:f4:92:54:31:2a:19:a7:36:90:8c:a4:28:61:
7d:f3:7f:01:4f:94:70:64:d7:75:77:55:04:38:b5:
e2:58:aa:93:7d:d9:e4:59:79:79:d9:01:ef:c2:ba:
31:92:e5:d3:2c:42:97:e8:7e:12:88:ea:52:d0:6e:
6b:d9:2f:66:96:b9:1b:2a:70:1f:bd:88:11:6d:4e:
c7:13:cd:b8:cd:3e:41:54:4f:0c:9f:9c:20:f2:18:
7d:49:43:7f:9b:3a:79:98:f2:e0:b2:75:29:12:bc:
01:82:b5:0b:8c:59:c2:f4:54:4a:35:72:bd:f6:e2:
1e:69:9e:ea:e8:2a:aa:88:f8:a1:89:1a:08:f5:b6:
93:96:d0:9b:78:2f:50:fb:31:b7:3b:48:8c:c3:b4:
00:b6:19:4b:d5:60:df:03:a7:ed:3d:b6:56:b7:85:
f1:c6:a2:fe:f3:38:be:e9:ea:88:e1:44:36:e0:e0:
ac:3d:a2:d1:45:46:9b:14:bd:7e:2e:ef:21:89:d0:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:68:CF:ED:C4:92:1F:EE:17:48:7A:61:44:C2:21:50:00:4B:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC6274C2687A11F081D600E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.209.0-156.246.218.255
Signature Algorithm: sha256WithRSAEncryption
bb:90:d4:bc:3f:5f:6a:03:da:39:de:ad:41:c9:a3:1a:81:a2:
0f:da:4b:23:a5:de:8a:26:5e:e4:a3:a0:e1:61:59:56:fb:28:
83:eb:3f:e3:af:fa:9e:e6:70:a8:cb:cc:42:1b:3b:3f:79:f9:
c0:82:ee:3b:6d:82:15:c6:b9:1d:9b:40:d9:d2:bc:77:cd:f7:
9b:b7:41:49:8e:d6:87:a1:d5:09:19:96:89:74:01:e3:78:37:
98:a6:c4:78:88:c1:7f:6b:e0:58:68:cf:93:12:36:57:a8:3f:
ec:99:0d:48:07:25:0f:7e:62:7e:7b:64:ce:e7:05:91:12:dd:
41:4a:1e:b9:cc:29:96:d2:10:a9:b3:21:78:39:b5:f2:93:42:
0f:c5:01:c9:f2:44:85:8a:ce:8c:a4:22:5d:99:a5:01:cf:24:
63:0d:f2:35:c8:6c:c9:5f:08:f7:2a:12:dd:3e:48:21:10:56:
6a:cf:e5:ea:ba:ba:5a:35:08:a3:7a:e6:be:c5:9b:c1:69:67:
9d:05:f3:63:21:42:53:d3:71:69:1a:0f:7d:c3:51:76:09:d2:
19:f7:08:b6:b2:79:46:19:10:b4:e2:74:e2:06:cf:db:ef:64:
2f:cd:75:48:5a:b8:db:93:75:35:b5:04:91:3e:bc:c7:5f:f7:
fa:b9:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:37 2025 by rpki-client