Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F15AF86FC411F0A825C9D4DAE4EC9C.roa
File: 58F15AF86FC411F0A825C9D4DAE4EC9C.roa (raw, json)
Hash identifier: ZLbgtOTipnOHPQ1HoKeXkN+6//+9+wYGKsPSH05/z4s=
Subject key identifier: B4:C1:10:4F:C7:39:AB:15:68:B6:62:5D:1C:82:21:28:25:1D:55:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0168BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F15AF86FC411F0A825C9D4DAE4EC9C.roa
Signing time: Sat 02 Aug 2025 17:15:55 +0000
ROA not before: Sat 02 Aug 2025 17:15:49 +0000
ROA not after: Wed 10 Sep 2025 17:15:49 +0000
asID: 401701
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92348 (0x168bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 2 17:15:49 2025 GMT
Not After : Sep 10 17:15:49 2025 GMT
Subject: CN=688e47cb-58af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:53:c9:d1:2c:8c:be:82:fd:58:37:88:ed:
06:16:2f:78:2a:54:9d:8a:b8:f7:11:4c:d6:43:7f:
29:59:27:0c:2a:c6:8b:5c:ca:be:a3:5a:76:3b:79:
1a:d5:0b:04:83:39:f9:3f:7e:2e:a8:9c:19:8c:b0:
63:fe:e7:a9:59:65:1e:7c:8c:62:96:2f:42:ee:6f:
96:f6:ea:d7:c0:71:1b:59:1b:ad:ee:63:24:c2:d9:
5f:02:ab:84:6c:c2:69:40:98:35:45:ef:be:c4:8a:
9f:5a:6f:28:79:e9:67:48:ac:e9:c0:39:94:52:a8:
41:41:b9:96:30:d7:43:83:c3:93:5e:bf:68:6a:56:
3a:2a:aa:c5:f3:46:92:0c:5f:6e:33:d1:6c:04:d8:
3b:d1:26:ab:69:05:9e:9b:de:51:2b:db:02:f4:ea:
9c:c2:6e:62:13:da:1e:f6:c5:53:34:6c:50:4b:32:
95:b2:d2:6e:cb:69:84:62:11:2d:a2:94:7f:65:93:
93:17:a8:dd:5d:ab:d8:00:f2:d4:1e:6e:d7:0a:8b:
c6:91:a2:b6:c0:0d:e7:74:28:f7:5b:74:72:91:23:
56:87:a3:33:fb:d9:61:df:a1:de:90:ad:e3:39:7c:
c6:cf:07:fd:17:6c:d9:ed:0f:f6:3c:85:ae:2e:5f:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:10:4F:C7:39:AB:15:68:B6:62:5D:1C:82:21:28:25:1D:55:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58F15AF86FC411F0A825C9D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
84:c1:27:72:df:25:08:6b:45:2c:13:c4:10:68:f1:c6:f4:26:
2d:76:92:f5:54:6d:29:31:f4:db:2f:a8:e3:ad:69:92:6d:f0:
54:a5:ed:7f:d1:67:43:1d:b3:f7:5d:ca:cf:98:b3:7f:cf:be:
22:d5:63:9e:7a:74:34:87:0f:4c:7f:b0:e0:ba:85:03:da:ec:
d1:48:f0:e0:c2:e0:d8:cc:70:04:a2:b7:88:3e:8a:5d:47:cd:
a2:a0:ea:97:e1:a9:98:fe:5b:46:88:8c:44:93:cb:86:f1:a4:
95:62:f1:ab:ac:8e:02:84:9f:9f:c3:30:13:bf:fa:4c:30:b4:
6a:06:d7:da:87:d0:b3:dd:83:b1:35:7b:08:23:b7:b8:7d:a4:
16:a8:8f:80:63:55:08:72:f6:99:29:83:a7:5f:6c:ad:2f:74:
9c:fd:1e:74:0c:82:3b:71:45:ae:8c:f2:6c:43:14:70:7d:fb:
bd:44:e8:0b:e4:5a:ca:ed:87:ce:f2:7e:28:23:24:d3:44:6f:
22:8c:9c:ef:af:81:c5:f1:00:2c:9d:2b:76:56:65:87:c5:2d:
12:95:a5:f4:dc:63:4b:cc:fe:d6:f5:b5:c4:99:44:01:12:d8:
9d:e7:9f:5c:9e:88:11:77:cb:63:87:42:99:fc:9f:f1:49:a1:
33:02:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:27 2025 by rpki-client