Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/799CBC08665911F0AD45597CDAE4EC9C.roa
File: 799CBC08665911F0AD45597CDAE4EC9C.roa (raw, json)
Hash identifier: YwggSLxKr9N2Y6YAQ0nO8ySlXzTFSBRvxVe22UJ1lBs=
Subject key identifier: 64:6A:C4:32:2F:54:DD:75:3A:44:25:35:48:1B:95:D5:CF:DE:73:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01664E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/799CBC08665911F0AD45597CDAE4EC9C.roa
Signing time: Mon 21 Jul 2025 17:38:13 +0000
ROA not before: Mon 21 Jul 2025 17:38:08 +0000
ROA not after: Fri 29 Aug 2025 17:38:08 +0000
asID: 5068
IP address blocks: 156.224.84.0/22 maxlen: 24
156.224.92.0/22 maxlen: 24
156.224.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91726 (0x1664e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 17:38:08 2025 GMT
Not After : Aug 29 17:38:08 2025 GMT
Subject: CN=687e7b05-e587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:d1:3e:c2:ae:ca:c3:90:61:08:85:e0:d1:
19:18:fb:71:38:6e:8a:9e:d6:fb:70:a1:64:f9:0c:
5a:5b:9b:c0:42:f7:0a:54:27:61:90:02:75:31:ef:
aa:0b:2d:4a:e0:a6:ee:45:17:f1:f6:de:68:ae:ee:
7b:10:b4:7d:fa:7e:ec:65:34:cd:eb:e4:99:84:f4:
71:42:db:d7:54:e1:dc:3a:6a:1a:2c:34:36:c1:93:
2b:39:e6:7b:a8:fd:52:ce:64:20:5a:61:d7:6d:98:
df:7d:65:50:76:4f:b5:c6:9b:95:8a:ab:65:e8:fb:
2a:be:e8:6e:54:32:b2:c2:06:e8:7d:69:da:46:de:
5d:1a:44:0e:06:a4:39:f9:cd:03:d3:68:1b:b2:22:
00:87:9f:45:b2:08:d5:55:0b:a7:30:7b:20:73:e7:
29:86:27:51:ce:53:20:ba:28:d0:34:89:18:c3:f5:
c2:67:e5:e9:1c:c0:bf:80:1b:4a:2d:a1:66:e5:0e:
bf:bc:89:7e:e2:b9:82:2f:8d:d6:86:09:39:59:fd:
87:e8:b3:18:3d:3a:08:28:3d:bc:22:aa:1b:1f:37:
06:39:be:98:87:76:ff:9c:32:a9:a9:89:9d:e9:f5:
88:89:4d:e4:2b:e3:82:dd:fd:01:c5:df:08:f1:13:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:C4:32:2F:54:DD:75:3A:44:25:35:48:1B:95:D5:CF:DE:73:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/799CBC08665911F0AD45597CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.84.0/22
156.224.92.0-156.224.127.255
Signature Algorithm: sha256WithRSAEncryption
9a:b9:4b:3c:aa:c4:1c:bb:61:68:81:ac:5b:14:05:80:b0:9b:
eb:b2:cb:94:57:ae:bf:97:dc:56:68:ac:9b:59:66:3c:68:9f:
cd:e1:d6:ef:f9:7b:2b:1e:69:b6:4b:3a:5e:38:af:43:65:70:
b8:c6:00:d5:a7:58:15:bc:63:fa:2e:a1:47:30:ad:93:2c:c7:
b2:06:d7:0b:d0:1d:49:66:24:1c:33:9e:d2:fc:76:b9:14:e1:
0c:a4:ab:4c:42:b1:d1:73:78:89:82:b3:2d:71:75:00:80:09:
7d:87:fe:0a:1e:9a:66:04:12:16:17:23:1c:42:73:be:9d:f5:
d2:98:9c:4e:67:7c:0e:81:69:09:1e:2e:c5:33:65:a6:ed:5b:
c2:5f:1b:5a:49:cd:e2:7a:d3:ff:02:9a:25:dc:30:c6:fc:11:
08:20:38:6b:82:84:7c:e2:8c:16:3c:12:72:e4:03:5c:3d:f0:
8e:80:5a:16:17:0c:22:3c:a4:af:81:93:59:bb:21:0a:8c:73:
3f:55:a5:45:87:57:72:14:cb:dc:42:0f:9c:01:f9:9f:10:be:
cd:1f:5c:8c:9e:49:5a:32:9b:a4:5d:d4:53:84:ff:e3:c8:43:
c6:c0:5d:42:b8:5b:ec:cb:23:d2:ef:02:8e:1b:1d:09:e5:a3:
cb:54:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:54:12 2025 by rpki-client