Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEC466867B811F084E843F3DAE4EC9C.roa
File: ACEC466867B811F084E843F3DAE4EC9C.roa (raw, json)
Hash identifier: giCmhaYVmvZj6Zxtul54Bs/CO94sGdAvRDPd+yzDp0M=
Subject key identifier: 3A:4F:0A:33:6B:9A:ED:F1:E8:A7:A7:87:53:1E:93:51:71:1A:C0:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0166E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEC466867B811F084E843F3DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 11:32:12 +0000
ROA not before: Wed 23 Jul 2025 11:32:08 +0000
ROA not after: Thu 04 Sep 2025 11:32:08 +0000
asID: 40779
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91873 (0x166e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 11:32:08 2025 GMT
Not After : Sep 4 11:32:08 2025 GMT
Subject: CN=6880c83c-89c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:8c:16:e5:80:b4:af:5b:75:75:86:9d:08:
66:94:0f:b9:83:34:b4:dd:bb:84:f6:cc:d8:c5:1c:
6d:a9:82:38:19:14:c5:99:c8:57:ab:23:df:e9:35:
56:0a:b0:39:c3:9c:72:57:84:f3:9b:f4:5d:b0:27:
de:5f:7f:cd:e7:2a:e1:1e:c7:51:01:dc:dc:ee:ec:
6b:ed:6f:b7:fc:6c:7b:6e:e4:07:83:36:51:71:c2:
ef:f3:42:b6:2a:13:ed:69:2b:bd:e2:8a:a9:91:47:
37:c4:79:b1:71:aa:47:09:3f:b3:58:c3:bd:3d:c6:
e1:a3:57:36:72:26:58:37:a9:57:c7:a4:b6:08:bc:
32:d3:c5:8a:66:92:cb:96:68:0e:7d:5f:21:6e:54:
09:7c:89:b3:62:5e:2d:42:67:cb:28:9b:20:e5:d5:
c1:13:18:07:60:d3:66:d9:5d:5c:fc:b1:aa:00:da:
94:71:ec:89:cc:29:26:38:40:d9:ad:ae:a5:ff:87:
8c:9a:10:e3:9e:a8:87:ee:af:3a:e3:01:cc:fb:8e:
5b:41:47:52:84:0d:dd:36:ba:bb:6a:98:9a:5e:fd:
18:88:c0:f0:17:f7:f5:9f:5f:95:7a:ff:c9:ff:c3:
9a:94:85:49:db:a7:c4:e7:af:ef:a5:d8:ff:e0:2e:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4F:0A:33:6B:9A:ED:F1:E8:A7:A7:87:53:1E:93:51:71:1A:C0:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEC466867B811F084E843F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:80:cf:ac:28:0b:e2:d8:e0:a6:1c:d1:57:13:f6:2e:6a:c2:
92:f0:56:97:16:04:e3:de:af:9c:fe:1d:09:6a:58:de:c2:b4:
67:39:a6:87:e3:57:a0:3f:63:5e:54:bd:bf:5e:69:30:d0:33:
ca:d2:33:43:6a:39:17:46:5a:96:42:11:f2:ed:e0:eb:68:82:
cf:e1:fb:15:40:12:22:cd:24:54:df:15:83:32:5d:94:c4:c3:
fb:44:b4:0f:3a:61:e3:f6:55:7e:6b:48:0b:a1:42:bd:ea:06:
09:61:ab:43:bc:bd:9d:0c:5e:a2:cf:22:70:12:09:c6:6a:39:
6b:f2:99:a3:84:5d:0f:d4:b1:ae:dd:bc:77:f1:8c:37:64:6b:
66:b6:05:ed:bd:9e:a9:43:3d:76:74:cc:eb:d4:13:5d:76:ac:
e2:c4:74:70:d1:32:f0:dd:86:91:8a:29:61:ba:bd:fe:a8:28:
c9:bb:ea:2e:f7:c3:6a:df:e7:67:7e:00:10:a0:79:77:1a:0f:
56:db:4e:74:ec:7b:00:b3:f9:6d:03:d2:4e:de:e2:9f:83:4f:
d4:cc:b1:bf:d2:53:94:98:c3:c9:d2:73:e9:55:eb:63:07:7b:
44:74:ee:73:9b:7b:43:3b:64:5c:78:56:fd:aa:5d:3a:c2:58:
e7:8d:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:29 2025 by rpki-client