Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D171D466E711F085D061A4DAE4EC9C.roa
File: D9D171D466E711F085D061A4DAE4EC9C.roa (raw, json)
Hash identifier: 6zxOUvcIn1RTo1PbeOOe6P7C5tBbrDwgJ1quKy3PLCU=
Subject key identifier: 7C:49:01:40:1B:24:31:93:EE:7A:2A:4C:ED:D8:34:E6:A5:E2:8F:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016697
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D171D466E711F085D061A4DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 10:37:23 +0000
ROA not before: Tue 22 Jul 2025 10:37:18 +0000
ROA not after: Thu 04 Sep 2025 10:37:18 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91799 (0x16697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 10:37:18 2025 GMT
Not After : Sep 4 10:37:18 2025 GMT
Subject: CN=687f69e3-e48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:7b:f9:e7:a6:af:43:2e:77:e4:1f:7d:57:
3a:48:44:0f:0d:44:5e:81:06:26:e9:25:a0:f3:9b:
08:b8:38:e4:fa:02:e8:aa:d9:b9:75:4c:c3:7b:9b:
1e:f1:2c:61:be:75:58:ec:57:fd:d9:2f:78:12:13:
d7:ae:6f:82:08:a1:3c:1b:d8:1a:e5:49:37:54:8a:
36:d1:5d:5b:23:63:55:56:9c:ac:46:24:36:12:81:
8b:6d:b4:6e:5c:8f:9f:11:fd:26:7b:82:1e:4f:b0:
58:b4:93:ba:59:7d:c9:d0:69:51:84:1e:71:33:2d:
90:6b:52:51:47:88:7c:fe:c5:de:1d:49:24:15:d2:
71:12:3c:33:3d:9f:0e:91:35:67:2b:53:44:21:21:
c2:5a:75:8a:44:b3:b6:d6:23:9c:91:30:3b:d6:81:
d4:f9:d7:4f:ff:82:c0:8a:ea:2f:69:5c:a8:80:44:
f3:d5:76:89:4b:e6:3b:2a:64:fc:c6:4a:df:aa:5a:
1f:89:af:88:dd:04:78:4f:2e:e8:fc:d0:7a:73:e9:
52:de:21:bc:29:32:46:4e:3e:7c:eb:74:ff:34:9e:
27:b0:e3:ae:c1:78:ba:fe:31:11:4e:32:d0:f1:76:
9b:12:6f:57:fb:29:01:f5:9f:db:12:08:99:9a:57:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:01:40:1B:24:31:93:EE:7A:2A:4C:ED:D8:34:E6:A5:E2:8F:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D171D466E711F085D061A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:0f:3c:6b:fa:ec:de:4a:5b:6f:98:6e:c9:8a:51:ba:7f:57:
67:8b:cc:5d:42:53:48:3c:f8:f0:7e:51:6d:67:a9:fc:cb:bc:
b0:63:65:9d:6f:d3:91:af:ae:dc:ac:28:da:63:ed:fa:f1:ea:
ce:e9:81:a5:df:20:c0:34:f8:b3:0b:26:80:f2:01:37:c5:65:
44:5c:c3:6a:1d:a9:47:98:4b:18:02:c6:cc:9f:38:93:46:24:
5e:af:36:09:ee:2a:82:63:20:18:d1:1a:89:7e:da:3f:d5:42:
90:f2:b6:e4:95:5b:3d:0f:f0:be:d5:0e:df:ce:d0:c8:78:8b:
12:4c:ea:fd:fc:b4:50:69:3f:55:22:dc:af:1b:db:5a:a0:aa:
fe:12:12:52:c0:2d:36:d3:22:0f:2b:13:7f:0a:12:55:15:77:
08:05:85:3d:ee:ec:62:93:67:32:d3:1e:0f:5c:2d:a1:3a:68:
01:13:f5:e5:98:be:a0:0b:87:60:ec:22:b6:4a:ab:9d:b2:a4:
e6:1b:fb:e4:40:26:ae:de:49:20:04:96:0e:d4:ca:db:16:f1:
ee:df:48:e8:1a:6a:a8:97:9d:41:01:e9:dc:e1:51:05:50:b2:
a1:ff:03:19:b8:ad:00:42:fe:63:aa:62:c4:22:47:ee:a4:2b:
66:d7:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:16 2025 by rpki-client