Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044D526A5CC111F0A3FDC1A9DAE4EC9C.roa
File: 044D526A5CC111F0A3FDC1A9DAE4EC9C.roa (raw, json)
Hash identifier: DXARx9QorKLhL42mclUy50KoKwWg9hSBzjLBdyF5E3s=
Subject key identifier: 93:AC:25:98:5D:A5:82:F9:63:17:E4:76:4F:C9:A6:13:DC:27:B5:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044D526A5CC111F0A3FDC1A9DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 12:34:12 +0000
ROA not before: Wed 09 Jul 2025 12:34:07 +0000
ROA not after: Sun 10 Aug 2025 12:34:07 +0000
asID: 401701
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91099 (0x163db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 12:34:07 2025 GMT
Not After : Aug 10 12:34:07 2025 GMT
Subject: CN=686e61c4-3dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:88:8c:d9:92:ce:69:0e:90:a3:d4:88:19:
cc:67:1d:36:b5:00:36:32:92:2f:95:4e:05:b4:a1:
91:a8:d5:44:e6:11:00:1e:da:40:4f:80:4d:cb:84:
8a:0d:ba:74:dd:e9:da:9b:aa:ff:58:65:f9:0e:0c:
11:55:9f:6b:fc:4f:32:9b:c9:43:5a:35:57:e5:38:
5e:16:0f:bf:eb:be:0b:4c:69:36:30:fc:09:cd:69:
59:d0:6c:22:2a:ec:01:7c:3c:62:06:78:ad:ef:e2:
ea:af:44:f9:7e:75:1c:37:2b:38:da:58:9e:73:5b:
f2:69:03:71:fd:af:c5:2f:62:65:eb:fa:dd:e0:d2:
50:d5:dc:c9:46:40:8e:ca:4d:fa:b5:87:bc:c3:f1:
e6:16:a4:d0:1f:11:6d:33:ad:7c:0a:32:bd:8d:e0:
b8:a0:cd:b9:81:0e:d0:b3:33:cc:c1:b9:3e:dd:d0:
3e:68:6a:b5:67:cf:96:56:e9:53:49:96:7c:26:76:
45:d5:43:0f:1c:7a:e3:a6:da:98:f2:74:e5:59:65:
ac:44:33:95:1b:22:0c:ad:0d:99:89:45:87:b2:44:
41:9f:87:95:ab:8b:03:d0:9b:25:80:16:27:db:92:
a6:51:98:42:ba:a3:d9:41:bd:26:5c:09:f8:62:85:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AC:25:98:5D:A5:82:F9:63:17:E4:76:4F:C9:A6:13:DC:27:B5:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044D526A5CC111F0A3FDC1A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
32:d1:c3:e0:1a:45:b9:cf:e0:73:ff:f9:20:66:49:ce:cc:58:
3e:b0:58:fa:89:88:9e:46:5e:df:f8:57:b0:df:b7:6e:32:64:
a3:3a:f0:21:3a:15:f2:0b:b9:31:8c:ab:5d:a5:f8:66:91:52:
1e:45:e6:14:f8:55:7a:a6:eb:1f:b7:5b:92:b1:f6:4f:7a:b2:
de:ad:2e:15:09:ed:0a:2e:4c:72:c0:18:49:ac:74:d1:eb:76:
0c:8d:a4:80:48:e5:ba:68:54:0a:b2:f9:cc:eb:99:22:49:d3:
34:b5:00:33:e1:4d:a1:4e:00:6e:9b:17:c8:c3:92:21:f0:09:
ad:8c:18:c4:36:e3:c5:25:44:f6:cc:01:96:3b:44:60:ea:7e:
41:92:13:59:45:4d:3c:15:84:61:cc:72:eb:d6:f4:48:96:b5:
75:67:11:38:c6:62:69:65:ec:ca:05:94:d9:56:4e:18:63:62:
62:e4:23:50:b8:ad:01:dd:f2:54:15:f6:3d:79:79:75:52:cb:
f4:68:e0:50:b6:51:81:fe:d6:55:ef:bf:15:d1:c8:76:55:2f:
a2:6b:72:11:06:99:c7:ef:86:03:8b:91:ca:37:0d:02:62:1c:
0f:ab:c2:c1:4c:a4:24:94:f9:b9:38:18:fb:af:51:4b:fe:c7:
fe:de:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:41:33 2025 by rpki-client