Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D995E165CF911F0ACFDA990DAE4EC9C.roa
File: 1D995E165CF911F0ACFDA990DAE4EC9C.roa (raw, json)
Hash identifier: JPWAj5oSfeEDMLRkDrkTKE4f55gldze/c/AC13YLdys=
Subject key identifier: 4A:CE:37:51:F1:AD:31:0A:7C:1A:13:87:5D:7F:0A:43:2E:54:E0:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016438
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D995E165CF911F0ACFDA990DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 19:15:47 +0000
ROA not before: Wed 09 Jul 2025 19:15:41 +0000
ROA not after: Thu 21 Aug 2025 19:15:41 +0000
asID: 30781
IP address blocks: 156.233.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91192 (0x16438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 19:15:41 2025 GMT
Not After : Aug 21 19:15:41 2025 GMT
Subject: CN=686ebfe2-01cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:63:22:80:12:bd:e1:fa:02:2c:b3:35:8f:
fe:54:18:22:e9:9b:49:30:ca:d7:b1:20:2b:e2:3c:
1f:96:48:22:c2:f6:60:37:3b:9d:5e:d3:ec:73:d2:
fb:58:44:6e:05:2e:88:ab:81:e1:f3:ad:c7:4b:84:
97:20:28:d3:8a:09:95:7d:3c:07:e2:4a:1a:7c:93:
a5:dd:3c:ca:5b:a5:b2:65:27:ba:43:24:2e:d5:d9:
58:91:2a:ac:c5:4c:fe:18:3b:49:be:98:76:8b:e1:
a4:35:21:d5:33:b1:c1:6e:73:4e:d8:78:be:50:9e:
15:6a:50:fa:ce:5a:56:66:33:90:83:ce:86:13:b2:
6d:1d:1d:38:f3:8e:5e:c6:f5:be:93:05:cd:37:0e:
91:14:91:33:5f:fa:4d:72:37:26:38:40:ea:8e:f1:
70:f3:4c:6c:fb:f0:ee:ec:69:fa:82:a7:af:ad:fa:
00:f6:5a:26:5b:dc:55:34:42:c5:94:57:d7:58:8e:
90:bf:6a:89:25:f2:2e:81:a5:60:86:25:4f:18:cd:
91:34:e3:a1:fa:87:8b:20:65:c1:ab:03:85:31:5a:
9d:a4:d1:9a:68:1e:a8:36:74:8b:b4:22:66:55:7a:
e3:42:7a:07:f6:95:fd:f5:f1:8f:da:ea:d2:fd:74:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:37:51:F1:AD:31:0A:7C:1A:13:87:5D:7F:0A:43:2E:54:E0:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D995E165CF911F0ACFDA990DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.176.0/22
Signature Algorithm: sha256WithRSAEncryption
08:14:9d:12:72:15:90:4c:87:1e:5c:d5:c8:6e:1d:86:5d:40:
27:c9:2f:fe:0c:8b:9e:63:e8:3e:ea:d1:5d:29:5e:84:95:fd:
ea:cc:8a:a7:51:8c:bc:ea:61:36:a4:78:b4:32:c2:f3:8e:14:
8d:ad:43:fd:a4:8a:d7:3d:b6:18:63:c6:c2:65:db:49:0c:3e:
06:e7:aa:f1:e2:a0:67:93:8c:f9:c4:75:60:8c:cc:8d:97:d1:
c8:14:a8:a6:00:63:6d:b7:7a:43:bf:ac:41:29:2b:e6:0f:d3:
f6:2d:9b:9d:86:c6:91:3f:47:cb:2f:62:cf:0d:9d:3a:41:84:
68:03:da:87:f3:79:7d:0a:98:b2:56:ab:87:07:dc:10:32:ea:
f4:85:30:3a:70:e1:ae:b9:fd:72:7f:df:14:1f:38:7b:18:81:
2d:20:e3:2b:cb:4c:6d:fc:63:5c:96:74:2e:ce:d1:9a:e6:82:
b4:00:27:ff:ab:2a:a8:1a:49:23:05:0a:39:ff:c5:d9:3d:ca:
9e:5f:1e:f2:72:a7:e8:ca:c7:90:98:4e:c5:de:40:0f:cf:a8:
6a:4d:fe:8a:2f:82:01:2e:e3:40:29:9d:e4:85:2c:ac:4c:74:
67:db:9d:4f:c9:6a:7d:38:58:43:9f:2f:d4:e5:0f:ab:84:52:
03:60:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:24:40 2025 by rpki-client