Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B2896965B2111F082587394DAE4EC9C.roa
File: 4B2896965B2111F082587394DAE4EC9C.roa (raw, json)
Hash identifier: wToKRrNYJDqKEjxl9mvFIox0ZaXVvOJFI/Khp2J81X8=
Subject key identifier: 41:2A:39:0E:2B:37:A3:B1:AE:1B:20:2E:04:4C:45:3F:22:89:1F:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0162FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B2896965B2111F082587394DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 10:58:21 +0000
ROA not before: Mon 07 Jul 2025 10:58:15 +0000
ROA not after: Sun 10 Aug 2025 10:58:15 +0000
asID: 137899
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90878 (0x162fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 10:58:15 2025 GMT
Not After : Aug 10 10:58:15 2025 GMT
Subject: CN=686ba84c-79fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:53:97:fe:a7:18:12:9c:60:e6:fa:e0:5b:
34:7b:7d:e6:c9:c8:fe:aa:50:21:53:78:3e:b8:dc:
56:bd:91:86:e1:73:a5:61:0d:fa:32:52:cc:c1:ed:
c4:ef:99:d3:4e:4e:8e:34:4c:be:dd:c4:f5:a1:1e:
22:b9:f4:8f:4c:1f:71:2f:3e:ab:87:7d:d8:01:9b:
4b:cf:0d:8e:85:80:0c:06:46:dd:f7:ba:d2:8f:04:
c5:00:54:59:f0:4a:81:3d:74:10:51:39:28:44:8f:
10:b5:a2:19:30:8e:6e:41:34:3d:2c:cb:fd:93:7b:
74:97:6c:f5:0d:7b:3a:98:63:b6:c4:17:1b:9c:0c:
ce:cb:ec:14:e3:f0:84:58:b2:e5:36:66:d6:8e:91:
8a:c1:02:97:03:57:3d:37:05:9a:06:4d:e1:89:06:
23:27:57:07:96:a1:cf:35:14:4d:6a:f4:40:01:52:
09:dc:0c:03:e7:c8:50:25:db:7a:c5:ff:cc:e5:95:
ca:ac:d4:de:13:07:30:24:0f:df:7e:18:67:36:fb:
8c:0d:1d:a0:6e:ba:d1:10:bd:be:32:f0:93:fb:de:
14:57:bd:76:3d:cc:b9:84:66:0c:38:02:93:1e:0d:
9d:59:d6:08:7a:e6:e4:2d:f2:77:a3:4e:38:57:af:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:39:0E:2B:37:A3:B1:AE:1B:20:2E:04:4C:45:3F:22:89:1F:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B2896965B2111F082587394DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:fe:7b:aa:09:df:1c:23:eb:bc:90:fe:ee:a7:df:13:2f:46:
83:6a:7e:1e:bf:66:02:bd:71:0a:b0:1f:b5:9f:47:4e:e0:fc:
aa:21:8b:22:5a:e0:47:9b:d2:cb:3c:c0:89:f9:e3:db:e8:00:
9b:d6:d3:32:a0:64:b2:a9:ba:b1:f3:1d:29:5d:09:85:f8:96:
31:16:7e:1e:c2:e4:2e:87:8f:d9:93:b0:ef:fc:70:f1:87:d8:
ae:de:13:ed:58:f1:28:9c:9d:ce:49:e5:4c:87:cf:34:87:0b:
e9:d5:fa:b9:4e:1d:35:e1:9a:ea:81:a6:4b:de:97:7e:08:06:
04:58:2b:fc:c6:08:39:8c:0b:ca:3b:de:15:bc:23:34:71:c0:
05:30:6c:8d:76:b7:92:b6:40:3d:62:c0:1d:73:30:45:ee:a6:
23:a1:e7:92:4a:f7:e2:05:f6:bc:60:c5:10:5e:3e:e7:14:a8:
3e:b0:a9:b7:fa:bd:c9:1e:69:e2:fd:2d:66:69:85:56:b3:6e:
f4:d2:0a:1b:07:fb:85:09:71:3c:26:8d:8c:bd:a7:d6:4d:0b:
4c:05:c0:b1:b3:80:3e:27:c2:15:64:ba:77:3f:0f:17:ce:e4:
cf:95:9e:af:bc:b9:64:0f:43:da:b2:2a:7e:0d:5b:36:d6:01:
52:7d:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:31:36 2025 by rpki-client