Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D595C7945CC111F096EF47AEDAE4EC9C.roa
File: D595C7945CC111F096EF47AEDAE4EC9C.roa (raw, json)
Hash identifier: +00dKi6SzUQzXitkjYUFNeZ9VmRVtc35j6gMGvdY+Dk=
Subject key identifier: 75:9D:28:45:89:51:E4:61:B5:8C:D8:BF:54:2B:60:1E:AE:A3:BD:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0163DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D595C7945CC111F096EF47AEDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 12:40:04 +0000
ROA not before: Wed 09 Jul 2025 12:39:58 +0000
ROA not after: Sun 10 Aug 2025 12:39:58 +0000
asID: 401696
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91103 (0x163df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 12:39:58 2025 GMT
Not After : Aug 10 12:39:58 2025 GMT
Subject: CN=686e6323-baaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:74:33:62:41:79:84:62:bf:ee:62:97:b7:
0d:2a:5b:8e:7d:02:1d:d8:3d:27:26:3d:1b:d3:07:
f3:d9:a6:13:13:6a:62:a0:08:cc:84:c4:57:5d:70:
ec:af:9f:77:f0:14:9b:ac:00:8c:d2:3f:95:08:8d:
ff:c0:bf:a8:3b:0e:e4:0c:c0:44:6d:35:01:7c:20:
3a:78:66:6c:8d:cb:c5:8d:91:14:33:ef:05:d9:34:
7e:73:5b:b2:8e:3b:0b:93:cd:ba:24:f8:c5:69:ae:
ad:25:e2:e6:47:16:a7:9a:3d:7f:e1:3e:22:18:75:
4d:67:37:d0:3d:79:12:20:42:e6:c5:29:33:76:63:
1f:01:59:19:b0:0c:17:01:af:c0:c4:b4:ef:9f:96:
17:b6:13:73:7a:bd:76:d4:cf:c8:08:16:af:da:e6:
95:6c:77:71:8b:69:ac:fc:dd:04:eb:52:ec:a4:80:
50:55:7d:ed:99:81:89:0f:6b:b4:1b:30:5e:e5:c4:
98:7c:36:9b:25:71:5f:94:37:b5:38:de:0e:8d:2f:
d3:23:a9:a6:cb:f9:3c:71:b9:9b:7b:cf:87:29:d2:
72:c3:7d:bd:c3:66:13:d8:16:63:97:0e:82:c3:4a:
51:81:45:f1:54:7a:b9:c0:9a:0c:d0:8a:3b:0e:c5:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:28:45:89:51:E4:61:B5:8C:D8:BF:54:2B:60:1E:AE:A3:BD:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D595C7945CC111F096EF47AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
13:e0:86:58:0d:7a:f5:ba:03:50:4f:6b:33:b3:05:cd:0a:ae:
09:ca:72:27:2e:93:cc:10:89:59:5c:93:ad:c4:6f:43:9a:d2:
c9:60:71:e8:5d:1b:25:f3:e2:ff:bf:5c:b9:de:c4:b6:06:ff:
68:c4:f7:73:47:68:29:88:f9:a4:30:12:e4:1d:ec:54:53:6a:
3c:ab:d0:4d:79:24:63:87:9f:df:b2:c9:b2:5d:ee:1a:a2:a7:
ad:3b:b4:f7:2a:59:31:4f:77:07:5d:51:88:17:ce:6c:d7:24:
8e:a8:a3:f8:dc:9a:7e:ad:0a:65:f0:af:39:a9:15:e0:86:b4:
9e:82:e0:e8:1e:a7:f5:47:19:32:61:11:ae:ce:6f:11:36:17:
2e:fe:98:1f:e9:bf:48:51:a2:18:4c:5b:ba:c6:0a:3d:39:0a:
00:d8:41:91:52:cd:fc:b3:49:33:a0:08:4d:7b:d2:36:b6:9e:
44:29:63:f5:be:75:b8:3d:eb:2c:b7:e1:9b:22:3b:f2:68:ac:
80:d5:a5:d7:4b:64:03:bd:8d:67:c1:b1:e5:45:54:0d:b3:73:
2c:b0:93:1b:71:fe:51:95:f5:78:09:85:62:f3:fd:17:46:7c:
e2:fa:24:ad:f9:06:cc:ad:7b:e3:47:6b:78:96:09:d4:aa:a6:
e0:16:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:37:16 2025 by rpki-client