Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC5CA85C802F11F0B911DC88DAE4EC9C.roa
File: AC5CA85C802F11F0B911DC88DAE4EC9C.roa (raw, json)
Hash identifier: CUFOgZwv/KxFfPjpv6FunLDGD9Z8t3LOasGjvqpXdsw=
Subject key identifier: 54:B0:9B:2A:CD:FC:66:7F:9B:63:CB:C7:CE:6F:AA:B5:55:7E:32:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC5CA85C802F11F0B911DC88DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 14:44:30 +0000
ROA not before: Sat 23 Aug 2025 14:44:23 +0000
ROA not after: Sun 05 Oct 2025 14:44:23 +0000
asID: 395886
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93987 (0x16f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 14:44:23 2025 GMT
Not After : Oct 5 14:44:23 2025 GMT
Subject: CN=68a9d3cd-9961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:e7:1a:d0:48:42:76:6f:8c:2d:36:1e:c6:
cc:25:b3:f0:45:91:b8:3f:11:d7:90:c5:9e:3f:6a:
83:5b:70:0c:3f:37:f7:f9:85:b6:a2:98:df:33:9a:
85:e8:8a:a2:26:35:15:10:79:53:34:fe:d2:0f:a6:
ff:05:8b:3b:87:73:31:5b:aa:4c:f0:7f:99:30:97:
f1:cf:4f:48:1c:b0:14:48:31:df:36:01:4e:1d:b5:
d3:cc:1f:6d:45:a1:8a:aa:70:18:96:6f:fa:9e:6a:
fb:15:a9:61:42:0c:67:28:ee:7d:1f:ee:b4:23:f9:
2f:1e:95:b0:4c:22:b7:8c:f3:94:1f:b2:5a:7e:05:
ab:d3:79:9f:be:89:43:ac:83:db:68:68:cf:55:66:
f4:28:65:30:f3:20:8d:a8:62:cf:3b:08:e7:3c:20:
68:41:09:13:06:dd:b9:8f:bb:a3:35:14:57:c8:a8:
f7:71:fb:97:29:0d:fe:57:ac:be:9d:9e:8e:a3:ac:
5a:84:a3:c5:a0:d7:97:b6:a5:84:ca:65:2e:e3:e1:
0f:e5:7f:04:72:9c:d5:6a:88:c7:aa:0e:84:44:5e:
a1:98:cb:e5:fc:d3:d8:f0:77:71:77:32:d2:23:2d:
cc:df:24:f8:08:e2:c2:25:50:68:3e:ee:02:92:15:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:9B:2A:CD:FC:66:7F:9B:63:CB:C7:CE:6F:AA:B5:55:7E:32:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC5CA85C802F11F0B911DC88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
25:03:30:25:d1:1f:31:0b:df:24:4b:eb:f7:e7:10:1c:d1:f3:
f6:7a:55:6b:73:5b:72:da:f1:88:e7:dc:06:fa:b0:df:36:91:
28:b5:74:8a:7d:a5:05:ca:1e:9d:7f:74:d2:be:2c:72:ba:d9:
14:a1:1a:d6:8f:fc:76:05:ab:a2:52:d6:51:2d:fa:42:43:62:
e3:7d:c4:5d:7f:4d:0d:7c:e2:c2:f4:dc:52:07:d7:b3:1f:79:
ed:9a:35:94:ac:c2:d6:d8:77:bd:4e:be:62:d6:6d:4c:d1:47:
ab:a6:77:4b:f5:44:3f:79:8f:3d:03:8a:36:92:fe:b2:93:4e:
0e:e4:81:de:53:7a:48:ef:28:65:49:7c:fe:ca:f6:e3:b0:1e:
72:98:22:a1:e2:36:33:27:47:ca:ac:34:94:2e:1e:9f:85:a2:
99:01:2c:fb:19:a2:70:95:52:e3:dd:4b:31:e0:c7:33:98:8e:
d6:5e:34:4d:3b:5e:b2:b2:20:68:45:26:4f:bc:dc:4b:36:71:
e7:79:f1:0f:fc:1a:2d:96:b9:26:ef:90:96:9a:ad:dc:bf:38:
0d:ea:bc:d8:45:93:10:ba:f8:e2:2b:9e:95:56:9b:2c:2e:57:
12:d6:9b:b5:f1:69:ec:59:68:52:40:bb:d2:a4:04:b9:d5:a3:
38:20:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:49 2025 by rpki-client