Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAE01F3E803111F0895E6098DAE4EC9C.roa
File: FAE01F3E803111F0895E6098DAE4EC9C.roa (raw, json)
Hash identifier: kSKqQzznT6PKxO4iELn0+BS60RkB4W41C7T/FRXccPE=
Subject key identifier: 77:F5:C4:0D:69:81:87:2D:B3:05:E8:86:7C:E1:F4:C5:3F:DA:7A:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAE01F3E803111F0895E6098DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 15:01:00 +0000
ROA not before: Sat 23 Aug 2025 15:00:55 +0000
ROA not after: Sun 05 Oct 2025 15:00:55 +0000
asID: 401701
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93993 (0x16f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 15:00:55 2025 GMT
Not After : Oct 5 15:00:55 2025 GMT
Subject: CN=68a9d7ac-c5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:d6:58:d2:14:99:eb:61:87:81:10:3b:1d:
d3:a5:7a:0d:cd:c1:02:61:15:89:59:d7:35:f9:6d:
67:ac:1e:61:f1:e3:8c:48:5b:60:02:89:bc:13:d9:
c2:55:c8:8d:d0:e2:9f:2d:0a:2b:cd:66:32:18:01:
9f:0d:d1:d3:fa:aa:b1:3f:95:c0:e4:05:e0:9c:79:
13:2a:4f:bc:81:72:b1:20:06:c3:07:c7:99:af:14:
55:22:70:07:9b:42:ae:3b:db:9e:26:fa:e9:bd:1e:
41:58:c3:20:2a:ff:43:01:e4:4f:79:5e:8b:da:24:
39:41:6d:db:00:5a:6a:6f:a2:09:fb:22:3a:99:6b:
9c:55:82:53:80:87:9c:cd:83:ef:93:e4:b2:1b:9d:
fd:1c:9b:c3:90:2d:b3:d9:ad:5f:e3:3b:73:cf:b6:
b7:9f:84:da:43:50:41:bb:db:61:e7:9f:8b:e1:c8:
d9:81:d7:9a:b2:ec:20:07:41:f2:8d:6a:aa:ae:75:
78:e5:05:58:e0:5a:fd:ca:7e:1c:04:36:59:f4:01:
24:f3:9c:22:fe:69:92:c6:0f:84:ae:d3:28:a6:58:
0c:b4:36:dc:83:5c:95:59:39:69:1f:f7:5f:5c:cc:
56:62:94:ba:d0:54:e1:dd:5c:b5:25:c5:b0:5f:30:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:C4:0D:69:81:87:2D:B3:05:E8:86:7C:E1:F4:C5:3F:DA:7A:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAE01F3E803111F0895E6098DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
92:5a:0f:8a:c0:7c:c0:6a:c8:6e:94:2f:07:95:4e:17:13:f6:
9c:77:1f:49:50:01:98:36:af:5f:a6:58:fc:89:f1:23:bd:98:
48:82:ed:c8:2c:e0:44:5f:06:2b:d6:38:79:ff:48:26:ea:e8:
33:f2:4c:ee:99:f7:3d:46:b1:ed:37:10:6d:99:cb:1b:83:4a:
72:43:0d:c0:07:3c:15:ae:b1:90:ec:90:a4:4b:77:6e:45:2d:
ae:37:ac:26:94:54:ad:30:c1:c1:27:60:19:2d:99:03:b5:ce:
8e:b1:17:01:4e:aa:47:72:90:1b:81:4c:e1:f4:22:df:f7:85:
e7:49:a3:fa:da:f8:9a:aa:5a:b1:50:59:18:4d:0c:ae:2c:9a:
82:75:a8:8d:94:85:0d:b8:df:19:7c:4c:ba:d6:cc:4f:ac:99:
f4:2a:1f:c6:1d:f8:52:e0:48:57:c7:47:a8:8e:d5:e5:48:62:
f5:4f:18:79:06:5d:77:6d:68:51:e8:45:12:bc:f1:50:cd:8c:
b7:bf:4d:68:ca:dd:b7:b4:70:dc:e2:c0:28:d8:61:92:b3:fa:
3e:73:06:40:ec:57:76:21:0c:08:ae:a3:58:37:19:05:f2:18:
62:0f:48:0a:1c:fd:49:95:ce:07:91:4c:c5:f3:73:06:74:37:
37:68:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:39 2025 by rpki-client