Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B680767F5E11F0A77512AADAE4EC9C.roa
File: 05B680767F5E11F0A77512AADAE4EC9C.roa (raw, json)
Hash identifier: AKFKD2plDaCGraDbQf1LAolyCpFAhNwX6hnbU8W1lUc=
Subject key identifier: 93:AF:08:6F:E2:CA:C4:86:03:CA:A6:98:D0:7A:F1:26:73:F4:CF:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016EC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B680767F5E11F0A77512AADAE4EC9C.roa
Signing time: Fri 22 Aug 2025 13:43:45 +0000
ROA not before: Fri 22 Aug 2025 13:43:39 +0000
ROA not after: Sun 05 Oct 2025 13:43:39 +0000
asID: 40779
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93895 (0x16ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 13:43:39 2025 GMT
Not After : Oct 5 13:43:39 2025 GMT
Subject: CN=68a87411-892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:d8:d4:1e:92:8f:49:47:11:a8:ec:ab:a9:
9b:6f:cd:69:94:0d:55:36:dc:47:a8:06:6b:33:d7:
48:90:e0:c9:48:97:3c:ca:8f:09:6a:db:14:4f:59:
4f:24:e0:5f:3e:11:8d:dd:eb:2a:45:bf:f0:ae:23:
04:08:8d:0a:3a:ef:a2:34:22:33:7d:1b:78:96:8b:
e8:9f:d2:cd:79:e6:d5:a4:50:47:a8:00:ff:87:e8:
00:cc:ed:5f:5c:80:a5:8a:8a:19:62:d8:3d:54:81:
ba:2b:67:32:b8:c6:ac:1f:6e:39:fc:05:18:b4:e5:
89:1e:9d:74:c8:b0:9c:35:e8:a1:67:40:20:67:50:
a0:76:1c:2b:2d:e2:c2:cc:d3:d4:4d:80:eb:ce:79:
6c:82:2e:30:b3:9d:83:3e:09:61:84:4e:e4:85:f8:
62:94:ba:c6:26:1f:27:98:1a:e6:53:bc:c9:9a:da:
ff:13:64:ef:ad:24:6e:ae:42:5d:48:3c:fb:b7:a5:
ec:c1:da:08:05:b2:14:78:03:b5:ee:2c:64:cb:01:
f6:15:42:30:51:7c:23:ee:4c:8f:82:a7:9b:1f:d8:
de:82:83:4a:9f:d6:3c:d9:ed:f8:c6:3c:67:0c:ea:
a1:21:9a:1e:22:f5:44:ba:da:c4:e1:cf:b4:f9:bc:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:08:6F:E2:CA:C4:86:03:CA:A6:98:D0:7A:F1:26:73:F4:CF:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B680767F5E11F0A77512AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
73:de:00:93:84:c9:2e:b0:45:61:44:e4:2f:dd:dc:a5:cc:83:
92:a7:bc:e5:f6:59:27:ce:f3:ae:c8:0f:4d:19:e9:b8:80:f9:
0c:16:d9:47:c8:fc:9c:71:d9:c0:90:6a:60:7b:4d:d0:ed:e5:
9d:50:19:46:e3:5d:0e:20:1c:0c:29:3b:b3:d3:7a:83:7e:f2:
4e:46:5c:cd:da:c1:02:fe:5d:6d:ac:1a:ce:a6:0c:88:a2:10:
e8:db:28:5c:29:b0:97:e3:25:bc:88:9a:14:87:18:1f:91:58:
9d:bb:f6:3b:ad:c4:7f:f5:12:a3:46:86:ba:b1:49:a4:05:83:
c5:c8:3a:ea:ab:46:09:a8:86:15:46:03:68:f5:fb:05:9c:23:
70:1f:e6:26:9e:a3:b4:11:1f:7f:8d:af:f5:3d:b2:bb:f8:31:
3d:cb:de:7d:6d:c4:ae:1a:bd:33:95:99:2f:3e:9b:9d:61:05:
17:cf:f3:3a:64:1b:f5:c0:b0:49:37:2f:5b:e3:c1:b3:94:59:
8f:ca:55:28:6a:4a:c0:82:27:6c:09:4e:3a:af:db:a4:75:6c:
56:f2:58:8c:4b:60:06:0e:61:8c:f3:5e:8e:1b:ee:85:f4:f4:
b1:32:d3:84:f2:ce:9e:55:18:90:d4:76:e2:70:89:9f:22:f6:
fd:9c:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:17:02 2025 by rpki-client