Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4E7BEF6802E11F08A466284DAE4EC9C.roa
File: E4E7BEF6802E11F08A466284DAE4EC9C.roa (raw, json)
Hash identifier: uAQ+9l5YsIQHApg+OYdiDhnXpcp8/iJM9yQJdhoVUtk=
Subject key identifier: 0A:4A:6A:8D:DD:C3:5F:7E:E0:86:A4:20:78:77:BB:93:A8:6F:AA:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4E7BEF6802E11F08A466284DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 14:38:55 +0000
ROA not before: Sat 23 Aug 2025 14:38:50 +0000
ROA not after: Sun 05 Oct 2025 14:38:50 +0000
asID: 8796
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Aug 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93985 (0x16f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 14:38:50 2025 GMT
Not After : Oct 5 14:38:50 2025 GMT
Subject: CN=68a9d27f-2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:a0:05:94:bb:47:59:6c:7b:93:66:26:9c:
0c:76:9f:ed:fc:08:c9:d6:dd:fa:53:8a:b3:28:ad:
7f:ca:41:0f:de:dd:a0:de:df:01:65:ae:fb:6c:b1:
94:16:ca:b6:dc:93:c4:0f:7e:50:8a:1d:b2:f9:df:
d6:34:a0:e3:84:d3:b6:d2:78:54:9b:e4:5b:d1:05:
b2:42:20:bd:3d:bd:4f:33:e0:9a:f9:36:ec:a4:57:
00:8e:57:1c:d7:c2:b6:85:a4:4c:3b:1c:98:08:d8:
af:7e:8a:08:c8:5b:67:9e:4a:07:d7:ec:c7:ea:d9:
a1:eb:64:f2:05:ad:ac:5e:fe:b6:cf:2a:7d:20:07:
77:57:bd:ea:5d:bd:10:48:c6:0f:90:68:b6:68:fc:
6a:2a:72:d6:a7:d9:45:aa:10:93:2e:e8:83:a3:3f:
cc:a0:2a:d0:a5:40:c5:38:14:95:2c:af:fd:cd:7f:
37:8e:c6:31:f2:72:d2:cb:46:f5:8e:4a:41:9a:0a:
ad:d0:4f:fa:cc:a0:cc:d6:af:fa:79:47:95:0b:55:
ea:40:69:9d:35:59:79:ea:81:27:f2:33:79:70:71:
2c:91:9a:19:bf:a3:d9:97:89:11:3b:a4:bd:60:80:
9c:cd:2c:e8:35:28:f9:d8:ea:7d:76:28:a4:ee:99:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:6A:8D:DD:C3:5F:7E:E0:86:A4:20:78:77:BB:93:A8:6F:AA:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4E7BEF6802E11F08A466284DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:e9:9a:44:e7:54:a6:0d:bf:e4:84:9d:b3:ea:03:bd:2a:4a:
99:17:fc:08:74:f9:2e:84:03:10:fd:e1:5f:57:76:a4:0c:f7:
93:42:56:26:2b:e5:fc:72:3e:29:c4:fc:75:b0:3b:a7:dd:4a:
22:26:d2:c1:e4:1d:1c:27:1d:30:65:17:c9:98:78:91:50:a6:
fc:af:4e:fd:35:ed:93:a2:4a:09:aa:be:c1:ca:d1:5f:74:bb:
1b:bf:b4:d5:c5:79:e8:5d:6d:ad:70:08:b5:d9:cd:0f:b4:20:
dd:fc:2a:44:1e:df:28:e4:b6:74:f2:6c:8c:cf:92:0a:f4:0d:
be:a5:47:52:34:f2:97:76:8f:a2:a0:f6:ac:13:9b:68:01:67:
a6:50:08:da:7f:0b:7a:2b:49:14:95:7e:22:1a:fd:95:08:1c:
35:29:54:17:70:96:56:fc:09:f9:b8:17:64:6f:d3:19:3b:25:
ea:98:b7:c0:1a:c5:0f:4f:89:64:f3:be:10:ae:9f:ab:37:10:
5e:4e:73:20:d2:94:36:eb:7f:54:76:09:c9:06:ee:c3:c4:a2:
fc:67:d7:05:b9:97:ec:0e:f0:ab:52:fe:7d:97:49:fe:f3:6b:
1d:0b:38:be:47:bc:f4:8d:00:37:e8:d5:93:be:a0:9f:d6:de:
60:52:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:07:33 2025 by rpki-client