Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054F269EA34711F0983A0B7ADAE4EC9C.roa
File: 054F269EA34711F0983A0B7ADAE4EC9C.roa (raw, json)
Hash identifier: 1fH99WPDf5ZgCZC0C8zk/JqtsFjZnyfAMtYyjR6mNe4=
Subject key identifier: FF:E6:DA:A6:E6:1F:92:6B:DF:C3:0D:AD:C2:DC:05:00:6D:29:38:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054F269EA34711F0983A0B7ADAE4EC9C.roa
Signing time: Tue 07 Oct 2025 06:29:48 +0000
ROA not before: Tue 07 Oct 2025 06:29:43 +0000
ROA not after: Sat 08 Nov 2025 06:29:43 +0000
asID: 213999
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98067 (0x17f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 06:29:43 2025 GMT
Not After : Nov 8 06:29:43 2025 GMT
Subject: CN=68e4b35c-89b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:a5:dc:2f:b2:cf:41:78:38:b7:ea:a1:70:
0e:0c:a5:ad:53:84:6f:a9:54:92:b9:cd:ce:07:53:
f1:f7:63:3f:5a:5e:c0:ca:7b:0d:07:25:c5:89:c2:
91:72:5f:8c:c0:f3:26:14:ee:a1:45:1e:52:e0:4e:
82:dc:79:1d:cf:d2:f4:f8:40:fe:fe:4d:72:1a:aa:
a6:2b:08:9f:8d:44:00:8f:79:91:02:28:35:ac:07:
83:15:75:bd:eb:4e:1a:e0:c6:d6:26:e8:5e:9b:fc:
cd:29:49:3e:28:90:bf:e2:48:c3:1c:68:31:0e:02:
a3:48:8d:dd:16:22:92:5c:31:47:92:23:e1:8f:30:
81:86:d7:bf:7c:1e:21:48:24:ba:5d:6b:a5:68:9a:
7f:a4:2b:6c:6f:71:bb:39:32:23:d7:25:9b:47:b1:
8c:46:b3:90:47:c4:7d:8a:e6:aa:7d:85:0c:35:aa:
86:3c:a1:c0:75:d5:54:33:4e:df:cf:aa:2a:74:67:
ff:07:58:1d:4a:26:17:4b:67:a9:d0:b1:b5:25:4d:
c7:a6:cb:4e:37:a6:b5:0e:ae:dd:ad:0a:ac:fb:b0:
a2:4f:f6:30:79:b4:ea:3b:b1:5b:d8:50:71:3c:6c:
4a:22:d0:ac:03:34:ed:4c:5f:7e:4c:88:96:d5:cb:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:DA:A6:E6:1F:92:6B:DF:C3:0D:AD:C2:DC:05:00:6D:29:38:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054F269EA34711F0983A0B7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0e:aa:70:1a:13:79:0d:aa:af:20:0d:20:51:e0:7d:b1:81:
f6:81:30:5e:2b:0f:37:4d:4c:2b:6d:69:76:fb:de:04:59:7a:
44:7a:2e:c5:cd:de:97:4b:bc:92:f3:7c:0e:f7:8d:e6:f9:0d:
28:2c:3f:5a:3b:e1:f1:c3:80:dd:94:a3:fe:0e:7f:42:30:38:
87:90:a3:01:7d:0f:23:41:d4:0b:cb:e0:93:39:d9:f8:a1:b4:
d6:02:78:b1:26:9e:f7:57:a9:b9:9a:a2:38:1e:af:26:66:6a:
f5:4e:a8:3f:af:42:25:b3:d5:ce:d5:da:5b:f6:53:b4:2f:b2:
45:25:a8:21:e5:ee:0f:23:2e:76:b7:de:66:04:9c:14:cc:d4:
b3:bf:ef:47:d7:ed:ee:98:6d:f6:63:3e:6b:73:09:b6:3c:da:
81:fd:fa:82:d6:48:6c:82:d9:a3:c6:e3:f2:8b:13:3f:92:28:
79:dc:ff:9a:76:01:00:27:4c:2e:8c:83:22:8d:8a:ab:99:04:
ea:0e:db:44:6b:17:ae:c0:8c:79:0d:0a:04:ba:bc:aa:62:21:
ee:25:3a:a5:7a:dc:7e:62:da:63:cd:5a:9a:d4:87:3f:41:ec:
fc:2f:47:45:eb:8d:ff:a0:9f:32:03:df:20:6c:eb:55:66:2d:
86:b0:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client