Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FEFA74AA6C11F0BC0E1A83DAE4EC9C.roa
File: 06FEFA74AA6C11F0BC0E1A83DAE4EC9C.roa (raw, json)
Hash identifier: OUD0qrRofhIdCO9sMX8AuThnC/UG039LmtGOAL23Dyk=
Subject key identifier: 9A:8C:04:31:CF:6E:89:05:FC:E3:ED:A1:E7:70:2A:C3:D7:D4:44:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FEFA74AA6C11F0BC0E1A83DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:42:20 +0000
ROA not before: Thu 16 Oct 2025 08:42:15 +0000
ROA not after: Mon 20 Oct 2025 08:42:15 +0000
asID: 21859
IP address blocks: 156.225.8.0/24 maxlen: 24
156.225.9.0/24 maxlen: 24
156.225.10.0/24 maxlen: 24
156.225.11.0/24 maxlen: 24
156.226.164.0/24 maxlen: 24
156.226.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 08:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98556 (0x180fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 08:42:15 2025 GMT
Not After : Oct 20 08:42:15 2025 GMT
Subject: CN=68f0afec-c3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:59:5a:bf:2a:3e:16:ad:af:04:c5:fc:55:
bc:14:3c:b8:4e:11:5c:b6:8f:12:f7:ce:fb:24:2e:
ce:81:77:d9:ee:99:32:48:a5:2d:6a:f5:77:e9:e3:
4c:c8:0d:c7:c9:a5:8c:bb:6c:1b:9f:e0:54:af:6c:
20:0c:94:96:89:5a:21:cf:fd:6f:00:91:3b:a7:43:
bb:17:ab:04:8f:19:f9:53:8d:d2:75:b5:89:6f:b0:
58:64:61:00:ad:95:1d:b1:09:5d:f9:80:de:69:c6:
9d:27:40:89:1c:bf:8f:24:07:d5:dd:19:12:69:e0:
4b:77:4b:3f:e0:66:90:43:10:8b:1f:1d:78:ca:32:
67:1d:6c:8f:a5:5a:71:9e:cc:46:6b:02:21:c3:76:
06:40:68:a4:f1:7a:49:d0:2a:5a:e8:c4:c1:2e:04:
48:6a:f0:29:88:79:00:f8:7d:33:7c:39:6a:9f:8f:
7d:86:1b:ce:1a:58:09:18:85:59:92:42:18:07:cd:
9b:df:05:c0:7e:b9:ff:b3:9d:0b:44:d7:55:ae:21:
dc:15:6a:b9:1a:7e:32:92:d2:b1:fe:ab:c5:bb:10:
2d:ba:94:3a:12:63:b5:e6:d0:e8:87:b9:2e:c3:54:
a3:c4:a8:48:28:e5:c4:be:61:6a:2d:35:d4:9b:5a:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:04:31:CF:6E:89:05:FC:E3:ED:A1:E7:70:2A:C3:D7:D4:44:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06FEFA74AA6C11F0BC0E1A83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
156.226.164.0/23
Signature Algorithm: sha256WithRSAEncryption
96:13:6c:ef:b4:0a:69:56:d7:68:46:b6:c2:e4:46:80:18:05:
bf:e2:2f:60:34:76:60:65:dc:6a:38:75:f2:29:cf:a7:df:b0:
d0:75:b3:76:41:ff:a8:4e:58:df:8f:a8:30:58:df:54:fc:d6:
1b:0f:44:ab:48:bc:43:9c:25:f3:25:5d:56:e0:6d:bb:73:e6:
8f:72:0e:6e:9d:39:a4:50:04:18:60:fc:9d:88:60:e5:61:7f:
9c:30:e5:50:b6:0c:50:be:17:f5:3d:b6:62:38:35:23:ae:ab:
8d:da:78:55:d4:70:e2:7f:0d:82:a5:2c:72:59:8d:6e:1d:93:
35:9f:b8:b4:81:5b:dc:6f:5c:ea:58:98:0d:79:0f:a6:08:cc:
2c:19:93:05:e0:e4:74:48:6f:25:4a:94:d1:26:4b:4b:a5:cc:
00:cc:bc:dd:10:09:3a:82:48:59:a1:34:18:91:52:dc:3d:7f:
b9:13:67:2d:a7:da:a4:1f:b2:93:04:51:88:bc:92:fd:fe:25:
44:40:c1:f6:b2:79:95:fd:12:66:96:36:fc:a5:45:d2:20:89:
1f:60:e2:a9:2a:7c:ce:c0:f0:01:b2:1a:0b:5a:3a:16:e5:4c:
d5:81:b4:ae:af:0c:a5:92:e8:83:ea:af:9c:82:46:f5:80:2c:
5d:99:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:06 2025 by rpki-client