Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15AC315293A311F0A92E82A2DAE4EC9C.roa
File: 15AC315293A311F0A92E82A2DAE4EC9C.roa (raw, json)
Hash identifier: 2eJZQXNksctZuQmZUkQ8R6n8GhESfSlB16sv1V3bhBw=
Subject key identifier: F8:BA:E4:68:E3:73:74:8F:50:30:4A:BF:48:09:70:82:69:A4:84:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15AC315293A311F0A92E82A2DAE4EC9C.roa
Signing time: Wed 17 Sep 2025 08:48:30 +0000
ROA not before: Wed 17 Sep 2025 08:48:26 +0000
ROA not after: Mon 03 Nov 2025 08:48:26 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97196 (0x17bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 08:48:26 2025 GMT
Not After : Nov 3 08:48:26 2025 GMT
Subject: CN=68ca75de-713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:a0:8b:ab:66:4f:aa:ba:9c:b8:a3:9d:f4:
88:24:ac:bc:8b:f8:4b:ab:7a:5d:49:2a:ba:fc:13:
5b:42:37:10:80:a6:7c:ea:d5:fc:f2:0f:14:ca:b5:
89:85:44:21:27:03:21:64:11:b5:4a:d7:d6:d3:62:
84:0b:a0:ba:ab:30:ff:40:81:8d:14:37:d4:f1:51:
9d:76:0b:dd:24:c9:85:84:32:69:34:d7:51:42:94:
02:7a:7a:df:07:0f:17:82:d4:29:3e:04:9f:11:19:
6c:62:f0:16:82:44:60:8a:56:74:b3:0f:eb:a0:73:
49:0a:df:79:70:3b:34:e2:e6:56:84:65:e8:c8:68:
dd:f0:12:84:35:38:85:ec:d0:bc:48:76:f3:a4:08:
cf:fa:8e:dd:fe:be:95:bd:47:d1:4e:e6:d1:ab:3c:
f9:e4:72:63:ff:b1:ea:fd:8f:06:ea:96:bb:2f:f4:
ce:99:fa:04:1f:f4:f7:27:69:c1:f8:1e:02:f2:a1:
3b:13:62:52:76:1a:57:06:d5:bd:b6:1c:ea:1a:26:
2b:83:ed:f0:d9:0f:36:6f:15:cd:41:36:c9:22:d0:
a4:9d:8e:1f:82:ea:8e:fa:12:8f:22:f6:f6:ce:0d:
fa:3a:51:19:58:36:74:15:3c:ea:5e:92:08:e8:0d:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:E4:68:E3:73:74:8F:50:30:4A:BF:48:09:70:82:69:A4:84:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15AC315293A311F0A92E82A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:99:95:5e:ea:5d:6c:0b:27:42:9f:73:43:da:0f:cd:22:88:
3e:55:11:e3:f2:0d:c7:d0:e3:d6:0f:e1:61:67:bc:8c:cd:a9:
5e:69:cc:d6:d9:98:3f:0b:8d:68:81:e8:8b:11:7e:04:15:c7:
d1:3a:6c:96:41:7e:5b:99:fa:b2:00:db:c2:d2:c1:fb:24:3e:
ac:f1:af:a1:1f:97:3d:f2:33:cb:2f:bf:f0:fe:ff:ee:2c:82:
ef:e0:7a:77:e6:52:4e:86:33:be:f1:27:d8:6d:95:66:67:62:
d8:d5:75:90:86:fa:6a:84:7e:28:23:fe:47:1d:64:42:a6:93:
d5:45:10:e4:a7:b4:a4:28:aa:32:2b:94:94:c7:92:99:07:ca:
35:85:bd:ee:c5:90:35:1c:3e:09:86:8f:aa:a3:d2:52:c1:77:
4a:f1:93:b3:51:b4:ca:10:af:00:49:ea:ff:eb:cd:83:0e:41:
c7:91:95:65:d1:94:3e:ac:d8:3f:b1:bf:16:bf:05:d8:08:ed:
0b:f4:4b:e9:d6:4e:b5:66:e0:d7:8d:d8:2a:35:2a:e6:ff:4f:
84:80:b7:e5:51:24:ad:60:28:34:29:7c:31:0d:e5:a4:37:ff:
7f:58:2d:5b:a9:06:4b:88:67:51:f3:3a:aa:7f:77:78:3e:4a:
29:6f:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:52 2025 by rpki-client