Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B1875509F7A11F09C5A87CBDAE4EC9C.roa
File: 1B1875509F7A11F09C5A87CBDAE4EC9C.roa (raw, json)
Hash identifier: Z++SIFPQu1yvhxla4GPzCfxXrtdxjL8Re6RsnxWBEwo=
Subject key identifier: C1:FE:BF:DE:AF:A1:09:D9:4F:DB:35:F9:90:AC:76:22:A4:03:BA:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B1875509F7A11F09C5A87CBDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 10:25:24 +0000
ROA not before: Thu 02 Oct 2025 10:25:19 +0000
ROA not after: Mon 10 Nov 2025 10:25:19 +0000
asID: 40779
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97908 (0x17e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 10:25:19 2025 GMT
Not After : Nov 10 10:25:19 2025 GMT
Subject: CN=68de5314-1ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:13:fa:5e:19:76:49:ca:a2:93:fd:07:c5:85:
b1:95:9e:bc:20:7c:76:b8:c0:86:bc:b3:0c:34:9c:
e0:4d:b1:d2:65:20:c2:ac:18:53:42:1d:d5:03:4f:
59:33:21:6e:c1:4c:00:6c:d4:a6:80:1a:7d:ea:fa:
ba:00:f1:e1:6d:69:62:88:58:4f:d5:d5:46:60:3e:
d4:7d:c2:71:3f:ee:a0:03:d6:29:bd:6d:8e:43:51:
d9:b9:f2:27:26:0f:64:c7:a3:73:27:5f:23:58:fb:
95:97:36:81:84:03:33:dd:d3:e9:92:4a:5a:18:5b:
97:23:83:f3:be:a2:a2:32:5a:d5:bd:ee:d7:27:43:
bf:78:0a:5c:df:9d:a5:b7:11:3a:2f:34:8d:72:1e:
91:23:82:3a:4f:6c:4b:bf:59:8d:53:4a:4f:b9:ee:
6f:7e:0d:26:7e:99:ee:37:14:6a:e0:3c:4a:72:9a:
ad:7b:ca:25:87:e6:5d:b2:d4:eb:60:8b:b5:02:2a:
3f:89:21:66:58:98:a8:a1:e7:3f:c3:2d:de:cb:0e:
6b:cb:a1:c2:c8:ba:05:8e:bd:d7:80:21:38:ce:fb:
48:51:f9:1f:74:4b:b0:88:ba:33:7f:98:f6:d3:59:
c1:86:30:4c:1c:82:dd:85:9b:74:93:3c:42:6b:76:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:BF:DE:AF:A1:09:D9:4F:DB:35:F9:90:AC:76:22:A4:03:BA:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B1875509F7A11F09C5A87CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:05:9d:44:00:c7:f2:48:d9:2c:98:4c:fe:66:58:96:1e:40:
06:17:61:9a:7d:b4:8a:fc:91:2d:f6:78:67:f8:21:81:7c:e3:
9a:2a:f7:96:3e:8a:77:bd:4f:51:f4:b7:5c:ee:0d:dc:6b:ba:
9a:7c:fe:8f:6a:4a:a2:71:2d:16:c7:01:e1:d2:22:a3:c4:44:
ae:2d:08:15:2d:ac:bf:64:17:5d:f1:35:93:dc:19:3b:78:db:
1b:15:af:a9:40:36:bf:ec:66:c2:a7:b2:2f:03:6b:25:aa:2b:
10:07:4a:8c:3c:e3:fb:2c:85:72:05:39:c3:de:d7:60:c7:20:
cd:b7:c4:e1:5b:24:b3:07:32:15:6f:8f:d7:9f:72:ee:f1:95:
8b:df:f6:da:43:cd:70:94:49:69:38:ca:82:51:32:53:aa:88:
cf:50:bb:71:fa:ba:4f:3b:8e:20:35:d3:9f:f8:18:d6:63:74:
6c:27:4c:23:e4:7f:d0:dd:15:47:c8:35:99:7a:5e:69:df:45:
19:6a:86:37:e2:b8:a4:c9:92:8f:c8:87:0b:bb:e9:74:4b:54:
ab:16:bf:7e:4b:a5:9a:0c:36:cf:d8:81:84:94:38:62:18:02:
3e:10:5d:9e:53:0f:87:94:b2:25:7d:bb:42:29:28:c6:e5:fa:
d3:28:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:26 2025 by rpki-client