Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2248DDF4ADB411F0AD47D1BEDAE4EC9C.roa
File: 2248DDF4ADB411F0AD47D1BEDAE4EC9C.roa (raw, json)
Hash identifier: Px9zBjMJsS5JdiVGygZ/eUZFkRH1AK29xBvYz28pIgo=
Subject key identifier: A6:2A:59:52:6B:CB:E0:CE:58:30:EE:A2:2D:C1:9C:CF:13:F0:9C:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2248DDF4ADB411F0AD47D1BEDAE4EC9C.roa
Signing time: Mon 20 Oct 2025 12:56:03 +0000
ROA not before: Mon 20 Oct 2025 12:55:55 +0000
ROA not after: Fri 05 Dec 2025 12:55:55 +0000
asID: 401701
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Oct 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98757 (0x181c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 12:55:55 2025 GMT
Not After : Dec 5 12:55:55 2025 GMT
Subject: CN=68f63163-a6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:36:44:4d:32:b2:51:da:8e:07:6e:94:bd:
7b:43:17:88:4c:1e:d5:e3:1b:1f:92:6e:89:94:31:
22:9b:3c:27:7b:77:d4:8c:b2:0d:b3:e4:cb:c7:fe:
b9:f3:f7:51:0a:c3:8a:ad:25:d7:7d:18:69:dd:43:
0a:5a:e0:52:91:38:c5:de:d2:16:0b:cf:40:5c:4d:
8b:1d:d3:89:0b:1d:d7:33:e7:4a:56:de:e4:6c:8e:
c3:bc:b6:a9:2b:39:b9:df:aa:fb:69:df:15:ac:28:
ad:5a:16:5c:fd:ae:a2:5f:3b:90:c9:ec:e1:27:e2:
25:dc:99:70:db:f4:b2:9a:13:c4:39:3f:62:c5:49:
39:8c:25:0f:b7:f0:c8:0a:fb:bb:a3:70:6d:e4:74:
48:fb:a5:d4:43:a5:7c:99:13:e7:8b:ed:52:8d:50:
5d:5a:84:48:1e:cd:89:8e:8c:30:cf:d1:a8:69:93:
ec:91:28:17:25:70:9c:6d:24:8b:ca:7d:d0:53:32:
1e:f4:a7:5d:39:b9:9c:b5:47:2a:57:56:2e:40:04:
7e:a0:00:ad:c3:9a:52:47:02:96:3d:14:c5:4d:3c:
80:2d:51:f9:c8:77:3d:3e:4b:57:a3:5d:ae:ad:ee:
b5:cf:fa:e1:05:85:19:c7:b8:86:5e:20:a5:ee:d7:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:59:52:6B:CB:E0:CE:58:30:EE:A2:2D:C1:9C:CF:13:F0:9C:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2248DDF4ADB411F0AD47D1BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
51:3c:5c:57:6e:07:1d:77:08:ec:38:2d:ec:91:c1:b4:31:f7:
a9:32:cb:2e:ea:88:1f:ca:78:ef:39:64:cf:0e:79:e3:35:e7:
8a:41:33:4c:7e:52:94:38:b2:26:21:55:9c:41:79:67:82:97:
aa:d0:c2:12:02:fe:9b:58:6b:d1:fa:81:c9:4d:ad:5d:cd:79:
ea:08:54:ab:33:42:2c:56:01:d0:fa:a0:8e:69:93:7b:46:71:
10:92:2c:b7:a0:9e:b1:72:42:eb:79:22:71:22:a6:04:bf:be:
76:3a:5e:7b:50:b4:47:93:e4:83:82:0e:9c:6d:49:7c:4a:55:
3d:c6:e0:21:71:1d:e0:60:38:69:fe:db:13:eb:21:ba:44:66:
93:64:0b:d3:48:e2:83:6b:4b:d9:47:cf:05:2a:4e:78:51:ce:
86:c3:e5:dd:c1:24:40:44:16:f7:07:98:3a:56:d6:98:91:db:
7f:72:97:13:ce:f1:03:0d:c9:5c:a9:7a:05:4b:2e:37:4a:39:
99:63:80:0a:4e:22:ea:20:7e:e0:73:1f:58:3e:0d:ab:8e:a2:
f4:b2:d7:ad:8d:cb:d8:74:f6:ca:d7:e5:88:11:aa:a0:27:c0:
0d:8f:ed:2e:b3:4d:65:00:d1:6a:56:34:bf:cd:a5:41:e2:3f:
e3:60:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:11:04 2025 by rpki-client