Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B27FD72A44211F09DD605D1DAE4EC9C.roa
File: 2B27FD72A44211F09DD605D1DAE4EC9C.roa (raw, json)
Hash identifier: 3SjG9zLXnMq8XA9xkCnEl/3Wk1r3gYkMHtJo/U/U4T8=
Subject key identifier: 47:04:11:59:77:39:B2:F4:9F:E0:E8:1F:BB:41:F4:2A:98:AD:1F:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B27FD72A44211F09DD605D1DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 12:27:35 +0000
ROA not before: Wed 08 Oct 2025 12:27:30 +0000
ROA not after: Sat 22 Nov 2025 12:27:30 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98188 (0x17f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 12:27:30 2025 GMT
Not After : Nov 22 12:27:30 2025 GMT
Subject: CN=68e658b7-4341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:e7:b0:22:48:ae:ee:de:a5:c5:97:f1:5e:
31:39:4e:7c:0e:6d:92:3c:a7:4f:0f:33:a0:09:5c:
d5:4d:ea:f0:cd:17:8f:de:5d:e3:a5:5e:10:9c:eb:
0f:38:e3:14:2e:1e:fd:43:29:ac:50:f1:dc:fb:de:
f4:0a:87:e9:d8:4d:79:ca:ce:a8:fe:93:99:1b:02:
01:56:8e:99:12:06:9b:f6:5c:fd:23:7f:8f:42:bf:
20:cc:c3:af:2d:65:cb:7e:8c:c4:ff:99:de:cc:1f:
e5:b8:ef:4f:0e:d9:3f:7b:f7:e4:7b:7f:49:14:8b:
5c:d0:38:5b:47:32:aa:35:ef:1b:b8:36:e0:df:5e:
3b:56:36:18:aa:01:09:5b:89:7d:9d:6f:13:b6:81:
78:d7:58:33:cb:c7:de:dc:25:97:24:ae:70:0a:50:
c8:19:42:62:65:71:cd:9c:9f:50:c5:0f:7c:44:88:
e1:aa:13:54:26:6a:0e:1e:82:a3:61:b5:44:11:2c:
b1:1e:b9:4a:69:6c:8f:c2:de:1f:fb:7a:b4:54:a0:
5c:64:59:3f:be:ae:db:ea:32:f0:f2:c7:36:4e:6b:
c5:71:d5:4e:eb:a8:19:78:e0:dd:12:51:95:5b:a6:
ae:f8:78:fb:60:f9:87:f1:ce:7d:90:a1:b8:07:11:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:11:59:77:39:B2:F4:9F:E0:E8:1F:BB:41:F4:2A:98:AD:1F:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B27FD72A44211F09DD605D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
11:0f:0d:de:08:d3:0c:89:33:8a:9b:70:10:05:44:c4:e6:70:
58:de:db:80:68:31:de:53:0a:20:07:b7:06:87:ed:6f:26:97:
d0:ee:d6:3f:a1:ec:58:d7:e7:50:6f:ec:cd:c9:3c:bd:d9:27:
11:d3:87:aa:a9:f7:19:9a:12:8a:52:77:b6:88:e4:55:2b:f9:
e6:86:c2:e5:6e:06:c7:0d:ec:24:2b:25:43:11:33:91:e0:3a:
c5:4f:8c:6e:38:53:3f:b5:ba:ea:e8:ef:4a:88:dc:1e:3a:65:
7b:b4:45:04:5b:21:83:5f:7a:1c:c5:f7:23:2d:1e:ed:25:13:
71:d7:bf:25:bf:42:72:f8:db:fb:40:23:94:a7:06:1e:f5:ca:
6d:b2:4b:4e:12:3c:cb:53:de:b9:5c:c9:c5:cf:88:3a:10:38:
a2:2c:e1:51:7c:8a:de:68:8e:e6:89:ea:4a:99:2a:a9:b7:e1:
28:57:6b:6e:f7:27:20:40:16:1a:9c:66:fc:be:0e:ae:85:96:
ca:09:b8:b3:8f:7c:81:66:53:22:1d:a4:63:24:cf:82:84:38:
6f:39:0b:6a:89:c8:be:fc:e7:f8:ad:0c:61:75:d1:c4:9c:a4:
4c:24:94:3d:3a:2f:82:af:96:2e:27:14:67:a9:82:90:68:72:
95:9f:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:53 2025 by rpki-client