Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B5591CA9AAF11F0959840C2DAE4EC9C.roa
File: 2B5591CA9AAF11F0959840C2DAE4EC9C.roa (raw, json)
Hash identifier: 9r8G1EopGYVRwi/m0+xHaFb7llvkS9xzinZ8+uh43R8=
Subject key identifier: 24:4F:17:BE:28:68:C9:F9:C9:45:F3:E3:87:BD:38:04:23:85:D8:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B5591CA9AAF11F0959840C2DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 08:02:39 +0000
ROA not before: Fri 26 Sep 2025 08:02:32 +0000
ROA not after: Sat 01 Nov 2025 08:02:32 +0000
asID: 209968
IP address blocks: 156.225.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97629 (0x17d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 08:02:32 2025 GMT
Not After : Nov 1 08:02:32 2025 GMT
Subject: CN=68d6489f-bf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:f2:91:03:f6:d7:de:12:ba:50:a9:e6:05:
8e:21:29:9c:4d:96:10:91:1e:f4:b0:f5:f1:1d:3a:
5a:f9:7d:bc:6a:cc:f0:3e:8d:f8:0e:ca:39:05:b6:
6e:44:83:81:a5:f7:cd:bb:a2:7a:4b:6f:60:ec:2f:
a3:b2:86:60:2d:af:2a:fd:b0:bc:84:8a:0f:0f:fb:
62:85:60:db:2f:63:38:dc:5b:4e:6c:f9:ce:4e:90:
a2:b9:7d:af:e4:30:86:f4:4c:2f:c9:af:2d:db:b6:
82:28:cd:4f:5c:98:6b:34:3a:5c:48:21:7e:ce:a3:
95:a0:a9:51:35:33:80:ea:4d:25:bd:a1:08:63:66:
eb:66:d6:93:2a:8a:73:c9:1d:ca:ed:a3:33:9a:da:
61:36:f6:68:c5:bd:72:2b:d6:86:7a:fe:5b:59:d8:
85:56:24:72:f2:d9:72:e7:89:d6:55:71:b0:f6:fe:
d6:5b:18:51:24:7f:73:30:74:09:ec:6a:06:af:6c:
9b:94:be:cf:3e:ba:71:db:d0:70:5e:1b:dd:17:2a:
48:36:08:4e:a1:73:09:24:8c:ff:94:d1:b4:46:9a:
93:10:77:96:c5:37:ee:14:78:1f:41:a6:09:e4:04:
1a:91:ed:ad:a3:54:e7:c3:ee:80:d4:da:91:41:c0:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:17:BE:28:68:C9:F9:C9:45:F3:E3:87:BD:38:04:23:85:D8:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B5591CA9AAF11F0959840C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:64:ea:d1:85:b0:a8:a8:29:5a:fc:d0:e8:8c:67:f7:95:92:
55:cf:f1:fa:b7:17:23:53:73:76:a6:4f:9a:45:e5:a7:c0:d0:
9c:ab:3d:01:9a:c2:22:38:21:ff:65:9b:01:73:46:5c:62:8c:
74:d7:2f:d9:f7:30:da:d7:e5:31:ba:cb:80:0f:47:59:2a:03:
33:16:5e:bf:f9:95:7a:d0:41:23:3c:f8:ec:77:a9:c9:75:34:
fc:eb:fd:36:1d:27:c6:41:7b:b9:a5:f3:b9:fe:cd:df:77:67:
b2:81:60:0b:42:b4:de:82:60:8b:ce:19:a0:e6:28:d2:9a:91:
e5:05:9a:24:83:da:6a:9e:44:2d:de:42:2f:50:7a:af:90:b5:
a8:c3:78:cc:91:9e:af:3f:5d:2e:dd:7d:b8:0c:99:81:db:e9:
bc:38:67:35:69:e1:42:cf:9e:6f:c2:b6:ab:41:4b:8b:0c:30:
a8:53:d0:36:14:57:8f:91:31:3a:5b:bf:de:95:d4:4f:8f:72:
9f:21:26:f2:bb:8f:23:06:8c:89:67:c0:47:bc:06:09:77:04:
39:ba:79:b8:45:88:75:a3:49:2d:1c:cc:60:18:1f:e1:e3:51:
46:6e:3c:79:4f:fc:15:46:44:88:c6:aa:5a:79:32:5b:ed:81:
ab:4e:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:11 2025 by rpki-client