Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7B1FEAA42B11F0B64365BEDAE4EC9C.roa
File: 2C7B1FEAA42B11F0B64365BEDAE4EC9C.roa (raw, json)
Hash identifier: KBamcRIDAjAWk7S3gns4PqJJ0aUCG884keC0G1pXOQs=
Subject key identifier: BB:CE:05:DB:40:07:3C:68:CF:F1:12:AA:CE:4C:4A:6E:17:B4:DA:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7B1FEAA42B11F0B64365BEDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 09:42:59 +0000
ROA not before: Wed 08 Oct 2025 09:42:53 +0000
ROA not after: Tue 11 Nov 2025 09:42:53 +0000
asID: 42689
IP address blocks: 156.241.48.0/21 maxlen: 24
156.241.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98148 (0x17f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 09:42:53 2025 GMT
Not After : Nov 11 09:42:53 2025 GMT
Subject: CN=68e63223-a1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:f9:28:ce:4a:60:ae:3e:9f:f5:74:82:01:
78:f7:58:44:b2:5e:ee:3b:56:4d:7d:ac:64:73:6c:
28:37:1d:d8:94:15:5c:7a:74:46:9e:dc:38:c5:bc:
b2:64:d4:38:bd:b2:04:bd:ff:19:b6:82:ac:fa:f0:
66:b3:a7:16:36:7f:3f:92:25:2e:39:a8:13:54:0e:
80:c3:0e:f0:fb:c1:dc:ab:2b:cb:5f:55:7c:79:c0:
e7:16:5e:c6:53:f3:c3:25:c1:e0:77:76:41:79:d5:
cc:e3:6f:e5:3e:38:07:eb:ee:e8:dd:29:8f:49:17:
de:c8:f6:7f:64:74:92:39:23:db:b5:02:d9:ea:f9:
82:34:fe:b7:ee:55:f5:36:6d:74:d9:6d:d2:e6:73:
c5:b7:8c:4b:84:de:f4:b0:9a:22:33:0f:50:44:16:
db:c4:5c:53:42:b8:8b:cc:a5:ad:58:26:ae:f4:07:
6d:7e:fb:2d:4a:fb:7c:a9:9f:57:81:a1:63:85:b2:
75:87:b0:47:52:0f:40:1b:4b:87:07:c0:7d:a1:93:
d3:ac:2a:69:d2:48:58:fa:86:73:1b:32:6a:20:2b:
05:66:06:e1:92:2d:61:34:b9:61:c5:e0:13:36:f5:
5b:41:86:e4:a2:8c:d4:5d:50:35:8c:f7:a5:1d:aa:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CE:05:DB:40:07:3C:68:CF:F1:12:AA:CE:4C:4A:6E:17:B4:DA:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7B1FEAA42B11F0B64365BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.48.0-156.241.59.255
Signature Algorithm: sha256WithRSAEncryption
45:7c:a7:07:83:a8:68:cb:d1:c8:d1:6f:3a:34:dd:d5:3a:f7:
d2:6d:17:92:fb:89:a7:02:4d:f8:6a:64:3e:3a:be:7c:5c:6f:
04:70:d7:8d:63:a4:44:e1:50:4a:88:af:e3:8f:55:fa:93:02:
b3:16:a5:4b:9c:4b:97:52:ec:c4:9a:d2:a4:d6:e8:4a:b7:63:
59:74:3c:8c:99:4a:13:67:7a:f4:29:5e:d4:25:8a:90:86:06:
a0:d7:24:0c:96:75:8a:e3:62:97:af:ca:29:47:29:91:19:bc:
0d:7b:1d:36:6a:c9:d6:41:8f:54:ec:33:3e:db:ad:c1:33:e4:
17:05:04:d7:82:2a:cb:26:09:25:0b:98:73:b0:85:0e:f2:d2:
e3:a5:86:36:9b:f0:07:25:ee:bb:d4:a9:cc:ea:3a:02:ea:64:
e9:6f:6b:c6:02:54:17:48:cd:3a:be:07:7a:21:7b:6e:3c:72:
a6:98:a9:7f:58:08:4b:5a:10:cc:44:7f:f0:2a:00:c6:d9:61:
ca:91:2b:92:2e:21:5d:51:43:e2:1b:82:15:e5:32:26:97:7e:
d4:5c:5c:2f:c1:fd:d1:e6:86:7e:2d:8a:f0:0c:0b:15:ff:41:
ab:17:22:0f:be:59:0a:64:ab:37:94:ee:15:a0:53:8a:8a:d3:
d3:22:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:40 2025 by rpki-client