Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/360E04DC8A5E11F08F62B4DCDAE4EC9C.roa
File: 360E04DC8A5E11F08F62B4DCDAE4EC9C.roa (raw, json)
Hash identifier: 41XY72V2XULB/rwwkXeKqRgBMPGgILRG1zp1rgSRovg=
Subject key identifier: C4:E1:FC:CD:C4:63:90:73:E4:71:B1:38:1E:55:E4:77:9C:9E:7C:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01792F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/360E04DC8A5E11F08F62B4DCDAE4EC9C.roa
Signing time: Fri 05 Sep 2025 13:42:49 +0000
ROA not before: Fri 05 Sep 2025 13:42:44 +0000
ROA not after: Sun 04 Jan 2026 13:42:44 +0000
asID: 62610
IP address blocks: 156.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96559 (0x1792f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 13:42:44 2025 GMT
Not After : Jan 4 13:42:44 2026 GMT
Subject: CN=68bae8d9-e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:ae:6e:09:44:9f:bf:1b:cd:f5:fc:cb:d1:
66:d3:d1:87:3c:91:df:6d:1b:d2:ff:29:73:6b:9e:
e5:3b:9a:08:2e:a3:53:de:b7:6e:7d:9f:56:98:77:
14:1f:c7:ee:ee:6b:c5:0a:7c:3c:2f:bb:ad:18:b5:
2b:af:8d:b9:43:9c:53:7d:ad:44:13:48:30:2f:9a:
7b:09:f7:bd:3c:ed:84:a4:3b:6b:94:5e:be:df:36:
89:9d:e1:bf:22:61:14:86:ce:35:a2:37:db:2a:16:
90:d3:cb:6f:4a:81:0d:3b:67:18:17:e3:1e:17:1b:
03:42:ef:03:d6:bb:54:ac:d6:1f:d9:0d:cd:b5:e6:
22:17:96:d4:7c:14:cf:05:c1:9e:1b:f0:7d:d4:16:
51:eb:2c:63:44:a8:db:7b:f8:e6:fa:41:30:08:39:
08:c4:71:22:e3:0e:98:9c:74:ec:44:99:d2:80:57:
37:7d:41:ac:d4:58:40:ee:b9:80:8e:48:25:91:d2:
22:be:a2:34:f9:74:e5:2b:11:30:b1:bc:5c:3e:41:
c4:e5:58:ce:9a:44:02:df:f4:d6:be:5c:1f:d8:a7:
8d:ca:15:70:0a:4c:e5:c0:02:18:be:b5:4c:96:50:
fb:1a:e1:d7:b5:fa:f7:f1:54:a7:b9:fe:d7:a0:a7:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:FC:CD:C4:63:90:73:E4:71:B1:38:1E:55:E4:77:9C:9E:7C:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/360E04DC8A5E11F08F62B4DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
88:11:aa:d0:40:df:86:c6:2c:3d:3d:dd:84:31:5b:c2:02:dc:
66:da:9d:fe:9d:c9:4b:fc:8b:fd:7d:6e:48:4e:80:e2:10:50:
b4:31:3e:68:cc:39:75:86:c4:7b:3d:94:1e:87:a2:16:ea:12:
e7:14:38:87:24:bf:b5:10:dd:75:78:a4:94:85:18:33:07:1e:
ce:2a:42:8a:76:9e:28:3b:cd:87:1d:c3:ea:a4:60:93:14:23:
6d:51:03:18:9a:91:70:e2:e1:03:d2:93:49:cd:90:07:96:f5:
fe:1f:51:82:fc:5b:42:57:f6:3c:65:ad:31:45:72:ba:c3:39:
03:0c:ff:b9:c7:eb:55:a5:a8:80:04:3f:04:4f:7e:f5:c2:2c:
bd:b6:db:db:db:0f:40:06:77:d6:b5:d2:80:aa:5b:e8:a8:4a:
2f:34:fc:cd:ba:51:96:86:a1:da:d1:1e:ba:66:af:4a:db:8f:
11:2a:68:c4:ed:7d:0a:2c:f4:be:20:d8:82:5e:cf:16:8b:0d:
dc:65:c0:a6:eb:02:eb:23:33:36:66:46:61:0d:71:c3:19:ef:
6a:f6:b0:6f:f0:b8:54:3f:6d:9e:7f:40:e1:1f:16:0f:30:47:
0b:2e:42:3b:03:4b:d5:84:91:3c:85:ef:b5:79:1e:fd:02:1d:
92:8c:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:11 2025 by rpki-client