Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37FDCF4AA76C11F0BEF55DD3DAE4EC9C.roa
File: 37FDCF4AA76C11F0BEF55DD3DAE4EC9C.roa (raw, json)
Hash identifier: q1xWfFvtLDLTRvrXV6sg93EcXlpAqV43+0E3rUGPelY=
Subject key identifier: 6D:69:58:24:C5:F7:7A:A7:F8:88:8E:2C:41:2B:FE:E4:EF:07:E5:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018032
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37FDCF4AA76C11F0BEF55DD3DAE4EC9C.roa
Signing time: Sun 12 Oct 2025 13:06:09 +0000
ROA not before: Sun 12 Oct 2025 13:06:01 +0000
ROA not after: Thu 27 Nov 2025 13:06:01 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98354 (0x18032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 13:06:01 2025 GMT
Not After : Nov 27 13:06:01 2025 GMT
Subject: CN=68eba7c1-ba14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:d9:76:72:92:48:ed:92:60:69:39:99:78:
3e:7d:10:f4:f8:3f:fe:f6:d0:fb:0b:57:11:ce:5d:
43:b6:37:71:25:68:34:a2:58:6e:c9:7b:ad:23:14:
1d:dc:3f:0c:bc:8d:34:db:ee:8c:59:1f:9c:9e:7c:
1f:62:80:7a:87:31:00:4d:4d:b5:3a:43:5b:36:a9:
c8:ae:78:9a:d9:65:4c:cd:87:e1:e0:a5:4e:3c:92:
9c:c8:54:30:8d:5c:52:3c:2d:7c:d9:50:4f:ba:0b:
c5:87:98:10:c4:a5:3d:62:a1:c0:e6:bb:4a:a8:77:
84:55:1b:a8:8a:33:2b:18:9a:aa:f4:b8:72:6a:ca:
76:f9:37:70:d6:45:88:08:70:80:d8:93:3a:28:4b:
4b:0a:f6:e9:89:62:34:47:71:a6:bc:b0:76:a1:43:
c1:6a:83:1b:aa:42:d6:c6:b3:27:fe:56:9c:5d:bb:
58:25:6e:12:df:eb:36:3b:56:89:21:03:d9:f4:04:
0d:ac:b0:be:d8:c9:b7:30:6c:a6:ee:95:80:0c:65:
a8:7b:45:83:55:cb:13:22:ba:b0:9d:dd:90:0e:9f:
74:ec:7c:8e:f1:fc:18:18:68:80:84:8d:0b:35:d7:
f2:d2:6a:41:75:55:42:a6:ab:3a:b3:78:18:e7:0c:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:58:24:C5:F7:7A:A7:F8:88:8E:2C:41:2B:FE:E4:EF:07:E5:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37FDCF4AA76C11F0BEF55DD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:28:16:fe:97:b7:8f:71:00:84:7f:78:d3:9e:e2:2d:68:eb:
62:c4:12:34:6f:31:6c:50:48:8a:77:7c:24:09:f8:91:a8:30:
a6:2b:db:53:f3:26:1c:54:0d:2d:48:a9:79:d2:11:ad:a7:b9:
c8:1e:b6:a4:83:c0:15:40:93:02:68:29:e9:8d:29:e9:6b:10:
4b:2d:f8:3a:f6:a1:23:24:57:72:41:57:f4:e2:86:b3:7f:6a:
d5:13:c7:a0:d5:d6:11:12:17:d8:3e:a7:2a:35:4b:d8:1d:d6:
d4:fc:ad:43:9b:19:7a:ea:d3:9e:4a:c8:8e:19:42:4c:99:a2:
f1:57:a9:e7:58:f6:74:ba:3b:c0:e2:ed:89:91:eb:95:2c:eb:
86:e1:4e:45:69:e9:da:9b:88:a2:73:b8:0a:0d:de:15:cc:b5:
13:97:ea:d0:f5:77:74:d1:ce:eb:dc:ce:33:63:e7:81:4a:5a:
81:cd:2a:6f:e4:b5:6a:9e:f2:43:ca:7b:cb:38:45:8c:20:c4:
31:d9:01:e2:81:e4:d4:8f:98:b2:cf:d0:46:91:b7:b0:0e:9c:
d0:94:99:89:27:b7:61:0a:e9:30:e3:7a:d3:8a:be:71:16:36:
1d:62:7b:a1:e9:38:d1:50:b1:0d:42:fe:31:5e:54:80:a5:f3:
4d:ed:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:15 2025 by rpki-client