Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A39CAEC946B11F0BCD067B3DAE4EC9C.roa
File: 4A39CAEC946B11F0BCD067B3DAE4EC9C.roa (raw, json)
Hash identifier: bTo8h95jvZAdI15WtUuK5BaQTGr+eE4+BQKGb4tSuuo=
Subject key identifier: B0:6E:59:78:3D:59:7B:34:DD:65:B2:97:CB:C5:40:8B:43:08:93:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A39CAEC946B11F0BCD067B3DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 08:41:38 +0000
ROA not before: Thu 18 Sep 2025 08:41:33 +0000
ROA not after: Thu 25 Dec 2025 08:41:33 +0000
asID: 135097
IP address blocks: 156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97249 (0x17be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 08:41:33 2025 GMT
Not After : Dec 25 08:41:33 2025 GMT
Subject: CN=68cbc5c2-c32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:ea:aa:63:5a:dd:1a:6c:57:5c:5d:84:09:
4c:16:7f:21:c1:80:26:2d:52:bb:d3:6a:24:d5:91:
96:13:6f:22:72:16:91:83:1f:c2:ca:61:60:36:b6:
40:ce:6d:d7:57:6f:6f:d5:6f:ed:6c:31:6a:41:bc:
3b:2c:b7:59:f2:74:d5:2b:4f:db:3f:1d:51:c5:3e:
7e:d5:46:a3:1a:b2:c7:22:8d:16:61:b5:c6:91:eb:
27:7a:a4:4a:fa:b4:d9:b2:0f:0a:3f:cf:ab:ea:5e:
b4:ae:c8:55:61:21:a0:5a:f7:5d:3a:69:e9:82:f9:
ad:5a:27:a4:0b:81:8e:22:07:44:bd:4a:6f:17:84:
29:88:fe:72:9b:0b:76:05:15:67:65:a0:37:40:5c:
13:d7:9f:68:cc:13:3f:f6:01:e7:a8:a3:84:55:8b:
ec:e4:63:7a:6c:23:5a:8e:50:44:c4:98:e6:85:7b:
95:34:01:fc:99:25:70:0f:5a:a8:db:a2:0c:48:e1:
f1:d5:37:60:ed:c4:ee:d4:25:b8:d4:54:d7:55:fe:
c5:9b:95:fc:14:31:79:e8:39:3d:1e:b7:f6:10:90:
cf:e4:65:46:59:03:c8:b6:cc:d6:f6:d3:d2:0c:f6:
01:ca:8d:4f:db:a4:ec:6a:c8:e3:40:8b:89:c9:3c:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:59:78:3D:59:7B:34:DD:65:B2:97:CB:C5:40:8B:43:08:93:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A39CAEC946B11F0BCD067B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9d:db:2f:44:95:e6:aa:9d:72:97:24:6e:19:a6:24:50:c7:bb:
50:3b:0c:43:23:3f:29:c6:5a:8f:9f:7d:d6:e1:d2:bc:59:ba:
e6:0a:9f:7c:9e:9d:96:3e:a5:4a:49:0a:4b:de:73:51:e1:92:
8a:3d:a3:5e:7b:4e:2a:87:60:8c:f9:b7:5e:51:57:a6:c6:02:
a3:3b:4d:fc:5e:96:18:84:84:b6:2f:d9:76:64:e0:6e:f1:ee:
36:fd:e3:f4:70:56:7e:8f:b4:a8:de:87:0e:6e:ff:21:42:05:
f6:e0:cf:33:00:44:31:fb:64:1a:7d:d1:18:f4:43:22:23:dd:
6a:ec:05:fb:b6:3e:5e:a3:45:16:16:86:46:48:68:53:0b:b8:
24:ca:07:b0:60:ab:e9:32:0c:ed:3d:74:f0:92:08:d2:93:1c:
fe:f7:c4:10:f4:58:68:74:3c:23:3e:3f:d5:d8:46:d1:c9:41:
e4:4e:eb:fa:6a:10:f4:98:78:79:c4:3f:99:aa:c7:4f:4b:72:
c3:ab:11:25:44:2d:e4:f6:65:fe:76:0f:a3:fa:4c:9e:2a:1c:
bc:af:1e:9a:42:89:aa:8c:25:11:e2:c1:c4:61:e1:49:31:85:
66:8f:6b:f9:73:ed:45:97:8b:60:d1:cf:e3:12:db:4f:b4:cc:
99:61:35:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:19 2025 by rpki-client