Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/507CBCACB0BD11F0A5410BAFDAE4EC9C.roa
File: 507CBCACB0BD11F0A5410BAFDAE4EC9C.roa (raw, json)
Hash identifier: nZ6W5SUwkafiQv9E8kORgwDAMH+AJIj3atmwQJvfab8=
Subject key identifier: F1:E0:46:B8:5E:97:5A:A9:36:8C:BE:71:5B:5C:9B:B6:73:04:D0:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01827E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/507CBCACB0BD11F0A5410BAFDAE4EC9C.roa
Signing time: Fri 24 Oct 2025 09:39:20 +0000
ROA not before: Fri 24 Oct 2025 09:39:15 +0000
ROA not after: Fri 31 Oct 2025 09:39:15 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
156.239.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 27 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98942 (0x1827e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 24 09:39:15 2025 GMT
Not After : Oct 31 09:39:15 2025 GMT
Subject: CN=68fb4948-22c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:0b:a3:78:83:93:7c:36:99:2c:37:05:0b:
bb:dd:3f:a5:e5:d4:b3:5e:0f:f6:0c:09:d9:df:24:
2b:9e:28:b1:1a:6f:30:50:b0:36:c9:cb:3d:ba:7f:
91:16:da:c7:74:67:8c:bb:1e:da:70:13:c6:37:9d:
02:e0:12:5d:45:3b:9f:e0:4d:c6:dd:ae:16:9b:84:
7c:a9:f4:51:96:d8:1c:f9:38:d0:17:2f:c2:56:12:
8c:4b:e1:4f:7c:13:da:86:f5:db:ff:ee:0f:59:37:
8b:1a:e3:43:05:f0:55:22:46:4a:c5:2c:24:7b:62:
99:e0:3c:72:56:a1:46:e1:9a:71:e1:fd:51:95:79:
6b:34:9b:52:af:6f:c4:27:37:a7:35:85:93:c4:11:
04:10:82:e3:91:c4:73:71:e6:22:99:e4:62:34:55:
0f:15:3f:2f:45:d8:a0:44:d0:b8:86:c4:54:64:e6:
1c:f6:a2:f0:83:06:b4:00:f8:b2:94:f7:b0:5a:87:
11:3d:96:33:06:23:9b:c4:af:68:a2:0b:b5:5f:87:
76:6f:f9:67:65:d3:20:63:c4:2c:5b:a6:11:7b:b7:
7c:bc:09:39:3f:f8:8c:c6:98:0f:be:9b:45:9e:eb:
a1:65:34:47:1d:8a:28:8e:37:f3:bc:4b:ff:42:b8:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:46:B8:5E:97:5A:A9:36:8C:BE:71:5B:5C:9B:B6:73:04:D0:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/507CBCACB0BD11F0A5410BAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
156.239.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:de:e3:74:0a:53:07:0b:2b:1f:07:e9:d9:3a:ce:3c:a4:c8:
1d:7b:f2:fb:3e:ab:2e:b1:b0:f5:f6:a6:92:ae:0d:f5:3d:10:
6e:8d:0a:49:94:24:d6:90:84:78:1a:e0:6b:2c:92:ee:3f:21:
19:9f:3f:f8:15:31:52:15:ff:d1:c7:80:f2:97:89:55:a5:ec:
83:00:2a:d0:83:6a:cd:32:b3:c4:39:5b:9c:12:ee:79:fb:a9:
26:b8:c2:73:b1:89:8b:64:aa:5a:71:4c:e9:d0:63:20:8d:44:
7c:ba:5d:c2:e0:eb:1c:6d:99:7e:d6:d6:ef:cb:be:f4:d6:fc:
60:99:94:c4:aa:06:ed:ac:3c:db:09:e6:3f:b1:bb:a2:b5:29:
01:a1:2e:e4:80:4d:97:53:f9:7b:90:bd:04:9d:5d:9f:28:a9:
0b:3f:41:5a:7f:b6:2a:d6:96:69:7d:97:54:61:3f:50:9d:c9:
ec:e2:59:8b:0e:c2:f6:a1:59:1a:0f:6b:11:71:06:91:fd:11:
ed:14:bc:50:20:31:37:b0:b7:b9:48:8e:7a:95:01:dc:74:35:
ba:8a:28:bf:91:71:d6:28:61:a2:ab:a7:6c:71:7e:36:2d:db:
e0:2e:8f:ee:ef:97:72:98:4d:0a:3c:ac:a4:63:9b:68:ac:f8:
f2:80:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 02:57:02 2025 by rpki-client