Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C3FFC4AA7011F0A92E9F9DDAE4EC9C.roa
File: 51C3FFC4AA7011F0A92E9F9DDAE4EC9C.roa (raw, json)
Hash identifier: EXWR4DA6NJdlntCLnv1pw7crLSnZcKb1gKKjYYdip3g=
Subject key identifier: 0F:EA:6D:DB:C7:29:45:6B:0B:7B:25:83:0D:54:FD:0F:F7:3B:5E:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01810A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C3FFC4AA7011F0A92E9F9DDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 09:13:04 +0000
ROA not before: Thu 16 Oct 2025 09:12:58 +0000
ROA not after: Wed 26 Nov 2025 09:12:58 +0000
asID: 138915
IP address blocks: 156.225.126.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98570 (0x1810a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:12:58 2025 GMT
Not After : Nov 26 09:12:58 2025 GMT
Subject: CN=68f0b720-9c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:d6:75:7c:e0:72:b4:45:84:ed:2e:3b:1d:
61:e8:8c:ce:7c:d9:3d:d5:30:75:03:c6:13:a4:81:
11:d6:53:cf:c9:9e:bb:8f:b8:ae:5f:ee:5a:b2:5b:
5b:ee:97:00:d6:37:cb:fd:0b:55:8e:a9:ba:a5:70:
de:94:7f:c2:e3:0c:4b:20:a7:4c:00:99:a8:85:c0:
7b:df:d6:f9:35:8b:1b:43:d6:b0:72:95:fa:af:1a:
fc:65:26:fd:8d:4c:de:54:80:bf:e6:85:cc:01:ea:
b1:dc:0a:b5:bf:a9:54:71:87:cd:7f:0b:d9:35:6f:
41:54:c0:97:fd:42:b8:a9:d1:b7:da:02:e4:91:22:
8f:30:9b:69:e9:c2:f9:0f:69:11:81:2a:83:d5:a2:
70:8c:7a:f5:f3:31:40:38:b5:1f:a4:64:07:69:bc:
27:76:2a:42:bd:34:b6:d3:84:0c:24:d5:ab:28:8d:
f4:2e:17:84:f1:02:57:c4:91:6c:be:fb:ba:87:4f:
62:a6:9a:3c:3b:3f:94:55:e6:61:d9:75:65:73:6a:
ba:91:a6:5b:77:a6:c4:3f:09:81:76:9e:c6:e9:f9:
32:81:5a:93:32:c8:0a:58:b2:6e:c7:31:a6:ab:2a:
96:44:88:23:b7:4b:80:b0:97:3d:89:a7:78:e2:08:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EA:6D:DB:C7:29:45:6B:0B:7B:25:83:0D:54:FD:0F:F7:3B:5E:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51C3FFC4AA7011F0A92E9F9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.126.0/24
156.227.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:fa:f3:17:54:00:db:71:35:71:dc:ba:df:3a:3c:85:92:c1:
52:63:81:59:32:a7:8d:23:68:d4:9d:d0:37:6e:e3:1c:92:e4:
bf:f0:b2:12:66:8a:25:05:44:7f:90:ab:82:e6:81:27:d2:55:
2c:bd:4b:70:e0:ac:d9:aa:ed:72:04:58:20:a7:6b:fc:64:57:
40:7e:2e:74:51:65:c3:d1:e4:9f:c0:8c:1c:5d:5e:3c:86:c1:
bb:ea:e9:20:a3:e4:ad:9b:c2:16:f3:7e:e0:29:81:c4:10:52:
d0:1c:90:c4:95:65:75:38:8c:3c:24:51:b3:7b:92:79:8f:cb:
79:de:c5:86:06:9d:e6:eb:d1:c8:9e:fc:74:6e:df:b4:47:14:
8d:59:61:f7:c0:8b:fb:30:1c:c2:e9:97:94:a8:3d:65:90:50:
00:d9:5b:16:26:45:8c:49:64:de:65:c7:c6:56:e2:1f:f6:1e:
ca:be:2b:7a:c9:04:7a:88:20:40:46:b5:48:73:9c:ce:ed:bf:
7b:1d:2f:2b:bb:eb:e3:06:f8:8f:5d:89:51:1d:ee:39:51:df:
a3:04:e6:3b:24:38:00:d2:18:6c:28:0f:a9:85:f9:11:af:ef:
70:8f:88:d1:e8:21:b2:13:82:d4:8d:9b:15:1d:70:76:07:3d:
e4:09:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:01 2025 by rpki-client