Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52241B9A8EF311F0889B53CCDAE4EC9C.roa
File: 52241B9A8EF311F0889B53CCDAE4EC9C.roa (raw, json)
Hash identifier: JtkXixK+wkwKIErv707lU/qLb+M91ZziKlkIdbIvSrM=
Subject key identifier: FD:38:B4:67:81:99:4E:B8:A0:FA:AA:42:AC:E3:A0:C7:64:43:78:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017ACF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52241B9A8EF311F0889B53CCDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 09:40:16 +0000
ROA not before: Thu 11 Sep 2025 09:40:11 +0000
ROA not after: Thu 25 Dec 2025 09:40:11 +0000
asID: 16437
IP address blocks: 156.236.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96975 (0x17acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 09:40:11 2025 GMT
Not After : Dec 25 09:40:11 2025 GMT
Subject: CN=68c29900-2c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:2f:66:42:dd:4a:f7:d7:07:2e:f2:57:f9:
41:70:ae:cd:99:a5:b2:96:41:e1:fb:2c:df:17:8f:
b6:ff:13:ae:e2:b4:64:9d:71:94:b4:7c:22:aa:8e:
3d:e0:d6:d1:3e:6b:2e:2e:96:dd:a0:e0:46:32:6b:
41:a8:f7:75:56:f0:60:c5:0b:0f:31:ec:20:c9:79:
5d:d2:10:20:24:94:92:ea:81:13:93:27:97:b4:d9:
a8:c6:37:7b:d0:dc:88:5d:2f:0e:8f:db:8e:78:38:
68:0b:61:bb:a3:e1:c2:21:7c:23:12:98:9f:22:fd:
f6:cc:91:97:19:66:6b:9b:f2:90:d0:ce:a0:3a:cb:
cc:d4:3f:17:49:45:f7:83:48:77:66:f7:ba:39:f0:
c3:93:a9:1a:6d:e6:94:fd:e5:7c:3d:82:ba:bf:92:
ed:4f:78:be:6d:ff:3c:f0:8e:a8:6c:60:83:58:0e:
6a:94:0b:5f:b0:57:60:e3:4f:3f:93:87:b4:35:73:
f0:77:28:99:6e:2c:92:d7:51:dd:c6:83:ad:37:b5:
eb:76:73:03:92:4d:32:0f:f8:8b:2c:9e:f2:d6:cf:
03:b8:cb:b7:a0:b5:17:89:fe:72:53:16:4f:cb:8b:
20:0f:8a:45:55:fd:ac:47:36:0e:02:83:26:cc:52:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:38:B4:67:81:99:4E:B8:A0:FA:AA:42:AC:E3:A0:C7:64:43:78:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52241B9A8EF311F0889B53CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.80.0/22
Signature Algorithm: sha256WithRSAEncryption
af:55:49:f5:3e:4f:97:f9:72:d4:f7:90:6f:78:6e:96:5e:c0:
c3:15:28:ac:73:46:10:6f:98:16:08:ca:bb:8e:3f:d9:4d:d3:
a2:a8:2f:fd:6a:b9:be:84:44:a0:5d:ec:29:9d:06:ba:55:53:
21:d0:24:24:f8:ba:74:d2:22:0a:b1:99:c6:9b:aa:27:ae:10:
76:03:4e:7e:af:7a:16:c4:7d:90:57:41:76:27:b0:65:87:5a:
b6:c2:6c:cd:86:bb:7f:12:6c:c9:61:84:d9:03:fb:fe:a7:59:
07:94:b8:56:6b:53:b2:38:84:ea:2f:c1:72:da:2a:d4:5b:1f:
b7:59:75:02:22:ce:d3:60:99:37:fc:c3:ad:ff:49:21:ed:e0:
14:57:44:38:c8:72:69:65:65:dd:41:6d:f2:6a:7f:2d:ed:2c:
5c:26:81:77:a2:cf:3e:36:4f:8f:e0:f3:06:99:7f:9f:e1:e4:
b1:71:ef:52:ad:01:f9:f2:8f:8a:d9:3f:79:48:ba:a1:b1:b4:
6f:63:77:d6:82:09:71:a2:b3:42:52:d4:90:b8:cd:58:96:7b:
34:f3:47:cc:55:f8:09:a4:af:96:80:f3:17:e7:46:0a:0f:61:
c4:b3:7f:8d:cf:be:c7:2f:cd:06:0b:aa:de:7f:f7:d7:0d:e5:
52:46:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:59 2025 by rpki-client