Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55EAC864AA6411F09268D9CFDAE4EC9C.roa
File: 55EAC864AA6411F09268D9CFDAE4EC9C.roa (raw, json)
Hash identifier: LeaYnN09lqCPUMz90FjoflZ+05ffNNGeWSR6tMFCyNg=
Subject key identifier: 3A:DB:6F:60:0B:21:10:5C:61:F3:56:6B:2C:7B:89:4A:32:6F:60:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55EAC864AA6411F09268D9CFDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 07:47:17 +0000
ROA not before: Thu 16 Oct 2025 07:47:11 +0000
ROA not after: Mon 20 Oct 2025 07:47:11 +0000
asID: 399989
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 07:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98532 (0x180e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 07:47:11 2025 GMT
Not After : Oct 20 07:47:11 2025 GMT
Subject: CN=68f0a305-6ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:72:2c:88:2f:9a:40:41:54:c2:b4:8f:4c:74:
ae:56:26:00:51:1c:d4:1c:2c:b4:b6:94:0b:c6:1b:
d8:98:ae:a0:2a:78:bb:d1:47:aa:86:b8:44:c5:17:
db:14:56:4b:8b:5b:32:da:6b:69:9a:38:af:20:c4:
e2:4b:bf:b5:06:4b:ec:24:39:bc:63:2b:22:d5:1e:
89:60:26:3e:14:6c:08:a9:95:d5:3d:c2:9b:64:d8:
26:64:f1:0f:83:72:94:4c:87:53:67:17:08:87:19:
df:73:64:18:97:11:ea:af:98:69:0b:d0:e3:be:9b:
ee:3d:30:f9:4e:e4:d2:c3:37:94:7d:db:55:34:f4:
98:f2:ac:ed:36:fc:ea:0b:99:1a:24:53:88:51:20:
a2:b0:45:e1:06:df:d8:19:9e:c5:6c:8b:76:5e:ed:
f3:31:44:90:e1:95:3f:4e:e5:65:fa:78:f7:3a:25:
84:4a:09:93:cf:88:5a:5e:25:b8:57:f0:49:6a:f7:
dd:f3:b8:e6:54:a7:01:9c:4c:99:09:9e:46:36:4a:
a1:5d:81:80:f9:55:2a:0f:6a:d4:ac:de:ff:bb:0f:
2a:e2:47:be:e9:67:43:1c:c9:af:c1:cd:b6:cc:ae:
5b:76:71:07:30:9b:b1:6f:9c:db:99:63:ab:0f:4a:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:6F:60:0B:21:10:5C:61:F3:56:6B:2C:7B:89:4A:32:6F:60:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55EAC864AA6411F09268D9CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:65:d1:ed:99:1b:4e:68:b4:4a:d4:d9:3c:3f:fb:3b:00:6f:
fa:a6:42:bd:68:87:0b:da:03:b5:f7:9f:4f:76:5a:f3:49:34:
ed:05:d9:70:5c:ee:af:4e:9b:9d:16:15:33:89:09:f5:3b:ce:
3f:ad:b5:ab:fb:94:52:4f:18:80:87:38:92:e7:d6:b7:3a:bf:
61:8d:fa:59:dc:75:b8:98:07:36:1c:6e:a3:f2:ab:8c:ac:b6:
ff:7a:e8:63:ce:5f:4a:c5:e4:b4:4e:09:db:fe:41:a7:1f:75:
49:63:15:29:bc:7e:ec:1c:61:1e:ca:6c:f5:17:c9:f0:5e:f4:
f7:98:0a:0e:a7:63:b3:a1:80:60:85:46:d1:b5:14:ad:6b:5f:
3c:2d:75:24:e2:47:da:3f:04:90:13:dd:72:62:44:a8:8c:9c:
9a:8a:95:4c:2e:d4:11:5b:d5:ec:83:7b:14:77:95:d2:a6:eb:
33:4e:12:11:ab:33:ca:9d:ac:c6:16:9a:7e:1d:5d:0b:34:3a:
d4:1c:ee:6c:c9:0f:61:a6:7e:36:52:3d:d4:a5:31:1e:2e:17:
30:b8:1f:2c:1b:0e:d2:49:29:c1:2d:a3:54:f4:fa:aa:ae:9d:
17:ae:cc:8d:82:fe:b5:ea:49:41:de:f3:3b:37:b8:80:15:2f:
c8:f5:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:22 2025 by rpki-client