Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62FA565EAB3211F0BFD44D8ADAE4EC9C.roa
File: 62FA565EAB3211F0BFD44D8ADAE4EC9C.roa (raw, json)
Hash identifier: XOPFGYQGasBVTv1AsO9+LYW287bZqFDcE+aLk6OpFFk=
Subject key identifier: 17:11:D7:3A:D0:87:59:FF:77:ED:4E:8C:3B:3E:A4:E1:F1:F2:37:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01815F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62FA565EAB3211F0BFD44D8ADAE4EC9C.roa
Signing time: Fri 17 Oct 2025 08:22:15 +0000
ROA not before: Fri 17 Oct 2025 08:22:09 +0000
ROA not after: Fri 24 Oct 2025 08:22:09 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
156.239.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98655 (0x1815f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 17 08:22:09 2025 GMT
Not After : Oct 24 08:22:09 2025 GMT
Subject: CN=68f1fcb7-e5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:c9:dc:f0:1e:58:be:78:b7:3d:3f:9f:10:
71:29:c0:56:67:7c:84:b1:5c:09:2c:9c:f4:45:e9:
3c:a4:16:d9:a8:19:7b:80:bb:bd:18:8a:23:64:d9:
bc:fe:0e:e6:b9:92:7a:28:69:f9:ed:a8:1c:f1:55:
f5:1c:7e:62:63:45:b5:f1:e7:8a:ed:89:82:f0:d5:
b7:e7:d4:79:64:93:f6:2f:67:6f:1d:51:22:e6:d2:
5a:7b:c4:70:d1:56:16:67:91:bf:01:b7:24:b6:23:
f2:95:76:15:d3:f3:9f:84:2e:56:92:76:f9:f7:d4:
65:5b:c5:59:14:46:69:9e:85:aa:6b:df:39:27:25:
ce:30:c6:6e:e7:77:0d:74:52:9d:14:14:fd:74:66:
75:3f:65:57:19:4d:4f:36:8c:3c:e3:27:71:07:7e:
80:5c:34:c9:24:f4:97:fe:c7:6b:c2:79:48:01:0c:
f8:7f:0c:83:e0:e1:0b:77:ee:a1:f4:38:0b:1c:8e:
27:6d:ff:d8:eb:5b:18:60:be:8c:92:53:5b:65:7d:
d7:b5:ae:51:90:aa:b5:d4:82:32:59:ad:4d:f7:ce:
7a:ce:4d:c1:74:d3:9b:8f:a9:97:d3:d6:ac:98:86:
c3:23:0c:69:51:b9:c3:fc:f3:60:77:b6:2f:4a:5c:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:D7:3A:D0:87:59:FF:77:ED:4E:8C:3B:3E:A4:E1:F1:F2:37:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62FA565EAB3211F0BFD44D8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
156.239.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:53:52:d3:ce:76:67:91:63:02:fb:01:65:d2:c4:ef:a0:4f:
61:96:71:3e:46:63:3e:4a:1b:14:b7:86:40:a0:d2:b4:61:99:
c2:51:66:36:fc:dc:33:da:9c:88:9e:2f:6c:10:e3:1d:82:13:
ce:3c:3c:ab:99:0b:17:87:66:ba:42:56:ca:d2:15:02:65:89:
42:08:37:17:4c:00:c5:ae:7d:c1:bd:99:d3:91:5d:0a:c2:ad:
4d:15:ad:55:ef:09:d0:ab:07:d9:98:74:22:6d:1e:e4:83:28:
a1:6d:16:48:f4:67:bc:57:2c:33:e4:d7:62:cd:a5:73:87:dc:
08:ea:60:43:73:1c:8c:82:cd:a9:a6:cc:71:e9:46:93:54:d7:
a6:f5:53:ed:2c:e7:da:8f:3d:3a:1e:fc:59:1a:c5:21:1a:69:
10:09:bb:10:6c:b6:0f:05:80:87:df:29:04:a2:ea:25:cd:e5:
ba:93:12:99:49:a3:15:db:e5:ba:7e:b6:5f:f3:9a:fc:ed:4d:
6c:61:cb:7d:b8:b4:2e:51:c5:2d:1a:9b:9d:3f:d9:c7:b6:86:
7d:c1:d7:db:3e:e9:c9:06:93:6c:82:8a:4f:80:8c:74:b5:19:
7d:61:44:c5:a1:df:a2:64:ff:ac:d1:05:a0:af:d2:88:11:cc:
83:62:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:59 2025 by rpki-client