Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B323B8EA03311F0A84E7680DAE4EC9C.roa
File: 6B323B8EA03311F0A84E7680DAE4EC9C.roa (raw, json)
Hash identifier: LYt33QzP6p18D2hmaYgO4/wWyLHDW9rV2vqUeTedWKU=
Subject key identifier: CF:EE:2A:24:E9:9D:6C:26:1E:3D:22:61:25:0B:44:87:83:25:24:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B323B8EA03311F0A84E7680DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 08:31:55 +0000
ROA not before: Fri 03 Oct 2025 08:31:51 +0000
ROA not after: Sun 16 Nov 2025 08:31:51 +0000
asID: 61112
IP address blocks: 156.224.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97967 (0x17eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 3 08:31:51 2025 GMT
Not After : Nov 16 08:31:51 2025 GMT
Subject: CN=68df89fb-d04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:b3:2b:2c:17:0e:ac:e4:03:f0:f1:83:48:
4f:1e:37:1d:d2:61:0d:03:2f:a8:a5:75:14:cf:91:
32:e1:fe:e3:82:1c:d7:db:0b:f9:60:00:a8:4d:bd:
74:cb:06:11:43:91:e6:e7:79:93:bb:17:f6:26:68:
31:26:35:30:0f:da:98:6d:50:d0:39:9c:89:dd:dd:
95:1a:ce:54:39:01:e0:e6:07:e2:45:c5:fb:77:45:
8d:04:dd:bd:72:58:6c:ca:24:fb:2a:d4:c3:c3:78:
cd:e9:f9:20:4f:bd:90:18:7f:3e:2d:47:fc:dd:6c:
89:71:79:48:57:9d:7a:f9:72:43:6d:1a:2b:69:3a:
22:2a:3c:0f:af:e5:83:f5:6d:a3:c7:39:20:32:00:
95:3e:32:b6:d2:4d:a1:39:b1:65:68:fc:cf:d1:79:
73:68:8c:64:f4:18:11:98:11:90:38:de:3e:d1:02:
bf:60:ef:c8:6a:e8:0b:12:a7:b0:11:b0:b3:98:45:
5d:86:b4:b7:a3:7d:3f:13:8d:39:85:b9:4b:28:71:
73:66:23:e0:5b:c6:40:d5:d7:a0:14:44:50:0e:91:
0b:62:aa:bd:3b:60:12:35:ad:34:58:14:1d:3f:46:
f8:4d:21:5a:d7:b1:c0:09:9f:80:67:c8:f0:7c:4a:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:2A:24:E9:9D:6C:26:1E:3D:22:61:25:0B:44:87:83:25:24:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B323B8EA03311F0A84E7680DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:6e:48:46:e2:c9:f2:5b:3c:cc:b1:9f:21:25:2a:11:3e:17:
15:30:7c:33:39:b4:c4:bf:17:1d:ff:bb:0b:62:24:56:f8:70:
90:3f:61:f6:49:1d:5e:9a:0b:7f:cc:28:46:b8:4d:5f:2d:30:
5c:21:8a:75:d6:93:f9:bc:5e:af:98:d7:30:6f:fd:2f:18:e3:
11:4f:a4:e1:de:a4:74:20:b0:bc:3d:36:78:c4:96:a5:51:89:
12:98:d9:60:a4:ed:b4:53:1a:ba:a5:32:ba:56:12:1d:f7:44:
f9:c1:8a:3e:52:7c:ed:2d:e1:01:db:f0:9a:a6:cc:aa:d5:dd:
1e:46:ac:66:d3:43:7d:97:5a:d8:0e:b4:da:5f:52:56:d2:0e:
a6:7a:38:be:9d:7f:ec:c2:65:23:22:60:7a:60:05:87:9c:6b:
8e:c8:f8:8d:41:3d:90:d8:72:ce:8a:92:18:ae:a7:13:75:74:
bb:36:e2:82:37:08:a5:7d:35:fd:19:e2:e7:2b:64:de:0e:ef:
f2:b5:06:07:60:b4:f2:c5:ec:5e:32:18:17:2f:41:8d:a8:b9:
1b:23:a7:14:c4:cb:9c:c8:53:22:90:1f:b1:45:bf:ee:9a:d0:
0d:62:33:ea:37:e3:73:52:3b:e6:7c:ce:fb:dc:52:eb:8a:6f:
84:d6:71:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:15 2025 by rpki-client