Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B538DAE999211F0A292377CDAE4EC9C.roa
File: 6B538DAE999211F0A292377CDAE4EC9C.roa (raw, json)
Hash identifier: vtm1hntUQyuzTwwv4ijm8T84E4KV0HNIKnCriEtm+T4=
Subject key identifier: 91:3E:55:62:42:47:B9:F1:9F:D2:B5:6F:6E:F7:38:32:4C:24:D8:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B538DAE999211F0A292377CDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 22:04:20 +0000
ROA not before: Wed 24 Sep 2025 22:04:15 +0000
ROA not after: Wed 25 Mar 2026 22:04:15 +0000
asID: 16437
IP address blocks: 156.236.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97583 (0x17d2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 22:04:15 2025 GMT
Not After : Mar 25 22:04:15 2026 GMT
Subject: CN=68d46ae4-90a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:81:cd:cc:fc:a3:fe:bc:e7:f7:c5:4c:f8:
49:0c:2a:e7:e5:4e:a9:35:ad:7f:43:5b:00:cc:3d:
bf:eb:10:55:7c:8c:f9:c6:2b:bc:01:9a:1c:2c:89:
aa:4b:b1:d6:91:4e:6f:b0:aa:c6:94:17:a9:57:76:
2f:59:8c:d3:38:0e:94:4a:6b:c7:53:18:df:b9:b1:
d5:db:7c:2f:e3:41:6d:eb:5e:25:e0:f3:1f:e2:42:
cd:fc:37:fa:0f:03:ef:8f:2b:b2:c1:08:33:46:a9:
4c:f0:57:e0:cf:59:4a:6a:17:f9:a8:81:50:25:5a:
73:ee:df:56:a5:cf:a8:1c:b3:4b:a0:b4:46:1f:63:
68:0c:18:06:57:5f:76:98:05:52:a0:37:ad:bf:d5:
4f:b3:48:30:63:f1:87:0e:c3:b5:cb:1b:e6:2b:ae:
51:3f:6b:59:98:07:0b:70:19:03:3c:59:a9:d7:8c:
4d:67:5e:b2:0d:b8:98:05:ad:4f:05:d4:9c:64:79:
7f:fd:15:62:2b:d4:c6:73:65:7d:97:6e:b3:21:c2:
d2:2d:ae:47:4b:4b:0d:b1:b5:e4:d9:a1:33:00:7b:
34:a3:48:c8:5b:a4:72:53:c2:25:95:ec:91:f5:c8:
9d:8d:37:31:b5:55:97:1a:75:11:f6:ef:c9:9b:c0:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:55:62:42:47:B9:F1:9F:D2:B5:6F:6E:F7:38:32:4C:24:D8:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B538DAE999211F0A292377CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:53:3a:34:00:4f:2d:c4:c5:96:72:3c:c7:ed:ef:ba:51:79:
0f:ad:a8:2a:30:37:28:e4:df:2e:de:59:86:0c:92:e2:37:64:
01:a0:b2:a1:11:1c:e9:29:7a:2a:d2:98:6a:cf:1d:09:ac:e0:
78:45:f3:30:23:0b:f5:1d:b4:7a:2b:3a:98:0a:08:86:d4:87:
33:fe:62:85:de:80:54:3c:48:0b:a6:b8:e8:53:da:14:2e:e5:
09:7e:19:d4:92:e9:36:e3:cf:9a:df:3a:ce:a8:d7:66:9a:87:
8a:37:17:4d:ea:6e:8f:60:b8:aa:3f:e1:be:71:5c:fc:0f:a6:
d8:34:b4:d9:d1:df:e2:85:2c:fc:26:af:61:7d:89:ba:a0:56:
2a:7c:e8:29:9a:50:23:ff:99:93:8a:fb:af:5e:ec:39:82:f3:
a4:d0:7f:3d:91:6e:f7:34:a3:63:77:1f:bb:36:ce:b4:ef:be:
53:91:49:e0:5c:d3:78:db:3d:23:5c:38:e1:3e:53:1c:3f:b0:
41:75:f4:11:ad:e3:a2:6b:61:5c:97:b8:08:61:c1:14:d8:0b:
28:6c:47:bd:48:ac:ec:3f:65:12:7c:ce:bf:f1:9c:7e:87:39:
c5:b9:53:96:55:5e:a5:64:de:1e:a5:0e:97:2f:df:27:08:66:
06:47:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:09 2025 by rpki-client