Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3EE58AA9AC11F0BB803CD5DAE4EC9C.roa
File: 6D3EE58AA9AC11F0BB803CD5DAE4EC9C.roa (raw, json)
Hash identifier: HcYa523s0QMlGeBoOiGdmhILpvpCOH8T1XOZ6Ir02rM=
Subject key identifier: 33:29:DD:C6:93:9B:3C:F2:87:44:28:DA:E3:84:5F:50:98:A9:EA:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3EE58AA9AC11F0BB803CD5DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 09:50:48 +0000
ROA not before: Wed 15 Oct 2025 09:50:44 +0000
ROA not after: Thu 20 Nov 2025 09:50:44 +0000
asID: 19318
IP address blocks: 156.233.72.0/22 maxlen: 24
156.233.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98465 (0x180a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 09:50:44 2025 GMT
Not After : Nov 20 09:50:44 2025 GMT
Subject: CN=68ef6e78-157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:56:95:32:e7:59:17:ea:c3:1a:a4:11:c7:
95:ae:5b:a5:16:23:ee:2b:bb:dd:da:06:5a:e2:fc:
0f:98:fe:36:30:7c:3f:d8:e8:68:31:93:91:36:00:
b4:e7:8f:95:1a:95:dd:7d:54:49:31:2d:72:dd:a6:
3f:6f:d3:f8:aa:ac:84:54:2b:07:f5:d0:cc:95:1d:
20:3d:d0:99:0a:d8:97:74:db:36:b6:ad:b7:b7:f9:
e8:e9:f1:5f:9b:61:c3:ec:e3:6f:54:3a:e2:96:ba:
0c:37:1d:f0:8f:87:e0:c1:4b:3c:f2:fe:65:31:7a:
06:d6:ae:0a:0d:e5:f8:0b:33:2f:c2:a3:71:fd:de:
1f:50:23:d0:57:dc:c4:a3:8c:d8:71:b8:0f:0d:ee:
1e:d6:d0:55:e5:04:59:dc:1f:15:71:d6:53:8e:07:
ab:06:ac:65:a9:74:aa:c3:37:6e:83:55:37:07:40:
9b:b4:f4:e4:72:ee:3b:74:36:89:60:a4:7b:2a:48:
b5:41:9e:5d:48:d6:5d:6a:e6:90:c7:de:6b:1c:97:
5a:6d:96:db:d5:23:38:5e:38:4d:1e:bd:0f:7e:1e:
ed:5e:8e:1c:e2:4d:77:41:69:64:72:bb:4e:36:82:
12:b5:14:82:f0:93:c4:ae:66:90:65:1f:45:bd:c4:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:29:DD:C6:93:9B:3C:F2:87:44:28:DA:E3:84:5F:50:98:A9:EA:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D3EE58AA9AC11F0BB803CD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.72.0/22
156.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
60:55:3c:3a:11:ce:70:bd:72:52:9a:8a:3a:66:0e:25:19:70:
64:95:a7:c3:03:cc:33:77:b3:c8:0f:af:48:af:ba:73:53:00:
1b:67:8e:fc:18:13:f6:39:b4:0d:ee:b6:10:93:6e:38:6f:6d:
43:b3:01:66:61:e3:d2:65:e3:97:c2:04:73:64:eb:86:ed:e3:
3b:22:74:b0:01:9a:31:f1:6f:59:c1:a0:92:08:03:15:7a:be:
6c:ee:06:e6:0d:94:4b:75:d5:a2:c4:30:8d:72:b3:f4:e0:32:
fc:22:6f:5c:97:cf:ee:b4:19:96:1e:fe:a4:33:35:58:a0:78:
ba:07:98:6c:f4:45:81:b3:03:33:e7:bc:e1:ae:b3:4c:ee:49:
8f:2b:2c:8d:ee:33:8e:27:c7:22:92:0d:de:06:f7:ee:d3:c7:
2c:ff:fa:44:06:3a:39:65:bf:d0:fb:20:f0:2d:a0:f6:db:f4:
2e:d3:25:ea:b6:b0:18:c8:ef:05:dc:cc:fb:9a:b2:41:fb:ae:
fa:53:9c:f6:6c:31:bc:aa:87:80:c6:6b:fe:3b:ec:19:8f:ef:
0c:7c:3a:19:23:ab:ce:44:b7:10:05:6c:f2:1b:54:e2:7b:01:
8b:81:5b:15:08:f5:23:0a:95:c6:35:f4:43:83:ef:38:fc:a3:
03:19:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:07 2025 by rpki-client