Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72D5C520921111F08FF0D979DAE4EC9C.roa
File: 72D5C520921111F08FF0D979DAE4EC9C.roa (raw, json)
Hash identifier: uS++XkZFfiYMZOtPWAJCon4MJr97+uxktpspvQfWhcE=
Subject key identifier: 90:D8:28:D7:9B:BA:E0:F4:78:AB:C2:98:21:F7:59:45:2E:4F:5A:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72D5C520921111F08FF0D979DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 08:53:29 +0000
ROA not before: Mon 15 Sep 2025 08:53:24 +0000
ROA not after: Sat 25 Oct 2025 08:53:24 +0000
asID: 401615
IP address blocks: 156.231.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97087 (0x17b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:53:24 2025 GMT
Not After : Oct 25 08:53:24 2025 GMT
Subject: CN=68c7d409-f2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:ae:32:4e:5b:34:75:54:fc:0f:0c:f6:2f:
08:98:c5:63:bb:02:8a:13:64:9d:a4:c5:4c:bd:43:
6a:68:7d:83:2b:8f:63:0f:f1:fe:c7:f2:f0:fa:9c:
1f:48:1f:78:35:72:03:2f:a7:48:d4:df:e8:a9:42:
3d:2b:ba:95:70:99:8e:53:09:9e:22:e1:c0:31:c9:
a5:80:f5:8b:71:03:c2:5f:e6:55:88:0e:63:e4:27:
e3:68:6a:46:d9:ed:01:e3:8f:41:64:6b:08:cd:24:
c3:24:26:76:fc:4b:4f:df:6f:9d:a3:6e:2e:15:76:
c5:c4:d1:0b:52:1b:1b:7e:f7:f8:48:56:87:7b:8b:
e0:7f:6b:7c:2e:03:d7:5f:4f:2d:dc:96:41:58:38:
b9:17:1b:61:dd:26:f0:c4:1c:b9:7f:e3:9b:86:a5:
26:11:b9:e9:1f:51:47:87:52:39:ed:e7:55:2d:0f:
10:49:4f:9b:e4:f1:c6:d0:c5:93:d1:cc:be:73:c6:
42:1c:47:21:05:10:f4:a4:3c:2b:e6:5f:c4:f5:06:
dc:cd:e7:a4:b7:89:3e:e6:df:73:d6:9c:ef:29:19:
3e:3c:16:bf:05:e9:12:26:6e:f3:8a:9e:84:a7:49:
f5:35:af:dc:24:c0:94:71:81:11:4a:87:1a:c3:68:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:28:D7:9B:BA:E0:F4:78:AB:C2:98:21:F7:59:45:2E:4F:5A:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72D5C520921111F08FF0D979DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:d2:a1:10:c8:c4:2b:f3:a6:1d:fd:92:3f:a8:e2:30:4d:5e:
29:8b:e5:15:9f:3f:7d:a8:01:61:0a:df:12:da:78:b9:0c:8b:
c7:a8:7c:d2:d2:ec:02:f6:ad:08:b3:20:9f:d6:b5:60:c0:17:
d7:a3:88:df:5b:7d:91:c6:cb:2d:1d:79:83:66:65:00:16:23:
7a:b2:ca:cb:d5:81:90:f1:ed:41:1b:7d:96:4b:6c:75:68:11:
aa:81:4a:9b:dc:50:bb:ea:bc:e5:56:eb:d5:8d:7c:f1:be:62:
af:52:81:b7:c7:f1:57:17:48:a2:fe:4c:70:30:d0:e3:a9:1f:
51:17:36:1a:a6:16:bd:0f:c6:15:9d:8c:d1:34:37:9f:2f:5a:
3e:5f:5d:ec:b0:f6:5d:38:56:19:2f:04:c8:f9:76:cf:f7:8e:
96:02:ff:83:80:50:cc:ad:ba:57:a3:b8:ff:8a:c1:bb:e8:72:
56:4a:05:c6:ca:4a:0f:af:36:b7:9e:4e:2a:9c:ce:08:6a:35:
91:36:c5:d3:2b:cc:eb:ac:dc:65:c8:c9:0f:99:09:20:c7:88:
b3:30:7a:ac:23:81:d8:9c:b9:12:60:34:7b:9d:af:23:8b:05:
21:2c:86:2f:72:92:0a:ae:4f:5f:b5:f4:45:e6:ff:e8:1a:90:
fa:03:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:19 2025 by rpki-client