Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890B71409AAF11F089B2D7C2DAE4EC9C.roa
File: 890B71409AAF11F089B2D7C2DAE4EC9C.roa (raw, json)
Hash identifier: 1iaAXFIv9GhWN8uSw/jVGR5nrQqYggXTt6FNvK5atgU=
Subject key identifier: D5:F1:AC:DC:B2:5B:4D:E5:E2:57:B7:00:50:A8:58:F1:7D:CB:4D:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890B71409AAF11F089B2D7C2DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 08:05:16 +0000
ROA not before: Fri 26 Sep 2025 08:05:11 +0000
ROA not after: Sat 01 Nov 2025 08:05:11 +0000
asID: 213798
IP address blocks: 156.225.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97631 (0x17d5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 08:05:11 2025 GMT
Not After : Nov 1 08:05:11 2025 GMT
Subject: CN=68d6493c-8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b7:27:08:1a:d1:14:40:76:49:6e:af:a1:59:
81:14:ae:24:20:3d:a2:d4:9f:7b:36:60:3c:a4:03:
89:2c:12:ec:16:66:1c:07:27:f2:be:3f:53:ac:a1:
d0:f6:cc:6a:4a:b0:77:df:74:4d:a4:b1:7f:57:d9:
de:a9:5f:06:3b:69:bf:a5:42:9d:0a:3b:b6:d3:77:
75:66:6b:c4:ec:10:3a:21:c5:b5:2f:5b:10:9e:d8:
67:b2:27:f2:12:7a:51:a7:3a:17:4a:13:fe:fd:c7:
6a:2d:f7:1b:cd:34:24:23:12:b7:e0:aa:8b:60:3c:
b8:df:28:68:68:9b:5b:17:03:f3:08:11:c0:9d:77:
d5:54:5a:1e:3b:16:92:a2:73:22:e3:59:85:b1:bc:
b7:ee:64:33:3b:b8:31:c7:d6:c6:d8:93:18:38:7c:
6e:cf:a8:c1:9c:69:06:43:da:74:c7:ae:b7:07:10:
2c:d3:b8:d5:67:85:d5:31:d4:a7:b6:43:5e:11:69:
19:fe:28:17:4f:68:dc:dd:39:71:7a:f0:28:4e:88:
8a:e6:7a:34:e7:5b:2d:a7:7d:2d:29:43:7d:87:05:
23:cb:f8:2a:09:41:6a:67:55:5f:aa:d9:a6:1c:76:
4e:17:a4:d1:39:19:a4:55:d1:56:89:c3:53:7e:01:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:AC:DC:B2:5B:4D:E5:E2:57:B7:00:50:A8:58:F1:7D:CB:4D:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890B71409AAF11F089B2D7C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.46.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c9:ce:19:5d:8a:b6:d7:a7:71:f9:a3:78:44:a2:ee:2a:1c:
f2:52:51:99:6e:be:4a:9d:c5:e9:07:94:81:82:93:4b:fc:3b:
17:62:38:25:af:29:86:ec:c6:5a:81:f0:6c:53:3d:d6:5d:f1:
d6:82:2a:2b:63:3e:5c:4d:a4:e2:7b:c4:ab:8a:64:c9:d8:47:
80:48:6f:8f:57:1b:25:8f:93:48:95:41:dd:72:01:d3:92:44:
bb:41:91:f0:17:bf:ac:17:8f:20:73:c5:50:c3:0c:20:ab:f9:
c0:67:c6:22:e6:b2:95:4b:ac:a5:ef:54:ff:63:4c:f7:c4:fe:
e2:a6:60:28:e8:0b:0a:b8:41:5f:01:66:f1:5d:a3:e3:b7:2a:
70:5f:cd:6d:7c:ec:71:3a:18:c7:c5:28:5e:d0:4e:6e:17:44:
02:6c:c5:32:1d:f5:fc:9b:ba:e7:17:1d:54:9e:ff:59:1a:86:
9e:fb:0b:87:4d:14:d6:ae:fb:05:d0:8a:4a:f8:a1:41:ee:a7:
c9:91:b3:7d:a3:b0:e4:17:63:fe:8e:b6:38:5b:07:73:81:99:
60:02:97:41:23:05:d8:fc:5b:0b:eb:ce:22:78:0f:30:f5:26:
1e:a9:18:2f:5f:b7:fa:6c:67:da:11:c4:61:12:39:ae:b8:42:
ff:6d:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:11 2025 by rpki-client