Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D61B08E9AA911F09F742C9FDAE4EC9C.roa
File: 8D61B08E9AA911F09F742C9FDAE4EC9C.roa (raw, json)
Hash identifier: 61EcTvoVo5gVABNz2nStK3qzQOxNO2ZiTKtlnBq7O+4=
Subject key identifier: 64:B2:44:D5:BF:6D:E1:E5:CE:91:91:31:88:12:BF:3E:89:C1:0A:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D61B08E9AA911F09F742C9FDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:22:27 +0000
ROA not before: Fri 26 Sep 2025 07:22:22 +0000
ROA not after: Thu 30 Oct 2025 07:22:22 +0000
asID: 20326
IP address blocks: 156.229.228.0/23 maxlen: 24
156.229.230.0/23 maxlen: 24
156.229.232.0/22 maxlen: 24
156.229.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97619 (0x17d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 07:22:22 2025 GMT
Not After : Oct 30 07:22:22 2025 GMT
Subject: CN=68d63f32-3513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:2c:78:0f:fe:ef:af:f8:b4:67:9a:f0:e0:
c9:7d:ec:51:8c:a1:d5:77:cd:cf:83:6f:db:91:28:
8f:e1:43:94:86:ea:e0:d8:2d:84:96:44:24:9a:a7:
4d:82:57:31:0d:db:58:67:da:f5:23:3c:af:1b:c2:
67:2a:30:8b:90:cf:6e:d3:2f:28:5d:a9:7a:81:82:
8e:ec:0e:fa:95:30:6a:e0:d7:42:c6:6e:7d:7c:6a:
d4:8b:13:c6:83:48:3d:b7:3b:04:14:cf:31:20:98:
c5:d7:49:43:29:b4:bc:0f:e4:c7:46:40:54:97:5a:
ee:bf:d1:7b:47:fa:ab:58:ca:f4:2b:3e:09:c8:8e:
b4:73:71:90:23:18:f2:83:46:e4:ef:c0:82:6d:c7:
9d:9e:f1:6e:5c:ee:da:18:d2:7b:e7:c0:2d:3e:db:
46:81:c0:cd:59:06:0e:70:66:75:84:4b:82:51:3a:
25:5e:ac:86:7b:15:1b:7d:3f:6e:95:b1:34:0a:ff:
40:19:65:c8:ee:dd:a9:5f:04:28:46:2b:16:a5:9c:
b5:86:c5:19:45:f3:f9:02:a2:2a:cc:4d:6b:42:62:
d0:74:b6:ba:fc:67:47:0b:6a:a2:f3:7f:7a:eb:a4:
0c:ba:5e:ec:ab:0e:87:a6:db:82:98:79:65:86:7a:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:44:D5:BF:6D:E1:E5:CE:91:91:31:88:12:BF:3E:89:C1:0A:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D61B08E9AA911F09F742C9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.228.0-156.229.235.255
156.229.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:27:e8:31:b0:10:4f:47:d1:28:5f:01:a8:7e:71:a1:d8:76:
19:76:d8:28:00:6d:4e:16:26:81:1a:9f:c9:e5:05:0d:fd:28:
f1:b8:a7:d8:e9:77:87:1e:f4:c8:a1:86:b4:aa:fd:63:63:a9:
65:93:53:e0:71:0b:b6:d9:a8:0c:d5:95:b8:30:9b:0f:72:9a:
76:fb:f9:c5:28:1f:06:4e:a6:94:c7:88:5e:62:04:92:2b:91:
80:28:b2:aa:03:0e:6f:d8:70:cb:16:5a:33:3d:4d:32:71:44:
36:37:ea:f3:74:66:54:a9:24:7e:f7:9b:d3:68:f4:92:fc:e8:
8e:60:fe:16:05:4d:99:50:f4:c5:7b:69:a1:24:d2:52:1e:01:
dd:63:e2:f7:bd:0e:3d:ef:37:dc:05:0c:72:92:c3:c6:14:33:
0f:f4:f3:77:eb:95:9e:7d:a9:95:eb:a5:9c:c0:fb:98:f1:49:
df:f0:92:26:79:24:85:c4:3d:e1:20:6a:a2:4d:7b:0c:1f:66:
42:63:9e:30:47:cb:71:b9:0f:37:25:e1:52:d6:35:0b:71:05:
b2:2c:d1:8e:9a:4c:ff:5b:2a:e6:d5:a5:ed:a1:3f:86:7b:23:
6e:4a:46:37:e1:3d:6c:ca:d6:95:7d:f5:48:e9:27:c1:11:d3:
46:5a:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:53 2025 by rpki-client