Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A15455BA9DE211F0B5E1787CDAE4EC9C.roa
File: A15455BA9DE211F0B5E1787CDAE4EC9C.roa (raw, json)
Hash identifier: nXtoswwNMdtztUfSmdD9zVIxxXQdGGXk6ml5f1vpn7c=
Subject key identifier: A5:62:D5:25:B1:E8:17:B0:55:3A:ED:A1:13:A0:44:0C:55:51:2A:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A15455BA9DE211F0B5E1787CDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 09:48:35 +0000
ROA not before: Tue 30 Sep 2025 09:48:30 +0000
ROA not after: Sun 18 Oct 2026 09:48:30 +0000
asID: 132585
IP address blocks: 156.241.4.0/23 maxlen: 24
156.241.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97835 (0x17e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 09:48:30 2025 GMT
Not After : Oct 18 09:48:30 2026 GMT
Subject: CN=68dba773-6fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:4e:cd:38:55:1a:ae:56:dd:1f:20:9a:a9:
7a:20:9a:37:fe:8b:9e:7f:37:05:a9:a3:84:8a:1e:
9b:ae:1c:fb:5f:b0:95:ba:be:10:cd:af:5c:04:5b:
00:c5:85:af:62:2e:17:e6:5a:cc:65:ff:e8:24:b8:
12:32:f1:a0:89:4c:a8:27:0e:42:87:86:5b:43:14:
23:fd:b5:d7:49:be:82:06:38:69:e0:00:43:f3:05:
2f:3d:a2:ba:09:0e:a1:b5:7f:28:f7:fb:8c:e9:3f:
2d:fc:f7:2c:17:64:c4:77:db:ae:f8:5c:cf:a5:a4:
79:20:64:d6:e8:e6:59:c4:59:70:08:98:3b:30:45:
91:6e:22:d1:6a:74:b9:06:9c:52:28:d7:16:7f:fe:
93:77:c1:5a:73:5f:2f:2c:7a:18:74:c7:d6:a8:28:
b8:bb:43:4e:73:6f:ff:bb:8a:f3:3d:a3:1b:ca:4d:
97:16:5d:b4:09:55:e1:d1:24:91:aa:c1:75:23:dc:
bc:f1:35:ee:60:61:e0:09:f4:3c:85:76:1b:d7:27:
72:3b:fa:d0:de:88:fa:75:3d:be:ba:67:93:88:03:
3a:42:f4:ac:79:42:e4:bf:b1:4e:18:b5:2f:c7:c4:
d9:62:d1:9f:3f:55:96:f3:3a:e3:af:20:53:4f:f4:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:D5:25:B1:E8:17:B0:55:3A:ED:A1:13:A0:44:0C:55:51:2A:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A15455BA9DE211F0B5E1787CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.4.0/23
156.241.7.0/24
Signature Algorithm: sha256WithRSAEncryption
16:19:4c:f2:a4:f4:74:bd:a4:5d:98:c7:2f:62:d3:01:4f:ce:
8e:03:38:d6:4a:fb:da:06:35:31:16:75:df:46:43:f1:0e:01:
04:8b:f0:c5:e2:e6:97:80:ab:99:0f:78:4e:2c:88:7e:4e:dc:
8c:22:eb:82:51:56:59:ae:b5:11:cc:77:fb:1a:0b:34:b3:f6:
79:04:ac:9e:43:b6:b6:d6:59:f7:00:5e:db:22:80:3d:55:0f:
18:3a:1e:30:f2:b9:ae:a3:11:0c:c3:39:15:bf:4b:1c:ea:d3:
b9:45:2e:e2:ce:74:dc:2d:e7:8d:ce:b4:35:bb:99:ea:47:8b:
57:65:9f:71:c3:4e:76:1a:ba:f2:cd:7a:03:2d:3c:ad:11:cd:
ab:e7:fb:b2:92:bc:e8:fc:64:ef:fd:8b:d5:38:5c:97:ff:41:
d1:40:83:01:74:42:65:17:89:dd:5d:e0:47:30:3a:00:f7:2e:
e4:d0:22:74:47:b8:88:df:51:89:42:5c:ec:fb:4b:5d:0a:df:
f1:e5:e9:65:b8:fe:e8:dc:2f:0c:03:b8:69:36:4c:92:2a:19:
a4:26:74:59:71:b0:36:98:c0:ea:e6:47:b9:bd:24:55:04:e0:
0e:50:1e:5c:60:f1:a0:6c:4c:7a:45:70:9b:0f:4c:17:65:6d:
82:fc:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:02 2025 by rpki-client