Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1A15F0C9D7A11F0B9AF26CCDAE4EC9C.roa
File: B1A15F0C9D7A11F0B9AF26CCDAE4EC9C.roa (raw, json)
Hash identifier: BCXvJGlmU6wF+S5Xji4WdND3xuuRpu1GBMfxO6/TTvM=
Subject key identifier: 15:62:5E:57:FD:53:FF:DC:64:2B:B3:7C:C0:8D:C4:05:4D:19:45:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1A15F0C9D7A11F0B9AF26CCDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 21:24:34 +0000
ROA not before: Mon 29 Sep 2025 21:24:29 +0000
ROA not after: Fri 09 Oct 2026 21:24:29 +0000
asID: 132839
IP address blocks: 156.250.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97793 (0x17e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 21:24:29 2025 GMT
Not After : Oct 9 21:24:29 2026 GMT
Subject: CN=68daf912-2f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:e3:2a:f3:c6:db:1a:89:36:93:ad:f3:c8:
cf:f5:b7:8f:32:80:aa:53:6b:9d:dd:e5:1a:1d:7e:
99:57:b7:e3:6f:17:4d:97:20:f3:64:b0:5a:06:c0:
74:15:39:2a:ef:ed:44:cf:0e:0f:57:ce:7a:22:11:
9b:99:b9:fe:5b:29:8b:3c:f3:de:b9:0c:27:b0:7e:
31:8e:92:c1:cf:c0:7f:ed:34:f5:c7:5c:6c:43:d9:
82:46:ac:6d:6b:ea:d7:2b:61:fc:05:f3:24:fd:38:
12:68:32:23:2c:df:5e:e3:a8:c8:01:24:0d:3b:ac:
4e:0a:2b:62:eb:7e:3f:c7:57:7d:69:0b:2a:19:9a:
9f:94:bf:95:e5:b7:d6:6c:2d:58:e8:b9:28:6c:7d:
70:aa:2a:48:dc:54:c4:9b:cb:2b:c7:8a:3f:ad:93:
90:2d:c2:b0:ef:9e:de:a1:a7:d5:f2:de:29:ec:e5:
60:2e:c5:05:bd:62:11:ad:02:2c:d0:dd:f2:4b:85:
d5:2f:de:5a:28:16:cf:e0:ab:46:7d:dc:90:2d:33:
f0:d1:60:26:ee:4e:2b:ec:2f:6e:2d:9a:27:03:8a:
91:5e:ed:ac:a8:4a:d5:76:28:cf:35:d6:26:e9:f3:
dd:de:f5:4b:22:19:c7:91:a2:9a:86:68:e2:2b:52:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:5E:57:FD:53:FF:DC:64:2B:B3:7C:C0:8D:C4:05:4D:19:45:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1A15F0C9D7A11F0B9AF26CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.128.0/17
Signature Algorithm: sha256WithRSAEncryption
17:82:f6:8e:22:9d:f3:af:64:e7:09:5c:5d:ed:b2:b5:c8:ed:
5e:c3:6f:8d:ed:c5:8d:2e:ae:0a:9e:a0:68:f7:0f:42:2d:c7:
52:56:80:e8:40:25:3e:30:38:a1:89:7a:7d:5b:25:9c:ca:94:
0b:04:b6:ad:a9:8a:41:15:27:f9:03:c7:1b:9c:f9:d5:aa:1d:
26:3f:a1:25:b4:6e:a9:72:aa:89:71:05:83:a8:5b:86:5a:ae:
48:d1:3f:e5:10:a4:6e:68:87:90:88:a8:ee:7e:2b:a3:81:c0:
0d:3d:5c:b0:92:75:41:c2:a2:b1:6a:b4:c2:a7:0f:5f:3d:91:
ca:4a:55:87:03:4c:58:4a:51:24:22:cd:61:a4:b0:20:38:28:
ad:78:8f:75:d3:b4:6c:0c:73:37:fd:b4:9c:50:b7:67:9f:1b:
4a:66:5f:82:32:c6:29:2b:4f:bb:09:89:39:76:fa:d4:8d:9c:
31:1e:ce:44:12:6b:3d:38:b3:fa:d8:f5:e5:5d:41:a2:fe:cb:
1d:32:3f:1a:15:95:a7:05:65:a3:52:f8:64:63:ef:d6:e6:ac:
87:10:cc:b4:93:54:e4:24:14:67:63:93:aa:2c:e2:bb:e6:33:
00:88:6f:bf:70:38:5d:ce:fd:19:6c:09:2a:b5:fc:cc:e9:f7:
2c:0c:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:13 2025 by rpki-client