Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B714D56AAA5C11F09A5D3FA0DAE4EC9C.roa
File: B714D56AAA5C11F09A5D3FA0DAE4EC9C.roa (raw, json)
Hash identifier: FCG8KRXFaejuTMFnrqIlbUWLY8u0z5qwl7qSKki9Btk=
Subject key identifier: A9:6C:D8:6E:E6:9C:D6:58:15:7C:13:C3:3F:84:E1:81:64:D7:40:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B714D56AAA5C11F09A5D3FA0DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 06:52:44 +0000
ROA not before: Thu 16 Oct 2025 06:52:39 +0000
ROA not after: Thu 20 Nov 2025 06:52:39 +0000
asID: 20326
IP address blocks: 156.233.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98521 (0x180d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 06:52:39 2025 GMT
Not After : Nov 20 06:52:39 2025 GMT
Subject: CN=68f0963c-8611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:b7:19:47:e9:7c:28:4f:74:32:15:6b:5f:
d2:bb:dc:a0:da:15:77:c2:f2:75:53:ce:db:85:d6:
db:c8:fa:c4:fc:bb:22:52:14:ba:45:81:3d:be:31:
d0:23:84:8d:d9:e1:30:a8:94:0f:4c:fe:63:a3:b2:
f9:01:e3:f5:19:de:1d:b2:05:9f:fe:5d:12:19:44:
8f:0f:f3:6b:42:a2:34:b1:dc:94:fd:59:cb:4b:1f:
8c:f8:ca:1c:d5:88:1d:a7:c1:26:b8:39:d2:5b:ff:
5d:5d:a6:27:62:06:bf:33:21:0b:e2:55:fc:3e:31:
fe:b6:78:f4:22:da:d5:86:5e:bc:de:59:99:b5:39:
b5:d4:f2:e0:20:84:58:02:a3:b4:2e:6b:78:d3:1f:
be:18:56:f9:88:34:47:0a:ca:44:a7:6d:25:34:6f:
9e:9c:66:7a:2e:c1:bc:fd:b3:83:e4:7a:fd:c9:c8:
e1:df:a9:d1:2b:72:54:5d:ed:9c:a9:54:34:e4:8e:
44:e3:e7:7b:87:63:0e:14:96:9f:71:8b:61:e3:f6:
64:dc:2e:ac:89:6b:4b:9a:29:e3:41:9e:8b:08:18:
06:c2:a7:2e:24:34:14:bb:7e:9e:94:14:0d:0e:b7:
b8:7a:cc:32:eb:e3:42:eb:04:30:2b:d6:5f:03:7a:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:D8:6E:E6:9C:D6:58:15:7C:13:C3:3F:84:E1:81:64:D7:40:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B714D56AAA5C11F09A5D3FA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:46:2f:76:86:de:81:54:e8:50:72:82:d4:cf:8c:c5:58:83:
89:e8:ec:c3:25:26:bd:36:bd:db:b5:53:84:e1:9a:59:99:5d:
2e:52:c7:18:db:21:b8:23:39:4b:96:ae:6d:2a:42:bc:3c:e0:
33:34:b2:ba:90:ea:bd:ab:25:cd:2d:28:dc:98:fb:2d:04:84:
8d:aa:88:c4:a2:65:41:d8:58:12:b3:da:61:4b:4b:85:23:92:
3c:fb:3c:91:5d:17:00:0b:0b:92:9e:eb:cc:6c:8a:47:2e:a2:
8f:83:0a:04:95:ba:0b:ce:aa:63:09:4b:b7:e8:a6:f5:44:c7:
00:ea:76:b0:e0:2a:c9:50:17:85:fd:f6:5f:eb:55:dd:5f:ea:
e6:0c:fa:1a:75:87:85:43:27:6e:16:3d:b5:c5:7a:bb:f8:e3:
1f:b8:aa:4c:33:c9:0d:5b:79:34:17:a4:54:51:d8:51:be:4e:
ee:60:ed:f0:e7:25:30:9e:2a:7b:2f:bb:53:71:40:b9:c4:9e:
f6:0e:cb:6b:56:2a:35:27:ab:19:3a:3d:5a:ad:09:4e:36:18:
11:f7:2d:81:09:a7:73:cb:05:ab:8f:fc:b0:fe:44:fe:ea:b1:
9d:a3:e3:93:55:f5:fc:7b:7e:0b:eb:df:a1:92:a9:17:1f:1e:
5c:67:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:09 2025 by rpki-client