Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9BE17AC99A611F0B294B87CDAE4EC9C.roa
File: B9BE17AC99A611F0B294B87CDAE4EC9C.roa (raw, json)
Hash identifier: FHPv/uazoho/MoQDRwGtizp3HyqHbxEUNVu2hKxQMXg=
Subject key identifier: F5:26:B6:D2:8F:51:5F:C1:C7:91:61:FB:3B:D8:04:6E:C9:40:2E:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9BE17AC99A611F0B294B87CDAE4EC9C.roa
Signing time: Thu 25 Sep 2025 00:29:41 +0000
ROA not before: Thu 25 Sep 2025 00:00:36 +0000
ROA not after: Sat 17 Jan 2026 00:00:36 +0000
asID: 213642
IP address blocks: 156.229.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97585 (0x17d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 25 00:00:36 2025 GMT
Not After : Jan 17 00:00:36 2026 GMT
Subject: CN=68d48cf5-8847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:1e:d2:9f:78:83:e6:6c:7b:26:37:4c:80:
93:c4:9a:d0:7d:44:6a:43:52:75:58:fc:c2:c5:3b:
2d:ce:66:c3:96:69:c7:e8:7d:2c:77:ee:ff:83:34:
c3:61:99:00:10:cc:1a:f8:c0:5f:aa:73:66:d4:70:
28:8b:fb:b3:a1:c5:41:3c:7e:1b:42:ec:bb:38:0e:
28:35:eb:de:fc:61:5d:75:fd:a7:02:62:b1:ac:e1:
96:0c:21:c8:42:af:93:0c:96:b2:1c:10:c3:2b:f1:
bc:95:54:d1:de:4c:e0:bd:7b:b5:e3:85:a9:b8:d7:
11:83:cf:fc:1e:9d:6b:c0:a1:13:d8:73:1a:6c:dd:
c6:f2:cd:7d:97:16:52:4b:1e:0a:a0:b8:ed:37:77:
e7:84:c6:e9:e4:d4:df:e9:9a:3c:a1:63:c5:ff:f8:
b8:95:95:d3:bb:da:57:45:94:46:c3:41:f7:7a:53:
8b:9c:7d:8a:99:70:c3:7f:68:ad:46:92:69:3a:d5:
c2:ea:54:60:3c:d9:9e:5b:05:6f:96:43:8b:19:61:
ca:77:37:4a:c4:02:fb:17:f4:19:08:57:97:0d:76:
c7:be:65:1a:72:1a:54:de:69:03:e1:fa:a9:5d:e7:
ec:6d:52:4e:d3:23:54:30:7e:74:95:ad:3e:b1:8b:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:B6:D2:8F:51:5F:C1:C7:91:61:FB:3B:D8:04:6E:C9:40:2E:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9BE17AC99A611F0B294B87CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bf:7e:e9:f0:59:f3:8a:35:3f:b3:20:0a:d8:0c:22:9c:4c:
ff:db:3d:e0:66:0f:9f:a5:e0:29:fa:c5:e3:b3:0d:5a:92:04:
d6:d5:17:55:48:9d:04:d6:ae:68:e0:4b:ac:cf:97:c2:c1:8e:
90:60:04:78:70:5e:5a:5f:47:14:8c:c4:f2:3c:38:40:ac:85:
2e:65:46:d0:f4:5c:73:eb:be:e5:51:ae:dd:36:ba:ec:e0:22:
d4:3f:f0:92:0f:2c:3e:1f:d8:53:8d:60:b6:8f:0b:66:57:31:
a3:51:00:2e:3e:e5:f3:d6:e1:b5:31:e5:ba:72:e0:c0:97:7e:
fa:b4:61:65:56:a9:02:c7:9a:31:df:1d:dc:6a:74:c0:2f:99:
cf:5a:52:e3:97:6b:7b:80:58:43:28:a7:d9:bc:ac:46:98:c7:
44:7b:68:c6:9b:b7:8e:11:d7:76:dc:9c:3a:ef:c6:31:fa:42:
4b:16:b8:e4:a6:7a:2a:b4:e6:b3:2d:4f:b7:34:17:9c:01:30:
e5:3f:6b:36:04:4c:8a:a8:58:a3:9f:78:0e:4b:f2:9a:ee:0a:
78:1a:f4:ae:ff:b7:a4:3e:1f:df:5a:fb:09:92:5f:f3:c5:89:
ee:6a:2b:95:db:ea:65:c7:93:9a:65:5b:ed:45:49:ec:fe:41:
4a:60:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:52 2025 by rpki-client