Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD68FE20A28E11F08244C7D0DAE4EC9C.roa
File: CD68FE20A28E11F08244C7D0DAE4EC9C.roa (raw, json)
Hash identifier: +yp6KPIqsaIUpcco76IpFs9NuxdTz2uQeybkh2jQSvU=
Subject key identifier: 5A:07:B5:7A:CF:A6:A7:12:B2:3C:34:7F:59:D1:7B:17:A3:81:98:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD68FE20A28E11F08244C7D0DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:31:07 +0000
ROA not before: Mon 06 Oct 2025 08:31:02 +0000
ROA not after: Tue 11 Nov 2025 08:31:02 +0000
asID: 396356
IP address blocks: 156.229.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98034 (0x17ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:31:02 2025 GMT
Not After : Nov 11 08:31:02 2025 GMT
Subject: CN=68e37e4b-eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:83:c8:a9:19:ec:c8:5c:b0:b3:0c:64:ec:
75:48:2e:72:96:79:1f:43:6d:d2:e7:93:22:a2:b8:
a5:0d:96:e5:92:ed:96:08:1a:ea:2e:d1:28:e1:9f:
18:f7:a6:48:07:e4:13:75:3c:6a:e1:24:fe:90:3c:
02:79:4d:46:1e:72:da:d6:0c:41:c6:45:1f:1f:55:
61:54:7c:ba:26:28:b7:8f:33:ae:f6:f4:12:00:55:
44:b8:cd:bf:6f:f8:09:53:66:55:01:b8:65:a2:a8:
4e:17:d8:6a:7a:96:ab:b1:d9:0b:a3:b2:1e:b6:2e:
b9:af:32:33:b3:dc:d4:7a:db:25:70:ce:b0:de:73:
d0:d5:0f:da:d3:5c:61:c2:cd:44:0b:c4:c3:1a:56:
20:05:43:d4:9b:c7:ae:7a:a7:7c:fa:66:c3:37:17:
21:89:24:26:0e:71:5d:3b:10:08:77:51:dc:a6:f8:
a2:cd:20:87:a6:62:76:ea:58:4f:4a:64:19:9e:86:
2f:3d:13:ff:8e:95:54:5b:fa:7b:53:17:07:56:7b:
bb:9a:d2:8d:1f:61:93:5e:bd:eb:b9:d2:b7:99:69:
aa:2c:73:ce:f0:32:cb:18:51:98:4c:69:20:1b:0d:
c0:bb:27:68:9e:e7:40:65:c6:87:8e:51:68:3e:95:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:B5:7A:CF:A6:A7:12:B2:3C:34:7F:59:D1:7B:17:A3:81:98:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD68FE20A28E11F08244C7D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2b:e9:74:ba:6e:d9:05:d7:e5:ed:d7:92:96:74:24:db:0b:
d3:a8:f4:34:2e:1d:83:7c:70:9a:9b:b3:ce:31:28:06:22:0d:
80:a3:b7:11:8b:42:e4:e4:50:ec:d7:c2:f2:a4:47:ef:cf:04:
8f:7d:8c:c3:48:c1:fb:74:c4:cf:e0:e2:77:b8:b1:47:30:11:
7e:d7:0e:79:24:a5:6d:ff:a7:32:64:38:e8:a9:33:05:bd:96:
1e:61:33:eb:b1:93:40:a5:da:2a:09:2f:90:cf:d5:85:75:ed:
0b:18:2f:e7:4d:dc:2a:92:a3:7d:65:14:32:c3:07:74:0a:46:
77:4e:b7:bb:be:2b:47:f0:5c:eb:61:58:70:78:b8:4c:a7:93:
ba:fd:c9:a4:ae:dd:cc:fa:f6:07:08:a0:51:44:e1:88:1b:ce:
54:8b:18:cb:af:a2:b1:1b:ff:48:84:68:01:d4:d2:5d:f3:c3:
93:ce:e7:6a:8a:c8:55:27:cc:38:84:b4:16:b2:50:83:0b:6a:
b3:a0:c7:4b:5d:0c:80:46:1f:b6:b6:8c:b0:58:fc:7f:ed:46:
58:75:5f:d9:7b:ef:53:3f:9e:ff:6a:6d:e9:c7:7d:af:62:bd:
a8:b9:e4:09:97:0a:e7:3f:0f:38:6b:4e:9f:6f:b2:ff:fe:21:
b6:f2:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:34 2025 by rpki-client