Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF9399EAFF011F0A796F1B7DAE4EC9C.roa
File: CDF9399EAFF011F0A796F1B7DAE4EC9C.roa (raw, json)
Hash identifier: eQ1m4LkinpILthPV53Kzrsga+uD57Fa6JYy61tNl7dc=
Subject key identifier: 92:41:28:8F:02:BB:1A:EE:0D:DD:38:0B:2A:D0:C8:BB:B6:2A:DE:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01822D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF9399EAFF011F0A796F1B7DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 09:15:23 +0000
ROA not before: Thu 23 Oct 2025 09:15:18 +0000
ROA not after: Mon 24 Nov 2025 09:15:18 +0000
asID: 17497
IP address blocks: 156.225.14.0/24 maxlen: 24
156.229.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Oct 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98861 (0x1822d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:15:18 2025 GMT
Not After : Nov 24 09:15:18 2025 GMT
Subject: CN=68f9f22b-6bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:a1:fa:53:c5:de:1e:eb:e2:e5:3b:68:f7:
0d:6a:d8:4a:99:e3:3a:59:93:ce:68:77:3e:11:07:
4c:d4:44:78:8b:5d:8a:cd:7e:29:f9:83:fb:09:cf:
c7:88:c2:21:2d:5e:26:87:ea:6c:65:22:3f:c6:bb:
17:bc:1c:12:75:e7:2b:d0:ce:f4:74:71:42:ce:26:
5e:b1:b7:23:ff:6a:5c:79:ce:01:4d:53:32:d6:2b:
9e:70:89:27:a3:6a:c4:00:3e:c2:21:59:74:72:9d:
d0:50:05:03:39:bc:e0:ec:c4:aa:ac:51:d1:6b:2f:
e2:3f:04:ca:da:c2:18:a9:36:59:ee:52:61:4e:47:
79:bf:cd:2f:07:14:07:33:f7:98:1b:84:94:45:30:
77:3b:87:9c:b6:7a:f2:68:b5:28:52:5e:d0:aa:f2:
18:06:1a:fa:19:05:b5:41:53:54:11:b0:78:bb:4e:
db:2b:f7:06:88:d0:ae:92:0d:94:cf:a8:68:49:ba:
87:b0:40:a6:28:81:c3:fe:9b:71:ae:e1:b2:ed:9c:
31:24:81:78:e2:a3:eb:fa:ec:0c:76:f9:4f:5b:35:
c2:2c:3f:38:79:04:4e:ab:6a:3c:90:c3:e4:09:e2:
33:2a:ce:f9:74:09:c3:c8:de:3d:77:ee:5f:18:f5:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:28:8F:02:BB:1A:EE:0D:DD:38:0B:2A:D0:C8:BB:B6:2A:DE:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF9399EAFF011F0A796F1B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.14.0/24
156.229.27.0/24
Signature Algorithm: sha256WithRSAEncryption
99:66:c2:da:64:22:1f:f0:ec:f6:8c:86:a1:26:19:8d:48:f6:
7b:26:96:9b:3c:50:45:44:e3:ad:14:68:2a:ea:f7:1f:0a:1d:
ef:ee:86:0d:40:a9:01:58:86:c0:0f:ac:2d:d5:b7:40:52:59:
eb:d7:19:43:2b:f5:b5:ff:80:f0:a0:8c:3f:ec:d2:9b:16:65:
1e:77:7d:d6:a3:02:bf:be:60:e8:4f:64:93:9e:76:79:48:57:
b9:f8:31:60:f3:e7:a8:dd:b3:1f:ed:1e:a7:15:97:5a:a8:e4:
54:76:fd:8f:c7:22:07:dd:06:65:ee:df:be:bd:ee:a8:f8:a0:
4a:b9:36:ff:08:9d:86:db:df:61:69:ba:65:ab:f0:2b:78:61:
58:a3:06:55:a1:59:4f:8f:82:c5:07:f8:eb:e3:94:d5:62:d2:
fe:10:12:9e:c0:e9:7a:29:f1:ac:32:fd:45:ef:a9:12:73:07:
11:6e:2e:fd:31:3b:a2:b2:21:cf:55:62:28:85:86:7c:aa:23:
be:c7:50:f7:38:0d:1f:17:77:b3:4b:c8:31:11:7f:76:c5:b2:
b8:69:4d:99:ea:1a:b1:04:7b:81:9c:9e:42:9c:7e:46:9d:6d:
e5:b6:7b:36:d7:be:9e:7a:fb:6f:3f:6f:0a:8a:62:52:9f:bd:
27:2f:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 15:07:51 2025 by rpki-client