Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE5C0D5C9F7A11F0B769DACFDAE4EC9C.roa
File: CE5C0D5C9F7A11F0B769DACFDAE4EC9C.roa (raw, json)
Hash identifier: EPXVIoc5ZI00qKsyVnqqnFxGg9NSY+Ybr1iCrj2HZdk=
Subject key identifier: 8C:9D:C3:45:D7:7B:AA:9F:CC:65:14:D8:86:99:43:E8:AB:E9:84:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE5C0D5C9F7A11F0B769DACFDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 10:30:25 +0000
ROA not before: Thu 02 Oct 2025 10:30:19 +0000
ROA not after: Mon 10 Nov 2025 10:30:19 +0000
asID: 401701
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97910 (0x17e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 10:30:19 2025 GMT
Not After : Nov 10 10:30:19 2025 GMT
Subject: CN=68de5441-cb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:37:d0:2a:67:e0:93:08:1f:03:d4:a1:1a:
17:2d:9b:2f:2e:0e:1e:a1:21:fd:cf:dc:ea:f3:d0:
08:22:f6:06:7e:d3:3f:02:e6:2e:d2:91:66:dc:6a:
41:47:5c:db:60:75:fa:f4:bc:f8:87:b6:bb:f2:c0:
f4:a0:35:cc:2c:2e:35:1b:0e:35:59:8f:54:f2:6b:
ab:6f:f3:88:6e:ab:2d:8f:d6:69:6b:f2:f5:4d:25:
e5:92:35:4a:de:bf:90:9c:87:23:17:51:27:7a:77:
d7:39:f8:b6:0b:d1:8e:85:06:85:a4:76:0e:3c:1a:
82:46:fb:74:4c:a1:8c:18:d6:74:2a:c7:8b:53:fc:
f9:73:75:46:c2:d6:00:d3:ba:3f:8e:e1:8f:5e:7d:
26:bf:c3:af:fd:c9:c5:cc:40:35:99:10:f0:04:02:
40:46:30:1d:33:e5:01:6d:ea:9f:69:71:62:29:ef:
a9:71:6a:50:ac:04:ca:7e:49:c7:65:19:06:fb:6b:
1a:37:10:92:35:ce:dc:1d:87:9b:38:f8:1b:00:bf:
b9:c3:cd:89:9b:a8:8d:4e:fa:39:9d:2c:91:5c:6a:
08:21:d1:c5:13:df:3f:1b:dc:c8:74:fb:d0:bd:e9:
7f:53:03:db:e4:eb:6c:ca:09:1e:82:9f:ce:c2:8f:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:C3:45:D7:7B:AA:9F:CC:65:14:D8:86:99:43:E8:AB:E9:84:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE5C0D5C9F7A11F0B769DACFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
78:d0:26:43:e5:cc:42:df:db:05:46:f0:82:27:85:b7:24:29:
97:fa:cc:01:21:1f:44:3f:0a:28:2e:49:30:7a:29:e5:ac:9d:
82:a8:25:a3:7f:0f:81:a7:f8:5d:29:e0:14:2e:91:54:0d:ac:
38:56:3c:5a:2f:c7:ec:e3:f3:d9:5a:f9:eb:37:7d:c2:b4:ca:
5c:78:1c:4e:67:c1:0b:64:f3:e6:8a:63:b9:87:eb:c8:fa:bc:
d6:49:0e:d8:63:3b:50:75:91:cc:5a:c1:73:52:b9:32:67:22:
f0:c6:5d:6b:05:9a:c4:24:b2:05:ab:01:fa:ae:e9:58:d9:7b:
77:e2:13:08:7e:f9:04:ea:76:bb:f9:18:51:5c:7b:9c:8b:42:
19:2f:76:6e:68:47:e6:cb:00:66:6c:84:74:fd:85:52:17:a9:
eb:e2:c7:9f:56:d6:54:b6:3e:3b:73:ea:ca:e1:b1:e7:82:81:
fb:e9:5e:ec:e5:68:ec:41:51:d2:35:35:a8:5e:f2:e6:25:b8:
9a:aa:0d:5d:73:eb:08:77:a3:d9:03:58:5a:86:d0:27:8c:f2:
35:ed:7a:7f:ad:16:ce:2f:f9:dd:f0:0a:93:05:c4:63:29:91:
20:7f:f1:97:8c:29:44:3a:97:54:d8:d3:df:ab:03:a9:33:3a:
2d:32:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:49 2025 by rpki-client