Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB2DF210920B11F098BBB3D5DAE4EC9C.roa
File: DB2DF210920B11F098BBB3D5DAE4EC9C.roa (raw, json)
Hash identifier: B2RwM0A0YM62GNEc8VCB7dFpJGql26mN3sTYbuX/vGo=
Subject key identifier: C3:61:7B:CC:88:70:E4:10:A2:1E:86:34:D9:A0:99:E4:FE:02:74:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB2DF210920B11F098BBB3D5DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 08:13:27 +0000
ROA not before: Mon 15 Sep 2025 08:13:22 +0000
ROA not after: Tue 21 Oct 2025 08:13:22 +0000
asID: 14315
IP address blocks: 156.224.64.0/22 maxlen: 24
156.224.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97075 (0x17b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:13:22 2025 GMT
Not After : Oct 21 08:13:22 2025 GMT
Subject: CN=68c7caa7-e816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:be:47:02:5c:61:97:35:5e:13:7c:53:98:
ca:eb:51:9b:ae:1a:5d:c5:53:25:ed:f9:05:ee:47:
5f:e9:fb:74:36:93:bb:6b:2f:86:a5:51:6a:7e:d5:
a7:7e:4e:3f:8d:e7:c4:dd:8a:90:51:ae:f3:e6:77:
21:6d:84:c0:1a:26:b4:b3:8e:c1:30:2b:a4:40:45:
c8:de:1c:fd:24:13:cc:44:59:ce:9d:9f:72:a4:93:
2a:ac:94:80:b6:cb:bf:9c:e7:91:c9:03:e9:9d:4a:
77:05:0f:43:4b:1f:93:a2:06:8c:c3:c7:3c:e6:87:
40:3f:51:5c:54:fb:f7:b6:7c:af:ae:51:44:a7:a4:
f1:c2:23:03:01:d7:e3:a5:0f:b8:b6:40:2d:33:df:
fb:f1:14:65:b0:07:a2:ae:b4:02:7e:40:b3:f6:71:
cb:b8:38:11:af:21:f3:29:9c:09:87:c3:14:2f:e8:
0e:5f:47:65:fc:07:6c:33:b4:4b:00:70:be:2c:a9:
24:84:37:e8:f1:31:3d:4d:d3:2d:17:89:c8:1c:c4:
df:e7:a5:b2:b1:99:e4:ae:e4:bd:4d:ea:ef:c5:9a:
8c:18:5d:cd:3d:3f:af:96:ac:b8:ca:f6:a3:16:4f:
ca:b2:c2:2a:a2:d5:72:d1:1a:3b:c1:11:bd:cb:f6:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:7B:CC:88:70:E4:10:A2:1E:86:34:D9:A0:99:E4:FE:02:74:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB2DF210920B11F098BBB3D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.64.0/21
Signature Algorithm: sha256WithRSAEncryption
62:94:9b:e6:16:07:e3:cc:1a:69:f4:4a:fc:83:bd:b8:9d:bb:
42:1e:df:76:fd:d6:b6:01:18:96:26:3a:bf:60:fe:69:b4:44:
8f:7a:04:d0:1d:46:1b:54:93:aa:85:09:18:cf:a7:ad:08:90:
14:44:47:fd:bb:bf:61:44:c7:69:d4:54:98:76:c0:60:82:99:
61:a5:f4:da:49:78:30:37:5e:bc:be:fe:5e:a0:9c:71:9d:52:
66:57:61:ee:39:dd:75:30:eb:df:38:65:69:48:1d:61:e8:e8:
ac:65:d8:ef:d7:17:e5:76:b2:ae:b0:12:fd:33:c8:6f:ea:88:
31:3c:7b:c0:2b:0e:bb:fa:d0:21:a9:f4:a0:b0:17:ff:aa:72:
5c:31:56:56:d7:4a:c4:72:2a:20:32:8d:ac:53:ac:d2:3c:54:
e2:b1:f4:5a:0b:75:f1:b7:be:c8:93:4f:d0:c7:d7:2b:22:6e:
79:c4:fe:c7:94:63:c0:7e:ee:a2:c5:30:0c:cd:90:0e:34:57:
fe:c6:6f:b0:c6:a2:e3:32:6a:84:9f:0d:9b:a1:50:32:4e:5f:
a3:64:85:44:7c:f0:55:8a:21:08:d6:71:33:b7:14:94:a0:e3:
02:f7:03:32:c7:5d:aa:5a:01:ab:0d:53:60:95:83:b1:5d:47:
a0:e1:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:10 2025 by rpki-client