Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCF7CAC09D3D11F0B4F6EBC9DAE4EC9C.roa
File: DCF7CAC09D3D11F0B4F6EBC9DAE4EC9C.roa (raw, json)
Hash identifier: TReQ3zE/i2krAw2b4Ua8A6Q9MXxOuCMOd2rv2eoWUZw=
Subject key identifier: 03:D8:3E:A0:7A:86:91:8B:07:DD:E5:A7:5D:D8:B9:F0:66:8D:88:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCF7CAC09D3D11F0B4F6EBC9DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 14:09:08 +0000
ROA not before: Mon 29 Sep 2025 14:09:02 +0000
ROA not after: Fri 31 Oct 2025 14:09:02 +0000
asID: 44559
IP address blocks: 156.249.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97723 (0x17dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 14:09:02 2025 GMT
Not After : Oct 31 14:09:02 2025 GMT
Subject: CN=68da9304-634d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:95:61:fe:6f:a5:3b:d8:40:a0:51:c3:2c:
5e:01:c6:e1:ea:6d:8e:20:8a:e4:fa:8f:72:9f:1f:
29:00:e5:0e:ee:91:24:f1:26:f1:94:67:cc:91:7a:
69:ac:45:9b:0f:b0:22:a5:78:11:a9:1c:56:09:2d:
86:a8:30:9e:45:46:87:37:85:46:a7:42:ab:c6:da:
79:43:c5:35:e1:4f:15:d0:2f:08:f2:d6:76:29:0b:
88:d9:7c:8c:e1:f5:ef:79:cd:a5:49:46:39:aa:7f:
c4:96:89:69:4b:8a:54:6f:8e:5e:7e:16:dd:c7:08:
d2:52:5e:3e:37:14:5a:a1:84:bd:19:d7:82:6a:c3:
3e:9a:29:fa:70:ce:d9:07:b7:f1:c5:29:8c:4f:e4:
b8:59:32:5c:e8:3d:06:37:ab:e5:cc:db:86:2f:9e:
d2:0c:35:17:b9:f4:a8:61:68:7b:a1:a6:c6:83:54:
5b:5e:74:e3:3f:75:4a:b3:28:26:34:ba:87:d3:2f:
f5:b9:9c:67:ad:f4:5c:37:be:10:76:ca:37:f4:ab:
b9:88:12:d4:60:c7:15:32:4c:00:99:42:ea:87:b6:
69:54:b2:92:a4:bd:3f:9c:2f:ce:e6:bc:26:a5:fd:
2e:9c:d7:43:c5:81:06:c4:1f:aa:55:d7:b5:3e:49:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:3E:A0:7A:86:91:8B:07:DD:E5:A7:5D:D8:B9:F0:66:8D:88:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCF7CAC09D3D11F0B4F6EBC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:77:05:e7:68:70:83:60:f7:fe:69:ab:12:a8:8f:40:3e:c2:
1b:ec:ca:5a:35:cc:95:d8:75:82:a0:0a:8b:a7:6d:0a:39:4e:
6e:bc:55:0e:23:9c:25:c8:fb:69:e7:3c:e4:e5:51:72:c7:97:
5d:4d:cb:05:b4:3d:77:c7:fc:be:2b:90:e3:63:71:41:58:bf:
cc:59:5d:de:10:75:e4:23:06:e4:50:5b:3a:4a:c3:4b:a3:8c:
99:c0:17:dc:f6:16:68:44:b8:a5:86:cf:ef:ae:08:4c:04:87:
6b:b6:04:e2:06:88:4f:2b:c5:b8:f2:28:83:6b:c3:24:30:8a:
17:95:df:8a:66:35:cd:d6:ff:0a:fd:cf:80:f3:cf:b2:4a:03:
9a:e0:22:71:28:ea:f6:a0:0d:eb:fa:47:6f:4c:d5:44:1a:e4:
ef:17:d8:19:7a:b4:bd:c9:c5:cf:9e:5f:a5:9d:47:aa:59:50:
c0:17:5e:d9:c3:6d:4e:f3:51:97:1a:81:82:5e:9d:db:32:e0:
ba:1c:0d:14:61:bb:2c:9e:2e:91:64:68:4a:07:df:96:48:26:
0c:7c:8e:fb:85:9a:c2:94:ab:ef:0b:7f:97:ac:c0:0a:2f:1e:
94:29:78:5d:b5:a8:04:55:2e:47:7b:1e:1c:02:73:2d:a3:7f:
1a:1a:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client