Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F06A5ADEA99311F0944B8BC0DAE4EC9C.roa
File: F06A5ADEA99311F0944B8BC0DAE4EC9C.roa (raw, json)
Hash identifier: NX0hCVuPsK9hsMK9Zfqtffcrbl5cPS1pUJm6SqOdavU=
Subject key identifier: 8A:B5:B3:7C:C6:90:12:15:BA:76:DD:2E:3B:50:52:64:FB:50:24:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01807C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F06A5ADEA99311F0944B8BC0DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 06:55:31 +0000
ROA not before: Wed 15 Oct 2025 06:55:26 +0000
ROA not after: Mon 20 Oct 2025 06:55:26 +0000
asID: 401254
IP address blocks: 156.224.84.0/22 maxlen: 24
156.224.92.0/22 maxlen: 24
156.224.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 06:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98428 (0x1807c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 06:55:26 2025 GMT
Not After : Oct 20 06:55:26 2025 GMT
Subject: CN=68ef4563-a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:00:51:a8:dc:f1:4f:e4:94:de:3a:33:de:85:
44:f4:14:6c:c8:9e:cc:f1:3b:cf:e6:c2:18:5c:99:
bc:03:d3:5c:84:24:b2:82:f0:e1:2f:cb:92:e7:87:
57:f9:65:05:bc:e5:31:ba:5f:e0:11:3b:54:56:7d:
a1:44:f9:41:02:d5:1a:8b:fd:66:e3:48:44:56:00:
23:86:a9:f7:4f:bc:8f:cc:ab:05:07:cc:dd:a1:cf:
04:60:f6:d8:3f:fc:78:48:4f:b1:87:b7:2d:60:bc:
03:b2:85:d4:ce:a3:4b:61:c4:5b:11:68:36:8c:fc:
2a:2d:7b:17:4a:c8:4a:e3:db:e0:3f:c1:7c:60:ee:
62:d5:d3:bd:42:db:1b:c5:4d:45:d5:de:90:8d:b1:
f4:b6:fb:11:42:f5:b9:66:b7:e4:97:72:1d:35:e6:
5f:94:e3:59:7b:de:36:36:ee:b5:80:87:20:e2:b8:
b9:a2:cc:30:e1:23:87:b4:70:de:5d:02:db:93:c1:
31:10:57:f1:c0:26:ba:1f:ec:14:4e:80:66:33:c3:
18:e0:a8:e8:1f:40:50:fc:13:7e:7d:d9:19:b6:2c:
aa:81:5e:67:27:33:a6:75:ae:7d:00:14:8c:4c:ba:
17:e6:57:f4:ee:98:85:be:8c:22:70:62:9a:4e:9c:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:B3:7C:C6:90:12:15:BA:76:DD:2E:3B:50:52:64:FB:50:24:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F06A5ADEA99311F0944B8BC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.84.0/22
156.224.92.0-156.224.127.255
Signature Algorithm: sha256WithRSAEncryption
9a:00:1a:c9:a7:57:7f:e6:40:6d:98:cf:b0:ed:a4:b0:62:7a:
f9:0f:b9:ee:b1:a9:49:0c:e9:05:e3:ea:94:a4:fc:cb:9b:e5:
66:d4:43:51:22:b1:fd:40:ff:8c:50:4c:74:25:9a:e5:23:bd:
cc:8d:84:de:b0:65:e6:3e:5b:50:5c:8e:9c:3e:10:f0:2f:a1:
13:d5:f2:d4:ba:49:59:6a:de:6f:33:6b:44:b2:c7:e4:c1:24:
ca:a9:d7:c2:d2:cb:5b:99:56:e4:92:48:25:0f:7b:27:25:25:
b0:8d:c4:cb:b2:10:6d:57:ce:0b:99:6d:28:2f:d9:64:9c:6d:
e2:51:44:c5:a6:25:14:7d:82:dc:6d:95:72:9e:2e:43:d8:e1:
d3:2d:35:0a:0a:81:af:37:36:64:77:e7:d6:8b:b8:2a:60:96:
3d:6f:72:64:ff:27:90:84:8a:b4:a3:ea:b1:3e:6a:54:c2:a2:
84:06:16:4d:96:ae:bb:c1:99:b6:9a:6a:b3:7a:19:ae:88:f6:
32:07:f5:e7:a0:fc:73:4e:a8:af:e0:eb:fb:a0:40:57:f5:45:
1c:e2:1f:11:01:32:37:e3:51:77:1d:40:a9:31:62:e4:5f:d8:
ed:8f:ca:4f:44:c6:14:f5:c4:2e:ea:c5:82:61:90:12:ab:b7:
61:53:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:53 2025 by rpki-client