Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F64FF4BC9F6211F0A35547B7DAE4EC9C.roa
File: F64FF4BC9F6211F0A35547B7DAE4EC9C.roa (raw, json)
Hash identifier: H/vQ6t34EPVvSnbIe+Ix64dvNT1oPoJaUc9uzOAh/YM=
Subject key identifier: 4A:B5:98:4F:F5:54:8A:C6:F1:07:62:EC:55:1C:8C:D5:06:A2:B6:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F64FF4BC9F6211F0A35547B7DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 07:39:44 +0000
ROA not before: Thu 02 Oct 2025 07:39:35 +0000
ROA not after: Thu 30 Oct 2025 07:39:35 +0000
asID: 137547
IP address blocks: 156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97877 (0x17e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 07:39:35 2025 GMT
Not After : Oct 30 07:39:35 2025 GMT
Subject: CN=68de2c40-4d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:0e:21:fe:c9:09:cb:b0:15:df:3d:45:89:
68:e3:8d:d0:1a:eb:bb:65:4d:09:b5:25:ee:80:f7:
06:82:a9:66:2b:f0:b2:d4:a5:d1:4f:4c:6f:14:cb:
2a:48:5e:e8:97:04:04:23:10:f7:20:a2:e8:25:71:
86:da:e7:8c:93:7a:b3:9a:69:c9:98:6c:e0:35:3f:
75:0f:6e:c2:af:19:b7:15:31:df:80:2a:fb:1a:79:
13:a3:97:c7:98:ec:e5:ba:bf:e2:93:e2:db:3a:7d:
ed:63:f8:f8:3c:20:ee:c9:02:14:22:6c:13:54:52:
6e:c6:b2:6a:29:c6:2c:cc:e9:6b:68:d1:6a:3f:77:
86:5c:92:2e:5b:91:69:1b:fc:fd:6d:a4:af:cf:b3:
47:82:a3:07:b3:4b:d4:51:2e:4c:57:c2:66:4c:76:
65:7b:20:fb:34:32:60:b2:47:9c:1e:12:30:20:0a:
34:8f:63:0e:56:b2:6a:df:ff:61:25:cc:79:ea:68:
27:32:f4:13:52:ad:fe:24:5b:01:ef:58:bf:81:b9:
7e:0c:59:0d:2a:94:a8:ed:ef:cc:57:ed:21:b5:75:
fa:6c:13:47:36:52:ac:29:a3:0d:37:36:47:d1:2d:
d2:48:d8:3b:d5:09:89:8a:85:a0:e3:3f:e6:41:49:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B5:98:4F:F5:54:8A:C6:F1:07:62:EC:55:1C:8C:D5:06:A2:B6:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F64FF4BC9F6211F0A35547B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:15:5b:74:a3:a4:f0:22:b4:91:d9:c3:61:61:35:19:7f:b5:
9d:5d:56:ed:95:0e:8e:ee:3a:e1:15:e8:f8:5a:e0:8f:56:f1:
07:a4:d7:07:34:91:70:dc:e1:47:7b:f6:fa:af:1e:d3:6e:ca:
09:30:25:9c:70:cd:e5:fa:05:2c:78:34:a3:a5:a0:2f:57:96:
5c:d5:1a:70:d7:9a:d3:4e:6d:a9:71:62:a0:56:03:46:3d:2f:
61:3a:93:24:68:47:19:f5:2a:92:d8:3d:f2:8c:96:c2:d3:36:
15:46:fa:92:1f:cc:e1:d6:79:25:35:e7:1b:dc:7b:c4:d9:f7:
d7:c0:71:c5:dc:31:c2:87:7a:1f:26:7a:1a:4c:5f:53:7d:6b:
ac:3d:05:2d:ec:63:5c:9d:f5:29:cc:d5:64:a4:72:c2:5c:b5:
3b:31:71:23:08:4d:86:b4:e0:96:fe:8f:19:64:95:c4:23:61:
0a:f1:67:d0:17:39:d0:41:69:5d:0e:df:6d:73:be:34:5e:fb:
f0:45:f3:00:9d:f3:38:96:dd:e6:ee:e5:1b:4f:b4:87:a5:59:
c5:49:9f:bb:42:10:90:81:85:69:5b:6b:01:87:cb:34:c0:f1:
8a:d9:7b:2e:98:43:ef:9d:cd:91:90:f5:4b:e0:ee:f5:27:90:
57:11:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:38 2025 by rpki-client