Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93B44DC993C11F0973A42DBDAE4EC9C.roa
File: F93B44DC993C11F0973A42DBDAE4EC9C.roa (raw, json)
Hash identifier: ATc0aKLIxuFyokh5I+GJLxb97qJJbCHNBm14valqEYc=
Subject key identifier: 4E:39:74:3C:E0:2B:53:17:CF:3C:E7:87:1A:94:40:6E:C1:58:15:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93B44DC993C11F0973A42DBDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 11:52:41 +0000
ROA not before: Wed 24 Sep 2025 11:52:36 +0000
ROA not after: Thu 04 Dec 2025 11:52:36 +0000
asID: 62468
IP address blocks: 156.239.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97473 (0x17cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 11:52:36 2025 GMT
Not After : Dec 4 11:52:36 2025 GMT
Subject: CN=68d3db89-d1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:09:dd:43:96:ab:36:fc:75:dd:41:c8:3c:
58:3d:1b:71:73:6c:b3:ca:37:17:96:c5:14:f3:58:
3b:3f:54:c1:80:e6:03:4e:bf:e1:5f:35:8f:a6:de:
89:f9:36:0f:f9:46:45:8c:cb:bc:2c:5e:01:67:9d:
e3:5b:20:fb:57:56:18:6f:12:82:ce:3b:0e:fe:e3:
76:fc:ac:f8:03:71:1d:db:f0:e0:ce:0c:67:1a:85:
73:ce:71:40:4c:55:24:62:c2:ca:63:93:f3:9e:3f:
7a:98:56:83:40:ec:b8:a7:a8:93:7c:a3:5b:10:df:
28:94:3b:f8:36:e9:80:ed:d7:96:c0:81:9e:e9:f2:
8f:27:3a:21:d3:87:07:bb:b3:6d:17:b0:bc:a4:29:
49:8a:7a:c1:2e:93:cc:f7:8e:66:ec:7c:1b:ac:39:
7f:be:1c:9b:22:84:39:81:ef:2a:a7:e8:ab:9b:c6:
ba:00:7a:68:81:36:6e:79:7f:c7:77:74:72:b6:3c:
c6:80:a5:86:5a:f4:d2:38:ed:5b:e8:95:3a:fe:c7:
e9:d6:70:32:50:54:90:36:7e:66:38:dd:d7:46:e7:
d1:31:93:36:8c:d0:ff:6d:6f:9e:e1:09:69:85:71:
1d:9a:16:60:bc:af:36:03:48:59:79:e8:a2:e9:86:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:39:74:3C:E0:2B:53:17:CF:3C:E7:87:1A:94:40:6E:C1:58:15:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93B44DC993C11F0973A42DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.224.0/19
Signature Algorithm: sha256WithRSAEncryption
01:95:fc:55:37:b7:24:0c:0b:8b:b8:57:29:d2:e0:85:67:6d:
d2:a1:1f:44:0b:f0:5f:63:75:ac:76:54:67:91:8e:56:26:35:
3b:41:ea:a7:1d:42:e5:48:40:70:f1:14:9b:35:f2:62:aa:26:
32:68:86:98:2d:8d:42:fb:7e:72:a2:ad:57:c1:b7:10:94:1b:
86:e3:5c:70:50:b5:cd:92:54:79:b5:19:21:7d:13:bd:23:a1:
28:27:60:b8:2c:c5:58:eb:fa:38:7c:c9:a4:54:fc:61:a5:61:
82:56:be:6c:2d:78:cb:33:42:23:81:7d:23:7c:95:54:04:d3:
66:33:2d:52:2a:4a:39:1c:ad:d4:a3:e4:26:14:29:2a:63:09:
e1:b3:df:89:f9:3a:0e:17:cf:10:c0:1a:93:bd:1e:59:65:a8:
29:9c:0f:34:20:51:a8:fe:44:ca:90:c7:90:4c:e7:a9:33:f6:
ac:71:19:a8:b5:1c:6a:e1:ad:d1:53:1c:41:e9:c0:74:0d:4a:
c9:ff:59:6f:ce:bf:2b:b4:71:43:25:f6:f3:3f:60:b2:91:74:
1b:ea:7f:68:00:09:b5:f8:4a:27:b3:2f:1b:0a:d3:04:0d:eb:
32:59:e9:61:bd:95:ec:16:52:6d:5a:ee:e5:63:8a:ea:f3:b6:
aa:03:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:05 2025 by rpki-client