Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05E7C6A6A9AF11F0913F0DE3DAE4EC9C.roa
File: 05E7C6A6A9AF11F0913F0DE3DAE4EC9C.roa (raw, json)
Hash identifier: Fm061v3Vq3Oj6NIIJJdThDC320Kr+OF1UOTRv/iwmh4=
Subject key identifier: 83:FE:07:FC:87:55:7E:7D:38:81:26:43:35:8E:7A:E8:98:72:AE:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05E7C6A6A9AF11F0913F0DE3DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:09:23 +0000
ROA not before: Wed 15 Oct 2025 10:09:19 +0000
ROA not after: Sat 01 Nov 2025 10:09:19 +0000
asID: 401903
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98475 (0x180ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 10:09:19 2025 GMT
Not After : Nov 1 10:09:19 2025 GMT
Subject: CN=68ef72d3-d9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:26:95:9e:14:84:2e:d0:8f:77:20:1f:13:
66:cc:6b:f3:49:5f:51:29:1b:fd:86:42:da:27:99:
49:e4:d2:1f:7b:f6:ac:0e:26:cc:7a:99:ab:14:5c:
cc:08:cc:c2:50:04:24:a1:80:e0:07:a5:66:9a:d5:
bc:a7:ac:6d:c7:a1:90:75:9f:4c:64:fa:2d:70:59:
9b:9a:be:a9:dd:83:c5:30:0a:85:01:9d:0c:fa:cf:
d3:8b:6b:0d:33:5d:13:b2:77:ca:55:ea:58:1a:89:
70:a8:51:7a:22:7d:6d:d8:93:1e:f9:9e:6f:08:68:
60:b8:ed:df:be:80:75:1d:29:9a:61:ab:6a:68:72:
0c:5e:b3:74:8c:59:e9:93:f6:c8:6e:0d:2f:82:93:
ac:d2:4d:f2:4b:7e:76:ca:2b:ef:dc:59:44:f0:a3:
e8:04:3b:98:9b:04:88:57:a0:8a:b2:74:3a:57:f2:
85:73:f7:b9:a3:f7:32:22:c3:d1:93:88:7c:7e:a0:
15:18:2e:50:48:87:59:95:32:d4:62:65:e2:81:be:
46:b3:0e:46:a7:95:33:20:a1:7a:1d:d5:f5:9d:d0:
36:91:da:b7:24:92:3b:ef:40:8d:0b:70:93:b6:e1:
f6:f8:6b:8a:34:59:f2:e0:6e:54:ff:ff:6c:f9:a9:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:07:FC:87:55:7E:7D:38:81:26:43:35:8E:7A:E8:98:72:AE:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05E7C6A6A9AF11F0913F0DE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e7:0f:2d:ef:23:1b:68:74:47:47:5f:30:f9:11:78:40:1a:
e1:bd:cb:0d:f8:bc:f8:d2:8c:ce:69:bf:43:69:ba:71:fd:70:
6b:cb:dc:2e:4f:4e:a4:9c:04:af:28:e5:9c:e9:ed:72:b3:33:
a9:f1:70:8d:9a:9e:36:e9:a2:da:f6:88:bc:2f:c2:ae:55:90:
70:55:c4:62:6d:e0:fc:b1:1e:bd:d3:68:65:1a:6a:d2:21:9a:
85:84:78:86:5d:72:4a:e0:7a:12:67:8c:33:67:76:f2:06:e0:
06:50:a1:09:1f:86:3a:06:33:b5:05:eb:b1:c4:1a:49:15:bb:
a3:c9:dc:d1:17:26:96:75:30:bd:11:45:9a:82:59:51:b8:58:
2d:53:9b:67:55:17:98:5e:1b:79:1c:6d:fe:0b:f0:53:2f:3d:
5f:0f:4c:69:03:6c:31:4b:17:8b:14:97:57:65:33:a8:48:14:
63:41:bb:c7:11:8f:78:f5:3e:e8:ec:74:b8:fe:d2:c4:bc:05:
65:cc:ce:dc:01:f1:86:c4:52:8c:fb:1c:de:a3:11:1e:aa:d3:
78:76:fb:f7:63:30:7a:87:7b:51:96:d0:49:d3:38:a5:67:c2:
f5:e8:6b:99:a4:a7:b1:70:a4:2e:88:42:82:65:e1:26:01:61:
20:11:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:28 2025 by rpki-client