Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D62A59EA9C611F0AE0FED78DAE4EC9C.roa
File: 3D62A59EA9C611F0AE0FED78DAE4EC9C.roa (raw, json)
Hash identifier: l5p7JYD4F7J2vPqacJV6FhScA0/txyjaaa7RMg4vXGM=
Subject key identifier: 1A:DC:74:BE:67:B3:19:C4:EF:34:E2:9C:A4:EC:AC:8C:54:F1:9F:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D62A59EA9C611F0AE0FED78DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 12:55:35 +0000
ROA not before: Wed 15 Oct 2025 12:55:30 +0000
ROA not after: Tue 25 Nov 2025 12:55:30 +0000
asID: 401615
IP address blocks: 156.231.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98494 (0x180be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 12:55:30 2025 GMT
Not After : Nov 25 12:55:30 2025 GMT
Subject: CN=68ef99c7-9b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:98:f8:23:2f:56:06:98:19:e6:f9:40:d0:
7c:90:1e:0d:d0:fb:0c:26:6f:da:63:43:a6:b0:9b:
1e:80:fd:36:11:f4:a2:64:a4:d6:85:dd:ef:39:39:
4e:4e:55:fa:22:c0:7c:1d:ce:7b:68:78:4a:1d:57:
5f:b6:dc:11:d0:28:75:b3:b8:38:97:5f:06:e0:f2:
f7:75:f1:96:f8:74:ff:e5:2a:8a:ee:ef:b8:6d:59:
90:51:f5:61:10:0a:56:4e:2d:6c:cb:95:6f:99:53:
b0:f5:c8:0d:cf:43:71:96:21:c8:7c:ae:1f:45:d6:
c4:f6:07:ab:1f:b7:6f:e6:cf:3b:6c:c7:de:6b:ba:
11:97:c6:b0:43:1d:c4:35:4f:f6:d2:f2:e7:47:2a:
ea:b3:8f:30:98:23:b4:34:f7:9b:d2:97:ee:c6:02:
94:7f:38:d4:0c:33:8b:c2:f6:2d:d2:4b:97:31:1d:
fb:e5:ba:67:c3:02:67:62:a5:9a:72:61:4e:1d:25:
d2:93:ed:9e:e5:99:63:db:62:dd:10:53:63:b8:17:
7f:68:e7:ca:95:64:dc:e0:5d:08:69:7d:65:22:33:
ff:c3:49:0e:14:56:b9:29:ec:30:9e:39:5c:03:91:
93:d2:2e:dd:82:4e:4e:04:4d:c3:b0:fc:31:a2:29:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:74:BE:67:B3:19:C4:EF:34:E2:9C:A4:EC:AC:8C:54:F1:9F:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D62A59EA9C611F0AE0FED78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/23
Signature Algorithm: sha256WithRSAEncryption
46:19:4c:bf:f6:cf:6f:a1:1b:a1:14:5a:97:a2:70:30:05:2a:
2b:b4:6c:b4:72:70:9d:12:27:64:89:00:0f:ff:b2:6d:12:42:
b5:fd:ab:c4:db:9c:fd:2d:b2:d5:49:37:5b:8a:4b:79:07:83:
1b:dc:50:d3:70:cc:7d:62:5e:72:8f:45:4d:97:d2:c6:74:2c:
9e:2b:f6:19:83:a2:9d:ea:28:2b:3e:59:c2:2b:05:62:7a:da:
71:4a:a0:77:88:80:8a:21:c4:56:37:76:cf:6b:d6:22:e8:43:
93:ae:ef:de:23:24:42:05:6a:35:a8:76:21:fd:64:14:a5:22:
1e:06:40:c4:90:d4:63:0c:02:a0:46:b3:30:79:77:08:67:6c:
42:51:e8:84:da:12:67:18:16:45:98:77:af:bc:98:d9:2d:2f:
04:ea:65:f9:4a:f6:dd:7c:2e:2d:4b:94:aa:a2:6c:8a:34:cf:
0d:87:49:7a:f6:19:b6:9b:43:42:42:b1:4b:68:fb:01:88:3b:
cc:75:a3:03:e6:0c:c1:73:b3:82:a1:2f:ec:1f:5c:b1:93:49:
61:54:a9:07:a8:88:7a:32:9b:d8:8d:f8:95:ef:52:71:3b:c4:
cd:11:8c:f3:3c:f5:db:78:db:7c:77:27:ae:7e:5d:34:b0:01:
1f:25:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:06:58 2025 by rpki-client