Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D00AAC9AB011F0967EEDC8DAE4EC9C.roa
File: 40D00AAC9AB011F0967EEDC8DAE4EC9C.roa (raw, json)
Hash identifier: 8eMYRAGxuK3+PXcRUIcBL8pYmuX1ltocC9omhtOegRg=
Subject key identifier: 86:03:3C:19:4D:CA:90:9E:43:12:0B:13:76:56:3D:19:FA:AA:C2:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D00AAC9AB011F0967EEDC8DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 08:10:24 +0000
ROA not before: Fri 26 Sep 2025 08:10:19 +0000
ROA not after: Sat 01 Nov 2025 08:10:19 +0000
asID: 18301
IP address blocks: 156.225.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97633 (0x17d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 08:10:19 2025 GMT
Not After : Nov 1 08:10:19 2025 GMT
Subject: CN=68d64a70-53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:26:e6:65:98:18:a6:fa:63:8e:1b:06:c1:
b2:b0:fd:60:84:04:cd:d9:8b:46:1d:5a:04:7e:27:
b3:59:51:f8:9e:85:b1:2d:3d:8c:1f:87:37:4d:96:
f3:5e:58:dd:b4:5b:f8:c2:6a:85:26:9d:fb:75:13:
19:b3:4e:67:68:f2:9e:2a:8a:77:e6:c7:ae:5d:be:
b1:4c:63:0f:e6:2f:a1:cf:c8:d4:e7:63:e3:5e:00:
b6:c4:a6:0e:45:ff:fd:71:c5:80:ec:8a:6b:92:89:
f1:de:40:66:f6:b5:cb:a0:92:8c:6c:db:89:9b:bc:
0c:94:93:be:6b:a6:0a:d0:22:8c:d5:fb:e3:b6:d2:
b0:0e:7f:9e:d7:5a:92:12:c0:bc:85:f2:0c:df:84:
28:72:7b:f3:e0:fe:26:62:f7:ea:9c:11:7b:51:29:
3d:1c:fe:48:68:2c:3b:32:3e:83:41:71:c9:99:8f:
23:6d:f3:22:3e:0f:b4:b2:15:54:7d:d2:ed:f1:40:
31:7b:4e:d8:60:4e:66:be:e2:2d:88:ad:47:c4:45:
02:49:33:94:4e:be:4b:9e:3b:cc:e4:ed:1a:9d:61:
f4:4b:49:2f:f6:6e:a9:78:e0:9e:69:b0:69:87:5c:
ee:f6:da:ed:5f:7a:44:30:7e:03:c3:a9:2b:df:02:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:3C:19:4D:CA:90:9E:43:12:0B:13:76:56:3D:19:FA:AA:C2:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40D00AAC9AB011F0967EEDC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.47.0/24
Signature Algorithm: sha256WithRSAEncryption
28:08:b8:29:75:1a:82:63:3b:ec:09:a5:60:8e:2a:5d:f5:cf:
80:d2:2b:92:a4:a9:06:ff:e3:b5:7c:2c:31:43:fe:69:7e:a2:
50:f2:9d:7c:eb:1c:e2:48:e0:1e:3f:ce:6a:a5:36:a6:be:2b:
a9:3b:4f:68:c8:77:d6:0d:b2:06:45:b6:67:21:23:ad:c9:21:
01:fb:c4:23:93:f6:1e:bf:f5:b3:19:eb:b2:3a:b0:6b:e0:21:
1a:0d:2f:ba:dc:89:1f:94:81:14:39:b3:90:6d:32:38:83:00:
39:32:b3:38:dc:d9:f8:a2:ee:b5:75:e1:72:dd:53:1a:8e:f5:
f9:70:df:09:bc:1e:1f:5b:9c:ad:e1:73:4e:80:51:de:07:b6:
45:77:67:a1:f4:2d:f1:15:f4:5c:9f:9d:6c:14:b7:0a:2a:74:
bb:e8:0d:36:7c:0b:3c:8c:2d:e0:f0:8f:f7:e7:cb:e1:f0:55:
17:b8:fb:c6:47:e4:14:28:d3:fa:6d:58:d2:01:58:56:d0:83:
bd:ee:c8:24:de:ac:2b:cd:58:29:ef:2f:80:34:ed:3a:3e:65:
e6:e3:92:56:5b:f5:ab:9a:6b:de:05:a8:00:d8:14:20:26:93:
41:a0:34:39:66:64:0f:34:a6:b5:b0:f8:04:de:0c:86:b0:3c:
53:c0:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:26 2025 by rpki-client