Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C14CBD0993611F09C67DEAEDAE4EC9C.roa
File: 4C14CBD0993611F09C67DEAEDAE4EC9C.roa (raw, json)
Hash identifier: ZTm9IVsjNXfgqDW0TLTyYkd1RYBaWRwG/2fmEcnORPw=
Subject key identifier: A4:9C:F2:2A:FC:84:03:A8:F5:10:F3:7B:86:E9:6B:A7:94:ED:2F:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C14CBD0993611F09C67DEAEDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 11:04:54 +0000
ROA not before: Wed 24 Sep 2025 11:04:49 +0000
ROA not after: Sun 26 Oct 2025 11:04:49 +0000
asID: 140869
IP address blocks: 156.225.80.0/24 maxlen: 24
156.225.81.0/24 maxlen: 24
156.225.82.0/24 maxlen: 24
156.225.83.0/24 maxlen: 24
156.225.84.0/24 maxlen: 24
156.225.85.0/24 maxlen: 24
156.225.86.0/24 maxlen: 24
156.225.87.0/24 maxlen: 24
156.225.88.0/24 maxlen: 24
156.225.89.0/24 maxlen: 24
156.225.90.0/24 maxlen: 24
156.225.91.0/24 maxlen: 24
156.225.92.0/24 maxlen: 24
156.225.93.0/24 maxlen: 24
156.225.94.0/24 maxlen: 24
156.225.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97455 (0x17caf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 11:04:49 2025 GMT
Not After : Oct 26 11:04:49 2025 GMT
Subject: CN=68d3d055-6c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:91:9a:7c:c6:6e:42:a5:86:a9:2a:4e:28:
d9:46:e2:ed:bb:55:fe:78:63:54:5b:03:85:f1:cf:
34:cd:ba:49:cb:c1:6d:ee:1e:db:83:46:c8:13:89:
03:c9:c3:15:7b:bf:a5:22:27:46:da:bf:1a:26:50:
9e:52:c0:ca:ae:06:75:e4:40:3d:73:d0:25:77:dc:
6e:af:63:80:2d:e4:5c:e4:57:15:23:e1:f9:17:e4:
da:65:21:79:7e:f4:e9:2f:49:33:e5:2a:04:29:a1:
21:81:ae:34:f7:14:b7:d3:16:eb:14:e5:ce:39:3a:
f9:cb:5a:9c:bd:61:55:62:4b:74:f7:31:0f:18:62:
a0:8b:77:71:97:18:2d:fe:d1:22:90:ce:ff:f8:e3:
de:6d:59:ce:47:6b:cf:06:8e:2e:50:37:ab:53:b8:
76:d5:e2:ef:fc:43:87:70:a8:ff:31:a2:47:01:38:
38:db:26:fa:03:22:32:05:34:f0:a7:89:fc:bf:fa:
ea:bc:b7:35:d7:e0:c8:ec:b7:29:c2:a3:68:84:2c:
93:5d:b1:47:71:25:14:45:33:72:48:27:e8:ae:71:
3f:86:59:44:0a:cc:5e:02:93:2d:ac:d2:41:16:34:
4e:0b:bc:45:b3:60:6e:fc:71:29:69:6e:eb:60:b0:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:F2:2A:FC:84:03:A8:F5:10:F3:7B:86:E9:6B:A7:94:ED:2F:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C14CBD0993611F09C67DEAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.80.0/20
Signature Algorithm: sha256WithRSAEncryption
32:4c:fa:13:0e:9b:74:d4:27:a1:aa:a9:9a:db:e2:4c:37:8e:
36:87:a6:ec:ec:e0:71:06:85:01:8b:3c:e0:4c:b2:11:bb:79:
2a:48:c0:3a:35:b8:d7:6f:3a:b6:02:4f:71:db:2c:9a:bc:4d:
1b:a0:04:65:b5:1f:78:25:3c:f8:53:3c:1a:1e:62:ac:b5:1c:
b4:94:5b:11:0f:40:f4:06:19:58:3c:11:ab:aa:27:84:a7:22:
6b:98:7c:14:f6:b6:4c:78:5b:21:76:86:8e:8a:a2:3d:7b:d0:
16:e0:60:4b:25:cf:15:25:41:66:2d:4f:32:93:05:6b:d0:6e:
04:38:94:ca:b1:93:78:56:95:5f:53:df:ef:ee:f9:73:40:26:
43:dd:0c:b1:e0:c9:17:24:ef:77:fe:c4:4a:1a:6a:c2:01:29:
6d:e8:08:5d:7e:00:ef:2a:0e:d9:f0:63:5c:ff:5d:64:d9:65:
23:9b:3e:d4:a0:61:e8:0f:6a:33:4c:67:b4:0a:07:0c:db:0b:
3c:e1:6d:e0:35:fe:ee:b9:16:74:11:d9:e5:9f:35:fa:84:07:
ef:ec:2a:a5:cc:b2:77:56:7b:e9:f4:2b:5a:f6:1e:06:57:c9:
80:e5:a7:b8:71:05:a7:90:9a:70:65:23:53:e6:3b:89:60:4e:
1f:65:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:19 2025 by rpki-client