Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C9F583EA99611F0A9B777CFDAE4EC9C.roa
File: 4C9F583EA99611F0A9B777CFDAE4EC9C.roa (raw, json)
Hash identifier: MprVhUat7sXW/u58bffWr/a7bvgAkMCF9jMrPx0CeUQ=
Subject key identifier: 8D:12:E9:37:DD:BB:43:47:C2:7A:8D:B8:7C:5E:F6:57:8D:CB:3E:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018082
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C9F583EA99611F0A9B777CFDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 07:12:25 +0000
ROA not before: Wed 15 Oct 2025 07:12:20 +0000
ROA not after: Mon 20 Oct 2025 07:12:20 +0000
asID: 3561
IP address blocks: 156.248.88.0/22 maxlen: 24
156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 07:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98434 (0x18082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 07:12:20 2025 GMT
Not After : Oct 20 07:12:20 2025 GMT
Subject: CN=68ef4959-c75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:32:4e:ac:15:ca:6d:32:7e:b2:20:d7:98:
78:0f:05:81:85:b1:ec:72:fa:4c:46:b0:52:d0:f6:
6f:a8:95:27:13:fc:b6:6a:5d:37:80:b8:45:67:70:
e8:25:6c:59:9a:4d:10:13:85:59:6a:d9:6b:7a:76:
8e:40:42:91:86:da:03:d3:11:3e:11:7f:a5:8d:ec:
3f:36:72:66:98:53:04:1f:be:32:7b:e5:ca:03:2b:
57:b9:e5:95:9f:20:6b:c0:d0:cf:70:69:92:93:4c:
b1:52:3d:37:d7:24:03:12:78:04:ce:6d:b4:2b:b2:
58:83:8a:77:8e:66:a0:5c:75:10:33:a5:b8:0a:e3:
f2:41:cd:da:40:90:e6:28:60:05:8a:61:ff:a3:58:
05:83:c1:13:ae:54:4f:7a:61:d2:f7:66:06:1a:19:
14:fd:13:e6:e6:97:9d:95:f0:8e:24:52:27:b8:1e:
3b:c4:09:73:30:8d:f4:d3:d3:39:ac:ed:86:2b:55:
7b:d0:b2:d0:83:8a:ec:b6:0a:64:06:1f:f5:c4:d9:
33:1c:b4:29:60:d8:6f:89:08:b0:b0:b2:55:cf:1e:
d4:b4:9e:38:f9:a4:55:31:ca:da:11:86:69:ec:32:
bc:49:72:8b:ab:1e:40:ba:5d:36:14:82:81:c9:e5:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:12:E9:37:DD:BB:43:47:C2:7A:8D:B8:7C:5E:F6:57:8D:CB:3E:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C9F583EA99611F0A9B777CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.88.0/22
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c1:17:b6:d8:ab:91:05:de:d1:6c:0e:e9:b0:5d:4e:1f:6d:
0b:09:ce:72:6c:83:d9:3a:d5:10:71:9f:82:27:78:58:52:11:
ba:7e:f9:5e:92:b0:92:a3:ed:95:6a:42:dd:6f:af:f5:9a:c5:
67:7a:ba:ae:bd:5c:79:5e:c0:9f:c6:da:2a:98:39:a0:27:ea:
6f:c7:97:3b:cd:2e:64:b7:7e:59:f4:04:dc:26:7e:e3:7c:ce:
56:b5:fd:ac:f8:bb:d0:a8:08:06:09:a5:8a:26:d2:79:ab:78:
a1:b5:56:fa:93:49:e8:a7:78:14:93:65:fd:a0:fb:44:42:29:
1e:59:97:eb:b9:7b:a4:6d:88:d3:0a:73:83:db:4f:a0:6b:7e:
4b:79:b4:ad:1e:28:0e:df:bd:26:42:79:12:83:15:70:31:08:
67:f9:5a:3c:f3:a9:a6:c1:a9:b7:8a:0c:57:f5:62:e8:9d:ac:
2f:38:2e:c7:fd:40:d8:5d:6b:04:68:be:fa:7d:0b:01:1d:fb:
7c:04:ca:8d:87:91:3f:be:28:06:a3:22:34:69:9e:c1:b4:f0:
76:d4:06:c7:27:34:19:56:d8:f1:91:6b:2e:86:85:71:68:fc:
7c:04:88:a2:39:af:1d:4c:18:e5:92:f5:16:06:4e:d0:81:0a:
47:07:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:09 2025 by rpki-client