Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D90CAAC94B511F0966CBC89DAE4EC9C.roa
File: 4D90CAAC94B511F0966CBC89DAE4EC9C.roa (raw, json)
Hash identifier: k24FrFjVNwiMJdM2S7qhcwOCmo4kgD7G8m6TY+kWyQE=
Subject key identifier: 0A:A0:C9:B3:2E:A0:38:1D:A9:5F:DC:AE:45:10:A9:DB:A1:0C:DA:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D90CAAC94B511F0966CBC89DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 17:31:26 +0000
ROA not before: Thu 18 Sep 2025 17:31:22 +0000
ROA not after: Mon 27 Oct 2025 17:31:22 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97310 (0x17c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 17:31:22 2025 GMT
Not After : Oct 27 17:31:22 2025 GMT
Subject: CN=68cc41ee-c7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:11:05:87:41:51:1f:fa:f5:f1:83:7a:a4:
7d:3c:3f:bd:8c:61:76:32:9d:f5:9c:88:5a:25:e3:
f5:3c:78:6f:65:28:55:ee:5a:6c:09:f7:63:e1:a7:
52:20:da:bc:fd:0c:99:bf:da:aa:dc:ff:90:a9:46:
88:85:8c:22:79:52:33:8e:f2:52:74:07:52:93:c9:
71:8f:ed:56:bc:cf:af:c3:3c:7a:88:af:8a:87:c5:
a2:19:01:25:69:0a:68:2f:18:3d:63:d4:24:45:48:
56:2c:69:b1:56:29:28:5d:d0:12:a4:e7:56:21:ca:
35:a8:2d:75:5d:31:4d:39:0f:9d:02:4d:14:9b:a7:
23:35:a6:87:81:61:3b:54:c7:13:36:b6:d0:8d:a4:
87:b6:98:14:01:3f:30:a8:e2:86:89:7e:b8:28:6a:
35:b5:70:8f:f3:0f:95:c5:1a:66:85:b2:e5:a2:84:
21:10:a3:90:4c:fc:8a:18:f2:3c:67:5e:39:fb:f5:
14:24:a6:f1:ba:50:a7:d4:ce:00:1a:a7:e8:9c:03:
e2:a8:eb:2b:2b:2e:cf:a2:08:3f:27:00:8e:b4:eb:
5b:cf:2d:30:ac:3e:44:fa:7e:a2:a2:62:e3:3d:fd:
09:06:86:67:e7:64:c1:0a:97:ba:21:f1:a4:d2:92:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A0:C9:B3:2E:A0:38:1D:A9:5F:DC:AE:45:10:A9:DB:A1:0C:DA:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D90CAAC94B511F0966CBC89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
57:36:6d:66:19:50:9c:a5:85:12:d2:af:f5:f5:a1:9b:ab:6b:
d9:a3:0c:c2:c0:26:4b:f7:82:d1:d5:79:95:7e:2d:bb:ca:86:
5b:02:f3:e3:af:d6:c3:8e:ac:1b:19:2b:38:52:ae:7e:9a:fa:
b7:c1:bf:35:c4:a9:f1:b1:ba:68:55:b1:73:02:27:5b:8a:44:
5f:d6:0c:c5:7d:79:77:82:e9:5d:47:85:5d:99:fa:a8:81:4e:
f1:c9:0c:df:9f:e8:4f:71:bd:72:ba:03:50:dc:24:15:88:70:
38:ab:09:84:02:2c:39:d5:f5:ec:e0:df:9b:32:97:fa:36:7c:
da:b7:35:b8:38:18:78:b8:b0:bd:95:f0:b1:5d:fb:05:1d:7c:
29:3b:85:81:5e:53:17:0b:df:6b:89:b3:be:a3:a7:24:ba:f7:
2d:5f:17:81:2a:bc:42:31:fc:8b:b8:43:a3:0d:62:9b:46:d5:
90:17:5a:18:ad:99:b6:15:87:54:1b:33:fe:dc:ab:af:e9:dd:
ae:91:9c:93:eb:21:96:93:aa:2b:49:68:a9:3e:fe:9e:cd:8b:
98:d1:8b:7c:60:27:3a:10:06:42:b7:97:06:0a:84:f9:67:20:
f3:3f:d9:56:96:ad:fd:fa:bd:9d:27:fd:ba:62:60:35:a9:6d:
b2:80:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:28 2025 by rpki-client