Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF519BBCA4E011F09CBBE3D9DAE4EC9C.roa
File: CF519BBCA4E011F09CBBE3D9DAE4EC9C.roa (raw, json)
Hash identifier: fnsGwhSLGa2A4wQzn70UJn8TcxJFWAZyFWkkWw28v0A=
Subject key identifier: 01:69:E0:A9:24:05:89:9A:5B:C4:B3:94:B0:B8:B3:97:51:9A:4A:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF519BBCA4E011F09CBBE3D9DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 07:23:11 +0000
ROA not before: Thu 09 Oct 2025 07:23:05 +0000
ROA not after: Wed 05 Nov 2025 07:23:05 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98211 (0x17fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 07:23:05 2025 GMT
Not After : Nov 5 07:23:05 2025 GMT
Subject: CN=68e762df-baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:0c:4d:e0:7d:d2:c0:d8:f3:56:a0:80:e8:
32:ac:ff:60:88:fb:40:d9:f5:c2:b1:b5:d9:69:83:
c1:a9:2a:5f:02:a5:4a:8a:f1:5a:d4:75:45:59:44:
5e:83:46:55:5c:cd:15:10:dc:ba:ad:f2:5f:2b:03:
89:98:c8:0b:63:63:1d:5b:31:a1:5b:0c:33:da:63:
c9:e0:5a:cd:d8:7d:74:f9:7f:cf:3d:03:47:d1:c7:
92:5c:b2:b4:38:85:b2:b1:41:be:6c:a3:dc:5b:38:
b8:24:e3:53:d0:03:19:49:f3:6f:67:a8:3f:20:38:
cd:4c:8c:72:b6:ae:63:ea:3b:a9:bf:ae:1c:e5:40:
2b:7a:b7:cc:5a:c9:aa:7f:a4:c6:11:59:d4:77:31:
24:6e:8e:35:a9:77:97:95:b9:e0:f6:73:26:82:15:
20:19:02:66:99:ae:97:2d:3a:5b:8b:0c:63:c1:e1:
59:12:4d:f7:8e:6d:be:7e:28:4c:ce:3f:5a:39:07:
50:60:b6:b2:37:a5:71:30:ee:d6:db:ad:e0:95:3a:
81:61:f0:43:39:58:95:12:7b:ae:fe:61:ea:9a:4f:
77:7e:25:f3:c0:4d:7b:0c:5a:df:9c:78:14:33:d3:
4d:51:f5:e5:fc:a6:b3:1c:0d:01:9c:5c:2e:a4:fa:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:E0:A9:24:05:89:9A:5B:C4:B3:94:B0:B8:B3:97:51:9A:4A:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF519BBCA4E011F09CBBE3D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9d:64:9d:69:13:01:cf:4c:65:ba:8f:2c:f6:37:57:2a:1e:80:
c6:32:6a:62:1f:e3:3a:87:16:a8:a6:48:43:e1:7b:aa:94:4c:
49:fc:d6:6e:95:31:63:e4:3e:de:fb:d5:3c:3a:81:86:de:ee:
70:8b:a5:85:d3:67:28:98:d3:7b:6f:fe:8b:0a:39:7c:87:9e:
2d:72:03:4e:bc:90:bb:7e:1f:bf:ef:30:39:c0:cd:bb:a4:f7:
ce:01:ef:2b:33:3e:24:61:2d:42:3a:f2:0a:f7:d9:82:cb:5a:
ed:86:1e:34:e4:fc:cf:bc:9e:87:58:51:65:fe:12:77:61:46:
3c:d3:0b:ff:86:86:bc:4a:15:5e:d3:72:0e:2e:3c:9a:cc:21:
87:6f:5d:1a:bb:df:45:2b:91:6d:eb:fc:c7:a1:92:0a:e7:c5:
94:82:53:a2:e4:b0:c6:6c:44:74:f2:e9:4b:ef:ff:36:29:39:
47:95:ef:00:d3:0b:4e:48:9c:86:4e:c3:65:4e:18:eb:91:90:
84:0d:8c:1e:a0:c7:6a:15:76:31:63:b1:44:7e:89:21:ff:ac:
d1:d3:ea:58:db:52:a8:37:8e:06:26:10:e4:c3:e7:d2:eb:b3:
a6:87:53:a2:52:bf:b7:94:c1:b4:5a:31:7c:ba:bb:6b:11:d6:
05:45:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:52 2025 by rpki-client