Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB318984A28C11F0B6B4B8C3DAE4EC9C.roa
File: DB318984A28C11F0B6B4B8C3DAE4EC9C.roa (raw, json)
Hash identifier: FOeTkG2a45iRkneIOggCbm95UgCm25/AR29VN7A9LL8=
Subject key identifier: 75:A3:09:F8:B8:5E:79:BF:DA:AE:D0:59:9D:15:64:5D:3B:8E:22:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB318984A28C11F0B6B4B8C3DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:17:11 +0000
ROA not before: Mon 06 Oct 2025 08:17:01 +0000
ROA not after: Mon 10 Nov 2025 08:17:01 +0000
asID: 395793
IP address blocks: 156.225.2.0/23 maxlen: 24
156.225.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98026 (0x17eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:17:01 2025 GMT
Not After : Nov 10 08:17:01 2025 GMT
Subject: CN=68e37b07-021c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:e3:58:9c:18:d7:31:70:46:6d:98:92:ff:
00:52:79:23:b1:fb:8f:0c:bf:02:a8:f0:6a:ab:32:
bd:e5:6a:48:c9:29:ad:c1:cd:83:5f:3b:00:a3:e8:
55:aa:62:21:e4:e3:fd:b9:06:93:76:60:98:9d:6b:
7f:67:fe:0e:08:9c:4f:b9:9b:5b:e1:ca:84:1b:ce:
ab:8e:23:f7:6a:14:a7:b0:17:88:81:24:9c:1a:3b:
29:21:87:6f:d6:d5:f1:b4:1d:2d:7e:ea:db:a9:a5:
8d:83:88:9e:5c:f6:7b:b2:2b:f5:79:1c:a0:31:e5:
7c:3b:bd:c7:fb:c4:85:af:9f:38:3e:a9:d7:0f:0a:
8f:35:95:48:8c:70:a2:e2:68:0c:25:c2:26:45:b5:
fb:7a:f8:25:4c:bb:f2:cc:e2:be:8c:f1:db:eb:46:
c4:b2:c9:51:0f:ed:4f:35:07:9e:c4:37:35:8c:d8:
9d:a0:8a:b8:7d:c4:bf:f1:3e:67:c3:56:9a:f0:ec:
78:02:14:30:c7:1b:9d:f4:2b:9e:16:d2:b1:f1:93:
36:0f:1c:d4:4c:72:1c:ea:8d:19:28:87:cd:46:a1:
ee:b5:7f:b4:b3:8c:03:7e:19:16:78:65:1f:85:34:
28:a9:fd:ec:80:01:e4:2c:a9:29:cd:27:b4:c6:fd:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A3:09:F8:B8:5E:79:BF:DA:AE:D0:59:9D:15:64:5D:3B:8E:22:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB318984A28C11F0B6B4B8C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/23
156.225.50.0/23
Signature Algorithm: sha256WithRSAEncryption
87:af:61:95:29:a8:21:02:6f:52:99:f8:e9:c3:3f:49:8f:9d:
6c:06:55:57:00:8d:15:07:88:9e:69:9c:7a:55:92:51:23:d8:
f1:2b:e0:36:5b:5d:18:72:62:de:f9:c1:e9:ca:42:58:0e:4b:
f5:d5:41:5f:6d:f6:f9:fa:6f:90:0c:a6:d0:ea:91:16:73:c6:
98:29:7e:c3:20:58:65:b2:97:27:ed:f1:56:1b:92:fd:8f:0d:
06:be:e2:fe:d0:99:f8:fe:6b:42:e8:bb:76:13:83:b4:05:8a:
cc:60:94:b5:0b:07:2a:1a:8f:c6:0c:e7:ca:a7:f7:df:f7:56:
b5:1e:b7:c7:d8:a0:4d:9c:67:dc:98:bf:a2:f1:0d:61:71:32:
8c:e2:d8:77:12:c7:71:48:6c:de:fb:f9:61:23:61:00:06:e1:
83:9e:7e:fc:76:33:4d:ea:2a:c9:69:dc:b5:97:6c:34:6b:24:
08:29:a7:40:da:37:36:cc:fd:4e:b9:dc:ad:49:ad:e7:9a:2a:
b9:e6:b9:8b:c6:11:a8:77:55:3e:0d:88:c7:fa:47:b3:bc:dd:
3e:03:75:50:d8:57:a3:16:ca:d3:c6:d0:99:87:d3:51:d4:d0:
e0:1c:ea:00:5b:33:5e:2f:01:92:e4:a3:9d:86:52:e9:75:be:
13:41:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:41 2025 by rpki-client