Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE90C70993111F0A5338594DAE4EC9C.roa
File: DCE90C70993111F0A5338594DAE4EC9C.roa (raw, json)
Hash identifier: p+t41JA04pmOy3kIOGAYR/4NeSyFPDiTtKmu0p9b6Cs=
Subject key identifier: 44:CF:2F:D4:47:9C:EF:D9:CF:AF:66:77:F8:53:F8:82:7D:A1:53:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE90C70993111F0A5338594DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 10:33:09 +0000
ROA not before: Wed 24 Sep 2025 10:33:04 +0000
ROA not after: Fri 24 Oct 2025 10:33:04 +0000
asID: 214413
IP address blocks: 156.239.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97445 (0x17ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 10:33:04 2025 GMT
Not After : Oct 24 10:33:04 2025 GMT
Subject: CN=68d3c8e5-b6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:11:71:86:cf:47:4e:3a:2c:38:8f:a9:ad:ee:
45:cc:15:ce:18:c1:2e:e1:34:ed:18:63:d1:3d:df:
78:51:37:1d:69:45:13:66:a8:a7:fd:5e:76:2e:fd:
95:70:eb:57:b3:62:87:d2:59:68:9f:de:22:04:dd:
d2:4e:0c:9a:14:e6:06:94:ec:aa:ef:93:4b:2c:0f:
8f:34:fc:c3:3a:af:93:33:80:d2:1a:ee:31:d9:d1:
fe:4a:c2:a4:e6:d8:36:fa:03:6d:18:04:81:79:61:
b2:8d:da:2a:95:6f:ee:f7:e8:9b:ae:3e:a8:b8:62:
eb:f3:5b:2a:f6:a7:e7:7d:0c:ad:b5:fd:28:0a:92:
d8:0c:6d:90:fe:9c:78:7e:08:9d:39:03:ef:a7:c8:
1e:32:ed:a1:be:45:80:c5:1b:53:96:3f:6c:b1:73:
ce:de:e3:fb:09:73:c6:67:ea:8e:f5:51:02:70:64:
d6:ea:bc:02:59:e4:04:12:e2:a3:ab:ce:0a:ed:3e:
56:85:dc:e1:de:96:f3:24:d5:47:b1:4b:dc:da:4a:
6a:d3:6d:51:c5:4b:7d:02:4d:84:b5:d5:e9:6a:4a:
c7:b4:b3:ed:ec:0d:ad:a5:c6:52:ff:ae:5d:df:dc:
7f:91:63:78:db:34:0f:91:20:16:81:c5:a5:de:af:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CF:2F:D4:47:9C:EF:D9:CF:AF:66:77:F8:53:F8:82:7D:A1:53:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE90C70993111F0A5338594DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:30:84:ca:45:eb:d7:b1:62:6e:6b:2b:9b:d0:c0:a1:8c:d2:
58:aa:3d:a9:b2:da:2a:04:98:85:e1:61:d9:9c:1c:fe:c3:88:
d0:02:76:e3:6a:17:61:69:3c:cf:8c:32:2b:c1:14:24:69:6f:
36:47:26:73:a1:8f:24:af:f2:3e:db:a1:b6:23:4a:10:e0:c5:
f9:43:c6:f9:43:b2:a6:f8:0c:84:51:5e:26:c0:69:f2:d4:0d:
b1:93:81:ae:aa:af:00:42:f2:9c:e6:8b:0e:69:14:52:aa:8a:
d5:a4:eb:27:74:5e:bf:37:9b:f1:cf:55:e5:c6:d2:db:11:65:
03:e1:7f:da:ec:f7:c6:95:a5:f5:05:a0:61:4d:5a:06:f9:41:
2c:0b:30:a0:aa:b1:9b:87:5c:d9:79:6b:79:a9:dc:91:b7:84:
fb:1a:00:31:e0:c1:bd:a2:34:a2:ff:5f:33:0c:d9:5e:8d:a8:
e1:2c:03:f8:80:e2:13:6b:78:b5:42:35:fd:21:18:d8:97:84:
45:07:2f:aa:90:28:bc:d3:41:88:57:02:0d:09:3c:6c:25:6e:
8f:5d:ac:1a:52:05:05:03:d9:ce:4f:7a:a2:4b:60:5b:77:71:
f5:f3:c2:34:ca:2e:b8:5a:f1:91:9d:a8:57:50:1f:21:eb:88:
9c:84:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:34 2025 by rpki-client