Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB9964C0AB2B11F087995CE0DAE4EC9C.roa
File: EB9964C0AB2B11F087995CE0DAE4EC9C.roa (raw, json)
Hash identifier: zDemEeW1w2jB2mn7nC+v0xaGNO0fzgPu1FliD5qY/Po=
Subject key identifier: 9E:EF:C1:9F:3B:B5:25:D0:9D:11:A8:28:02:D3:00:DC:3A:21:3F:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018159
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB9964C0AB2B11F087995CE0DAE4EC9C.roa
Signing time: Fri 17 Oct 2025 07:35:58 +0000
ROA not before: Fri 17 Oct 2025 07:35:52 +0000
ROA not after: Sat 24 Oct 2026 07:35:52 +0000
asID: 149628
IP address blocks: 156.226.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98649 (0x18159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 17 07:35:52 2025 GMT
Not After : Oct 24 07:35:52 2026 GMT
Subject: CN=68f1f1dd-2d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:89:8b:55:db:4b:07:47:2e:e9:33:f2:01:
f9:a7:3d:c1:c2:9b:b3:40:97:ba:39:f4:8e:ad:5a:
e1:40:0d:27:55:26:fb:b6:62:33:24:54:22:50:50:
3d:f9:95:a9:79:db:14:39:09:e1:0c:0e:d2:b3:ef:
e6:d8:a7:4d:30:78:cc:07:a6:db:b9:9b:a2:e1:7d:
cb:58:0b:a0:25:2f:11:fd:ff:24:ac:ff:bb:9c:b8:
29:a4:e1:58:f8:3e:0d:27:d0:d6:c7:93:fd:0e:56:
1a:24:7d:05:61:76:92:ba:4e:44:ce:df:a5:74:29:
7c:c3:56:8d:f1:cd:bf:3b:37:db:eb:f5:f4:5e:27:
f5:75:2c:ae:b7:ce:86:9d:f7:3b:7b:ce:bf:37:a2:
9f:c8:53:62:2f:50:72:fd:84:65:23:fa:19:2d:76:
bd:28:ac:8c:df:a7:e8:7b:ef:ad:e0:77:3f:ec:33:
7e:40:20:4b:a9:31:de:0b:1d:38:19:0f:92:41:57:
fa:92:8b:70:7a:54:e9:ff:1b:20:52:18:70:e8:e1:
a6:70:1f:a0:b3:b5:87:e3:0b:5f:3b:42:ed:8d:70:
f5:e6:93:fc:e0:f0:1a:17:a8:bc:c9:33:da:f0:05:
84:4c:20:d9:46:5c:e4:4a:5b:61:d7:a0:80:bf:fc:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:C1:9F:3B:B5:25:D0:9D:11:A8:28:02:D3:00:DC:3A:21:3F:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB9964C0AB2B11F087995CE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.6.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a7:ac:39:2b:03:18:20:95:25:80:85:a6:4d:c1:38:65:80:
64:cb:04:51:6d:04:5f:c9:df:43:70:50:e2:2c:99:b5:7a:a9:
16:7e:4c:e0:ce:c7:83:cb:4d:b0:04:c6:a2:11:dc:44:29:81:
64:09:a9:ec:af:a9:ad:41:37:22:d8:46:21:4e:2b:d8:6e:2d:
3d:f7:df:a6:cc:10:41:f7:5e:83:f9:60:f0:ed:21:9f:a3:b6:
be:6d:d2:2e:ab:5a:17:fd:eb:9f:21:fe:d8:24:83:6b:3c:09:
16:14:c8:6e:05:1e:b0:95:a7:05:67:4c:9d:56:00:83:8d:97:
ff:9c:a1:a6:3a:f7:d2:ea:80:09:d4:6c:d3:39:6c:68:49:64:
32:2c:41:a2:f3:32:92:f1:9e:81:40:6f:7c:2c:80:1e:9e:cf:
c3:26:bd:65:21:ab:b5:0c:bf:29:12:6a:ed:99:20:36:b2:c9:
2c:c9:48:5d:b7:7f:06:51:6f:02:ee:2a:b8:04:54:9e:08:7d:
66:0c:2f:67:4a:2b:34:19:84:56:bf:df:ff:9d:5f:91:01:a2:
0c:92:76:85:ca:8e:3f:d0:7a:26:14:a8:97:a7:18:9e:d7:d3:
50:c7:a6:b7:12:d1:03:2b:4e:4b:5f:10:ac:ae:ea:9d:91:a1:
aa:99:72:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:50 2025 by rpki-client