Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED5C48F49DD411F0AB7E8CA6DAE4EC9C.roa
File: ED5C48F49DD411F0AB7E8CA6DAE4EC9C.roa (raw, json)
Hash identifier: gJZWGJrEBlX7U4k74qIzsQQMHV+3tu4G7WDiqSpx0qM=
Subject key identifier: 79:00:70:F8:3F:1A:60:07:44:DC:77:35:1F:EA:9E:CD:D3:18:8D:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED5C48F49DD411F0AB7E8CA6DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 08:10:29 +0000
ROA not before: Tue 30 Sep 2025 08:10:24 +0000
ROA not after: Sat 01 Nov 2025 08:10:24 +0000
asID: 984
IP address blocks: 156.232.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97823 (0x17e1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 08:10:24 2025 GMT
Not After : Nov 1 08:10:24 2025 GMT
Subject: CN=68db9075-dc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:21:75:f2:45:b0:7b:9e:d3:9d:7c:a5:fb:
72:e4:d9:f1:1b:7d:cc:47:96:60:15:8f:90:7a:72:
3d:60:33:e5:63:e3:39:54:0e:1f:29:22:4a:0b:9e:
14:2d:b5:23:ff:69:28:b6:c8:a9:23:c8:ba:f1:ca:
f9:ca:3b:5c:cf:bc:fa:11:0f:24:ec:7c:43:54:98:
ec:97:32:81:1c:86:dd:b6:47:b6:7c:d9:d0:b5:11:
86:a8:b2:bc:88:f2:e4:cb:b5:1b:fc:e9:9c:94:e8:
e5:46:56:85:8d:dc:35:12:32:5d:f3:8f:34:16:f6:
9a:f7:58:2c:0e:5b:c5:4d:e2:11:37:ee:43:8e:d1:
f9:c9:58:8e:33:e8:a2:bd:9e:6e:be:c3:bf:5f:da:
f5:bf:04:78:48:39:9a:33:de:e2:4b:fc:c1:17:61:
64:e1:80:2d:9a:8f:44:83:4a:de:42:11:e4:3c:10:
37:21:4c:1c:51:65:26:9a:fe:e9:f7:52:fd:2c:1d:
c5:a3:b9:66:16:77:32:71:08:ee:f7:98:0d:c6:ec:
29:65:a4:dd:a6:a1:67:2d:61:7e:3c:65:a9:b8:6d:
f2:72:97:bb:22:70:4d:ea:3b:04:70:f6:58:72:59:
c8:93:11:aa:79:30:bd:00:56:d8:36:c4:c0:22:c5:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:70:F8:3F:1A:60:07:44:DC:77:35:1F:EA:9E:CD:D3:18:8D:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED5C48F49DD411F0AB7E8CA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.32.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a5:aa:0f:93:6b:0f:ab:0f:16:43:80:c1:75:d7:a1:12:9f:
e0:60:c7:b4:54:00:d8:ff:13:6f:33:3d:ca:a3:c0:b6:56:76:
32:00:39:00:99:53:98:54:ac:9b:b0:a7:fd:1a:28:82:ae:d0:
6d:1e:48:26:b0:c8:26:04:45:2b:df:b9:24:f8:9e:c4:2c:0c:
fb:68:86:bd:4f:de:02:e0:68:10:48:34:bd:09:1d:2b:d4:6a:
a8:68:d9:70:d2:ec:eb:17:c0:72:ee:57:22:d4:9a:a7:80:a4:
d6:55:51:68:59:98:6a:f7:be:36:17:19:c7:37:6f:98:67:6a:
1b:94:f5:3b:1a:8c:c6:4a:21:75:04:76:74:89:a0:c5:0a:e1:
1b:dc:6f:06:d7:c5:06:de:1e:df:f6:c8:98:3a:96:fd:d0:9c:
f0:d7:7c:54:cd:47:4d:55:f3:52:45:56:09:b8:0e:e4:a0:a3:
3d:e7:f5:c8:99:b6:c6:01:4b:c6:24:f0:7b:75:44:15:7d:4d:
5a:14:6c:b0:25:9c:30:22:37:d5:e0:d4:3a:5b:7c:e0:5f:f1:
c4:4e:33:3b:22:f2:35:a3:6c:f2:bb:9a:57:01:d4:8e:71:d2:
9d:5d:60:64:96:42:e7:81:9e:73:1f:0b:da:21:85:8d:4e:70:
7e:8a:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:36 2025 by rpki-client