Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F98E41DCA9AE11F08B91E8E2DAE4EC9C.roa
File: F98E41DCA9AE11F08B91E8E2DAE4EC9C.roa (raw, json)
Hash identifier: l/MmCWBhkIOs2TJrfaPey0LGZfV+HhAuTmifaTwHcvo=
Subject key identifier: A0:27:2F:4C:6D:14:26:7B:D7:40:7C:66:08:18:23:39:F8:2E:AD:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F98E41DCA9AE11F08B91E8E2DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:09:03 +0000
ROA not before: Wed 15 Oct 2025 10:08:58 +0000
ROA not after: Thu 20 Nov 2025 10:08:58 +0000
asID: 211265
IP address blocks: 156.231.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98473 (0x180a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 10:08:58 2025 GMT
Not After : Nov 20 10:08:58 2025 GMT
Subject: CN=68ef72bf-d015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:b7:c6:4c:3d:06:ae:cd:49:65:fd:d1:d0:
f5:14:a9:84:aa:e2:f7:ce:3a:08:77:95:5c:82:3c:
81:8e:b6:97:95:f2:5e:4c:29:64:9c:b6:c6:53:b4:
e2:13:7b:5b:70:a4:36:87:c7:08:9e:95:f6:a8:27:
89:56:73:ce:f4:7c:55:21:b2:94:be:69:d7:e6:75:
f7:f5:8e:f6:07:d7:cd:e3:68:86:13:4c:7a:25:b3:
e2:2a:c6:bc:19:6e:0e:8c:13:8a:40:6e:d2:22:cd:
b3:95:84:bb:25:7c:9b:20:9b:e9:94:f8:49:52:99:
fc:b6:b6:cd:52:42:5c:fe:c8:f9:b4:5a:6b:b5:cf:
5e:87:54:a4:86:e7:3b:72:4a:a6:6e:fe:ed:28:b5:
ef:56:37:a7:9e:bc:56:bd:12:13:3f:46:74:02:09:
ef:22:6f:f4:ab:60:cb:51:de:c6:58:2f:bd:de:a0:
df:a1:19:aa:3b:ba:40:45:f6:e6:b1:d9:d3:6c:fe:
17:7e:bc:b7:12:7f:bd:2e:5f:92:4d:5e:8c:3c:9b:
2d:94:a5:50:8b:f1:fe:f9:f5:6d:41:52:d7:07:ed:
74:fe:89:9d:a8:5b:92:84:3e:f9:d8:23:ce:5b:77:
b4:9f:c0:6f:3d:c2:f8:f2:3c:34:57:d5:ef:9f:33:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:2F:4C:6D:14:26:7B:D7:40:7C:66:08:18:23:39:F8:2E:AD:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F98E41DCA9AE11F08B91E8E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.163.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7f:77:9d:97:d8:a6:e2:43:4c:91:df:51:97:bc:2c:2c:90:
01:4c:d1:64:78:1c:ba:48:45:56:96:c7:92:b7:d1:68:5a:ef:
18:e9:57:93:99:76:51:69:0e:64:73:7f:5a:9d:01:c9:a1:22:
d8:fc:43:2a:4f:ca:8d:f5:41:07:8d:6f:f4:09:05:83:ab:ac:
bb:d7:f0:7d:0c:b4:fd:95:75:7f:69:40:a9:56:e6:a6:1e:1e:
3a:ad:f7:23:c1:04:18:fd:94:c6:e4:1e:0d:03:2c:40:78:5a:
9c:d5:ac:0b:b8:aa:66:0c:4f:3a:f5:c6:57:fc:a1:8b:43:01:
bf:76:4c:be:a5:42:28:d7:9d:1d:ed:25:30:d2:a4:23:73:86:
64:57:41:b9:6b:67:2c:0b:11:5a:e2:4f:45:4c:22:fe:7a:12:
53:b6:27:b2:dd:e8:c7:98:a1:09:fb:6f:3e:97:ec:17:e0:3b:
4f:d8:8c:b4:7a:e0:de:01:b6:16:af:74:cd:6c:68:69:07:47:
ef:f9:da:13:7a:18:cf:fd:43:6d:a0:e4:1f:85:5b:94:89:d8:
12:97:5b:fc:8d:a9:40:fd:99:bb:5a:50:8a:a7:43:b1:ed:05:
2b:aa:29:91:f9:09:ad:9d:46:22:d0:b5:ca:08:d7:6b:8c:fb:
df:d6:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:41 2025 by rpki-client