Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ED549758BA0811F0BC0FBEAFDAE4EC9C.roa
File: ED549758BA0811F0BC0FBEAFDAE4EC9C.roa (raw, json)
Hash identifier: DP73kWWoVACowJa0GxjxqQnFmEUzhKKcZSRzs58aqK4=
Subject key identifier: F2:99:CC:16:F1:4D:25:04:68:5D:E8:98:34:BA:1F:5A:F0:80:02:14
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0D85
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ED549758BA0811F0BC0FBEAFDAE4EC9C.roa
Signing time: Wed 05 Nov 2025 05:33:16 +0000
ROA not before: Wed 05 Nov 2025 05:33:11 +0000
ROA not after: Mon 05 Nov 2035 05:33:11 +0000
asID: 214036
IP address blocks: 192.142.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3461 (0xd85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 5 05:33:11 2025 GMT
Not After : Nov 5 05:33:11 2035 GMT
Subject: CN=690ae19b-e85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:0a:17:4d:61:cc:03:54:6a:1f:37:16:c9:
63:38:f1:03:3c:1e:d3:3e:4f:d3:83:08:bf:d2:26:
84:c7:ff:53:71:bb:0c:95:2d:d0:6c:19:35:9c:c0:
82:06:71:4d:6b:be:76:68:44:51:4f:fa:6f:29:e4:
dc:ce:ee:c0:22:b1:7d:5d:d7:9a:c7:c2:22:88:9c:
b2:4a:24:62:31:94:d2:52:a3:4f:fa:0f:5b:5c:63:
cd:18:18:84:10:a9:69:98:2b:b4:6f:9a:04:d8:ba:
06:ff:37:8e:49:aa:7b:a4:2d:53:be:e6:fd:c4:d9:
96:14:76:5c:5e:48:bc:50:ce:fd:3d:ac:1a:c2:2a:
e8:5a:2f:4e:9a:45:eb:71:09:3f:1d:ff:a4:59:06:
aa:19:19:3e:8b:8e:3d:59:dd:a1:2e:5c:41:91:c6:
22:1e:fa:3d:73:db:84:d2:c6:21:bf:e7:d4:ee:1d:
fa:07:a8:3f:e4:c4:e5:bb:90:db:1d:fc:41:ed:f9:
ef:05:fd:56:b3:9c:b4:63:af:2d:94:cb:b9:dd:a2:
f8:17:73:c8:75:b1:98:e9:df:39:86:f4:4d:9c:21:
8f:cc:37:48:b4:0e:ab:d1:1f:6a:5d:12:d2:61:39:
e2:cf:e2:66:ec:9e:d4:71:ec:d1:9d:09:7a:f0:be:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:CC:16:F1:4D:25:04:68:5D:E8:98:34:BA:1F:5A:F0:80:02:14
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ED549758BA0811F0BC0FBEAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5b:4e:ea:79:28:cb:b9:9a:29:9d:1f:2e:af:64:78:8c:dc:
b2:d7:3d:77:ff:7e:12:34:00:28:6f:14:e3:91:a9:26:f2:bc:
af:76:38:fc:29:9d:9b:f2:4e:17:bd:eb:5e:35:8f:1c:40:19:
7c:7d:40:cd:d1:ba:cb:30:57:26:fa:30:1d:9c:74:24:3a:1c:
74:30:48:c4:64:19:b3:04:53:5a:5e:b3:5d:e7:76:b9:df:88:
e7:2d:bf:b5:f8:e2:77:b2:46:25:67:cf:74:dc:f0:23:f2:c7:
b6:74:97:72:dc:c9:37:cd:cc:c3:00:b3:b4:96:5f:63:41:df:
87:fb:23:09:0e:a0:9d:75:68:38:04:95:93:90:29:1e:eb:1c:
55:91:2a:7a:f9:f8:63:87:28:25:af:12:f5:b9:b9:19:95:97:
bb:3d:20:dd:60:ee:b8:4b:bc:68:8e:42:8a:55:a7:0e:06:68:
9b:2d:e3:6e:56:f1:01:37:5b:92:10:e6:3e:1a:f4:ed:61:d7:
cc:8a:39:dd:ae:7f:22:34:c9:ff:25:c1:73:9b:d2:cb:c9:85:
90:59:f0:8b:d3:10:7e:32:bb:f0:cc:3d:71:21:32:b8:bd:49:
ae:d5:18:db:12:6c:9a:f1:55:27:fc:3e:43:13:3a:5f:08:5a:
59:3a:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:33 2025 by rpki-client