Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B52F39CB89E11F098D0EABDDAE4EC9C.roa
File: 0B52F39CB89E11F098D0EABDDAE4EC9C.roa (raw, json)
Hash identifier: S/uvZH5q1JbLaUKiH04RWJ59Eojbe/d7PiIvwR85sZo=
Subject key identifier: D3:9D:D9:53:41:9E:B3:86:36:B7:9C:0C:F3:CB:05:6A:97:37:2D:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018491
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B52F39CB89E11F098D0EABDDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:15:39 +0000
ROA not before: Mon 03 Nov 2025 10:15:34 +0000
ROA not after: Tue 02 Dec 2025 10:15:34 +0000
asID: 213798
IP address blocks: 156.225.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99473 (0x18491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 10:15:34 2025 GMT
Not After : Dec 2 10:15:34 2025 GMT
Subject: CN=690880ca-a73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:e1:5f:4a:7b:34:6b:ff:3b:d5:e5:49:ca:
24:60:39:aa:c9:5d:1f:e1:52:32:4b:ae:77:a5:ea:
ab:24:3f:7c:b9:5d:ec:4c:cf:e0:4d:19:bb:3e:bf:
27:71:e0:2c:55:9c:70:a3:d0:f4:94:3d:d6:e6:cf:
3f:7a:e2:14:ba:81:9f:40:de:ba:28:68:d0:b9:c0:
af:c1:0d:99:ab:53:7b:23:f8:9e:02:db:09:ef:80:
51:d9:0e:f0:4f:02:45:84:85:0b:d1:95:f0:4a:41:
87:2a:cf:90:bb:ce:3b:02:1f:c7:b4:fe:dd:2e:a4:
bd:76:85:cb:39:28:b7:fc:c3:43:9c:95:65:2c:e3:
e7:31:d2:d4:fb:27:d7:2b:0e:11:72:b5:94:13:a8:
67:59:ba:c5:11:c8:75:28:eb:13:9e:df:5e:e9:6b:
e8:14:b0:87:bf:68:7a:65:a2:bb:cd:7f:60:e2:c8:
46:bd:87:e2:dd:2b:b4:87:2e:6b:b9:23:f5:fb:c9:
87:e5:40:6e:14:9f:e0:b8:95:fe:7a:23:b5:37:58:
f3:df:35:bb:c3:fe:57:c8:24:a6:8b:cc:85:3b:f1:
04:f9:14:59:cb:04:02:99:cb:12:0e:b1:e0:b5:06:
59:3f:7c:9b:f7:4a:c6:ff:9f:6e:f7:4a:c6:a4:3e:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:D9:53:41:9E:B3:86:36:B7:9C:0C:F3:CB:05:6A:97:37:2D:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B52F39CB89E11F098D0EABDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.56.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fa:d6:ea:ad:c7:38:52:72:09:49:57:8c:52:ff:16:29:3f:
a7:0a:ed:50:33:31:ff:b7:f6:bc:b8:46:6c:fd:82:fd:31:62:
20:8c:cb:bc:90:23:80:79:af:15:94:98:58:f8:67:5e:22:5b:
ca:da:0e:83:90:ce:89:aa:24:05:75:b3:21:94:71:d7:d6:bd:
20:c0:14:01:d1:0a:71:2e:c1:96:54:ed:d8:b6:69:03:5f:64:
67:77:69:4e:eb:29:04:b6:cb:36:fa:a8:bf:1a:74:3b:21:c2:
41:9b:a4:76:f1:bb:52:2c:ac:33:e5:81:94:3a:1b:bd:7f:fe:
3a:6d:34:51:3c:c9:ba:09:1e:e5:cb:32:f0:07:33:e7:4e:6b:
8b:23:10:8f:4e:3f:73:c1:18:43:e7:d1:ef:c8:4a:e3:98:a3:
23:64:9a:05:40:c5:8a:fe:0d:9e:5b:a5:e9:95:5f:91:2f:52:
c5:01:cd:e4:61:f6:f3:4e:3c:1e:3d:9c:49:7f:cb:04:0d:b8:
72:19:d0:10:13:a3:60:f3:d8:78:b5:0c:fc:24:d0:00:1f:4c:
02:00:6d:ae:a4:e6:4e:fd:69:09:b3:14:bb:18:a7:af:38:77:
ab:46:4f:8b:d8:af:5b:c0:24:38:9b:9d:13:81:1b:93:96:57:
a5:19:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:56 2025 by rpki-client