Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2450C132B32E11F091EA13F6DAE4EC9C.roa
File: 2450C132B32E11F091EA13F6DAE4EC9C.roa (raw, json)
Hash identifier: EeyznHpo4hTQtKTG8akewiPUo0D/sBQIKHlLF12Tb7U=
Subject key identifier: 8D:C6:B8:17:19:42:63:C4:50:76:2C:D2:ED:C7:A0:F3:FF:AE:A7:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2450C132B32E11F091EA13F6DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 12:12:01 +0000
ROA not before: Mon 27 Oct 2025 12:11:54 +0000
ROA not after: Tue 02 Dec 2025 12:11:54 +0000
asID: 3257
IP address blocks: 156.228.7.0/24 maxlen: 24
156.228.9.0/24 maxlen: 24
156.228.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99050 (0x182ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 12:11:54 2025 GMT
Not After : Dec 2 12:11:54 2025 GMT
Subject: CN=68ff6191-1620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:54:11:68:a6:b1:2e:b4:cc:58:08:3a:16:
66:a3:62:09:aa:7f:13:86:ff:0e:e1:29:e2:36:fa:
92:15:a0:10:1a:e7:a2:7e:59:3e:2c:de:7e:a3:ba:
f9:a4:d8:5b:e8:b1:73:59:3e:cf:15:95:60:98:00:
37:99:40:9e:a6:17:8c:d8:0c:8d:74:f6:94:03:fd:
a0:1a:81:71:6d:60:8e:60:f7:5c:ad:62:13:fa:c4:
98:4f:20:3f:17:a3:f1:f1:03:76:c4:a7:2b:8c:0f:
cb:4f:5d:40:5a:2e:32:ea:63:5c:4a:c0:ee:70:0e:
49:82:32:6e:8a:5a:66:bc:b5:15:76:14:75:bf:cf:
aa:6f:78:1e:b4:ef:66:46:79:da:9f:8a:8a:84:8e:
2f:63:74:2c:14:34:bf:12:45:71:73:93:f6:0f:2f:
34:33:5e:10:5e:59:d3:26:f7:d1:47:b8:5b:0b:4e:
c0:4f:e7:08:8e:db:9c:f7:eb:74:d9:cc:0b:2a:fe:
64:2d:cb:f3:38:aa:cc:d1:bf:a7:df:fe:08:1a:98:
c6:af:4b:81:a8:d6:53:f5:75:a7:da:d7:58:c0:bb:
6d:74:0d:ca:88:8b:56:d0:52:da:a0:0b:f9:55:89:
21:61:4e:16:34:98:e7:b5:2d:05:37:5e:2e:41:aa:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:B8:17:19:42:63:C4:50:76:2C:D2:ED:C7:A0:F3:FF:AE:A7:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2450C132B32E11F091EA13F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.7.0/24
156.228.9.0/24
156.228.16.0/23
Signature Algorithm: sha256WithRSAEncryption
63:73:9c:02:cc:9f:7d:a3:d2:cf:f9:8a:d4:26:8c:20:ff:4e:
1c:6e:b8:73:71:91:ab:96:d6:d3:cb:d2:90:b7:14:36:b2:c3:
34:e6:1f:d3:47:1e:05:65:b1:2e:fb:b6:c7:da:bd:ed:9a:19:
f3:c6:66:40:01:f8:f0:aa:bf:c2:e5:2d:4e:0f:d2:bd:4e:c4:
17:e2:88:b8:bf:bd:af:bf:2e:a9:54:30:1d:30:38:10:a0:e9:
e2:71:e5:b1:2a:ac:8b:f6:29:85:9e:9e:3a:31:1f:61:d9:0b:
d3:0d:ed:76:ff:cd:f0:9e:62:1a:04:88:50:88:52:16:63:5f:
a0:7e:29:b1:40:d2:c1:fe:57:51:46:21:02:8b:fd:a0:29:8a:
9d:31:df:7f:40:ef:38:cb:c6:1b:9a:fb:9d:37:f8:31:ec:9c:
44:ce:7a:c3:6d:3f:7f:4a:aa:81:54:5c:e2:a4:a2:28:68:6d:
e3:03:fa:44:d3:b6:7c:8b:1e:bf:88:ea:ab:2a:f8:d4:d4:d7:
e4:72:50:a0:5b:d3:e7:13:56:6b:d1:ff:80:c0:f4:c2:8a:d6:
f0:ca:c0:53:a9:03:6b:a7:23:b0:15:76:b7:53:37:8b:8c:df:
5d:f5:89:6b:b1:b3:bb:0a:db:03:1b:c8:0c:b1:00:fa:38:d8:
63:42:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:37 2025 by rpki-client