Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2596F00CB95511F0B39C93C3DAE4EC9C.roa
File: 2596F00CB95511F0B39C93C3DAE4EC9C.roa (raw, json)
Hash identifier: 7YWVPRytUa0eqcvFw2xHGJYAhQiTce4wLbNKsEupfdA=
Subject key identifier: F1:95:A3:41:27:3B:80:29:0B:95:30:4F:63:23:49:C1:3B:04:2B:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2596F00CB95511F0B39C93C3DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 08:06:21 +0000
ROA not before: Tue 04 Nov 2025 08:06:11 +0000
ROA not after: Mon 17 Nov 2025 08:06:11 +0000
asID: 204160
IP address blocks: 156.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99532 (0x184cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 08:06:11 2025 GMT
Not After : Nov 17 08:06:11 2025 GMT
Subject: CN=6909b3fc-dee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:22:7f:7b:3f:27:1d:62:19:2a:cf:21:2b:
8c:0a:33:8e:03:34:5d:dc:2e:c0:5b:27:c1:16:41:
75:be:3f:00:5f:86:90:96:9d:79:f5:74:b6:02:cd:
5d:f0:69:ad:5d:41:da:6d:f0:7b:fc:83:a2:4b:01:
0c:79:f3:fe:4b:c9:84:5e:33:ff:b7:b5:4d:13:34:
e2:fb:c2:39:ce:95:14:0b:bd:8c:ab:6c:e3:e2:d6:
31:66:24:c7:c0:23:e2:03:84:25:6a:bd:b8:9c:83:
7a:d6:0b:0d:69:21:ac:c9:63:3e:7e:bb:bf:42:47:
4c:8e:ad:24:8e:19:1c:c4:42:ef:49:34:80:63:7e:
8e:b9:f4:eb:9f:10:10:f1:82:21:26:77:ec:58:e1:
7a:0c:51:da:c9:56:8e:c1:30:1e:f9:0b:9d:40:97:
d7:eb:d2:39:ae:a1:d2:9d:ce:63:5f:89:e8:d8:f9:
14:49:8e:50:10:a1:59:c4:04:ec:dc:28:0b:b0:5a:
52:0b:7d:90:92:cf:42:21:06:86:79:43:7a:b6:a9:
13:6a:11:30:0a:9c:73:b9:34:da:ff:a4:d5:11:c5:
77:be:bc:80:7e:a7:b0:8b:b7:df:43:61:fc:60:d5:
f3:05:f3:74:e2:84:c5:3a:4d:cf:dc:f8:fb:89:91:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:A3:41:27:3B:80:29:0B:95:30:4F:63:23:49:C1:3B:04:2B:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2596F00CB95511F0B39C93C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9a:33:1d:4b:77:7d:da:71:6d:3d:40:d8:37:c9:b8:e2:99:
2f:e9:fc:43:3a:b6:28:96:7d:fd:e6:a7:3a:2e:1d:30:18:24:
15:bd:18:c0:d2:c7:ea:22:18:f6:6d:3e:3f:d8:5c:9a:e7:de:
29:6e:10:05:4e:d7:cc:21:ec:5a:6c:9f:bc:a0:1b:3f:5a:eb:
25:b4:a9:a1:7a:17:b0:53:03:55:88:07:dc:5a:b7:c2:82:c1:
4f:aa:eb:3d:90:12:a7:cf:fc:59:4d:ef:01:aa:74:e7:98:de:
d6:49:d1:f3:f6:52:e0:27:95:e6:a9:12:bd:c9:de:14:2a:55:
01:85:e7:ed:96:e2:e1:88:cd:5c:42:a5:73:db:75:42:59:cc:
be:78:aa:c8:79:5e:a4:52:c9:3a:43:04:d8:8b:08:49:78:29:
b1:58:48:8c:3c:a7:57:21:8a:cb:99:ec:82:0a:b2:df:43:5e:
2f:7d:a0:d9:7d:8f:2f:04:dc:15:7c:ff:5a:a8:41:19:7a:6b:
ea:88:f3:38:c3:ff:4b:7f:96:59:ee:4d:c9:62:0d:66:13:e5:
23:31:ba:90:c7:cd:ff:16:b2:c5:6c:b0:68:14:03:2a:e7:7e:
18:56:91:db:36:ec:0f:c0:d0:60:9b:0a:1c:85:d7:eb:b7:60:
d0:b2:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:44 2025 by rpki-client