Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3BB650B8AC11F08BC21D97DAE4EC9C.roa
File: 2A3BB650B8AC11F08BC21D97DAE4EC9C.roa (raw, json)
Hash identifier: yZ5bnG0t8GAhKNx7sNlloSuIvnYA9kjhylui5G6+Z+o=
Subject key identifier: 79:A6:AE:AE:86:AA:B2:BF:8C:AA:63:3A:D8:AC:6F:6C:2B:46:10:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3BB650B8AC11F08BC21D97DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 11:56:43 +0000
ROA not before: Mon 03 Nov 2025 11:56:38 +0000
ROA not after: Wed 10 Dec 2025 11:56:38 +0000
asID: 401696
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99497 (0x184a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 11:56:38 2025 GMT
Not After : Dec 10 11:56:38 2025 GMT
Subject: CN=6908987b-c448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:84:77:ac:de:b2:33:f4:02:b9:d9:d1:c6:
a8:fc:a8:9e:77:20:ad:00:65:49:89:10:48:2a:6f:
12:25:d6:42:d2:3d:88:62:b1:18:04:bf:8b:eb:43:
4e:17:29:b5:8b:9a:ae:71:1b:5d:d5:08:fa:f1:41:
ba:25:c0:52:bd:d8:16:8c:2f:1b:4a:89:f8:8b:27:
4a:97:1f:1d:45:d5:0a:95:8a:ca:ca:f6:18:13:db:
c3:3d:66:22:75:71:1c:17:4c:c2:f5:10:ae:d9:6a:
5b:ef:be:3d:be:c7:e5:36:7d:1e:a4:93:fa:fe:67:
b1:99:c6:21:3a:03:c0:74:16:ae:a4:66:50:48:6b:
1e:cb:e0:de:c1:6f:30:42:ac:23:84:63:2f:2a:86:
6e:25:d9:82:d9:25:c6:72:8a:6e:21:bc:19:0f:50:
21:f0:62:62:05:f6:69:74:12:49:f1:5c:60:5a:27:
87:b1:7b:8b:2d:80:df:c5:ed:9f:f2:80:e1:f2:59:
13:00:6c:8d:c9:d0:8e:65:6b:dd:10:52:88:dd:df:
1f:b5:f7:a2:53:15:cd:21:44:49:a7:66:cd:54:49:
2e:f5:07:17:59:b3:a1:24:db:7c:ea:1f:51:5e:33:
98:f2:3a:93:2d:6c:81:b7:e2:99:44:a8:b4:30:00:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A6:AE:AE:86:AA:B2:BF:8C:AA:63:3A:D8:AC:6F:6C:2B:46:10:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3BB650B8AC11F08BC21D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:5d:3b:80:ad:55:62:91:7e:c5:94:80:ce:91:55:bf:dc:7d:
eb:74:79:8d:10:62:d5:08:d0:ed:e4:5e:b0:6a:da:9b:b5:36:
b9:86:62:90:67:bf:de:db:9c:78:24:21:bb:24:19:ae:98:78:
58:32:bf:07:ef:4d:12:36:e4:88:01:bd:a7:0d:b0:55:1c:86:
30:3b:21:47:39:34:0a:90:5d:47:89:f0:6f:bc:94:03:ed:16:
a1:7c:c2:8d:4c:70:99:a9:1f:ae:77:50:3a:36:19:da:36:36:
7d:63:43:aa:68:f4:f0:ea:71:bd:9b:48:3d:12:27:0c:9e:d4:
28:44:11:a0:0f:a8:b9:f8:8b:dd:cc:ad:fb:29:b7:5d:34:f5:
5a:77:98:44:40:8c:43:61:3a:37:db:5e:9c:91:d5:67:a6:75:
f9:53:44:72:33:da:4a:7b:95:d4:42:84:5c:fd:6a:40:f4:10:
9e:86:b0:dd:6a:d3:d2:a9:60:5a:49:ac:f8:9b:e0:f5:ce:e9:
44:95:d1:f7:ad:49:79:bd:a1:81:2d:db:e2:f0:b2:c6:44:54:
07:39:6d:6a:47:4b:f4:4a:42:12:e5:92:40:ce:d8:a3:82:15:
c1:d5:3f:70:88:22:42:00:63:9f:ad:0f:cb:64:f5:25:05:3c:
f5:ec:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:45 2025 by rpki-client