Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53E07D6EAE5D11F08B2CF889DAE4EC9C.roa
File: 53E07D6EAE5D11F08B2CF889DAE4EC9C.roa (raw, json)
Hash identifier: 9zuQI3shHzSbN0SlAeCcSXJthIEm1t6r8UFT6VcfZ1w=
Subject key identifier: 6C:82:D9:A1:C7:CE:D1:A0:AE:1A:71:8C:13:F2:D6:C4:B3:AE:DF:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53E07D6EAE5D11F08B2CF889DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:07:11 +0000
ROA not before: Tue 21 Oct 2025 09:07:04 +0000
ROA not after: Fri 28 Nov 2025 09:07:04 +0000
asID: 395793
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98778 (0x181da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 09:07:04 2025 GMT
Not After : Nov 28 09:07:04 2025 GMT
Subject: CN=68f74d3f-b7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:4d:5b:33:e8:97:76:4e:6d:7a:a6:3e:69:
9b:46:9f:f5:d5:a4:b8:10:7e:77:63:29:3a:2e:80:
4b:64:7f:cc:11:89:7f:d5:cf:3e:c6:c7:15:10:ab:
06:54:41:3c:71:8b:9e:bf:1a:e8:ce:96:88:25:9c:
c4:81:29:1f:e0:5e:24:0e:2c:19:bc:29:54:98:1a:
b7:c1:77:d0:ac:4d:95:3d:ef:6e:f8:7b:cc:cb:c1:
4f:07:44:43:ee:c0:de:68:d4:47:ad:74:af:ae:62:
71:ef:a6:fe:e0:82:2c:28:ee:2c:bd:6a:37:b6:22:
4c:67:06:6d:50:6d:dd:7a:7d:c1:6e:c5:43:51:a7:
b5:e9:bc:a6:72:f0:39:1b:09:8e:63:b7:6e:25:59:
03:28:c7:c1:39:84:83:2d:e4:1d:bf:c1:4d:84:82:
b9:da:86:37:d1:20:20:f9:f5:02:1c:62:4f:70:e5:
04:af:0d:41:0c:4c:22:e7:b3:80:ed:b7:79:58:bb:
83:38:67:4e:58:8b:dc:c9:43:57:8d:30:bf:22:0f:
81:e0:e4:f9:23:70:e8:04:c9:2a:a7:a1:cb:31:2d:
59:59:c3:ce:21:1a:b9:74:0c:50:4d:6b:82:98:85:
1b:53:84:e3:5e:b0:22:da:b4:3d:8a:e7:8a:7e:1a:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:D9:A1:C7:CE:D1:A0:AE:1A:71:8C:13:F2:D6:C4:B3:AE:DF:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53E07D6EAE5D11F08B2CF889DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c6:66:7c:ba:e0:6e:67:66:e1:e3:f6:e1:52:84:bd:47:15:
8e:14:ab:c0:12:55:cb:b2:8f:0a:5b:b2:76:8e:24:94:37:0b:
0d:8d:20:4b:90:96:85:86:c6:a4:2c:bd:b0:2b:4c:97:e4:4a:
70:92:39:7a:5e:e7:04:3b:df:6c:88:01:74:94:e7:2a:30:0c:
38:b0:c3:2c:08:9c:b3:a3:47:2d:00:ce:c3:6a:d8:4f:a0:fb:
f4:13:92:55:36:e6:f2:19:95:5d:d1:68:fe:08:dd:f6:c9:bb:
e5:74:4c:78:da:ce:67:54:50:c6:b2:9c:f3:f6:c0:d3:e8:b6:
f3:0a:0b:7a:2d:13:9c:bb:4b:ce:ec:48:46:14:49:10:a2:9f:
54:2f:48:ec:15:00:36:51:89:ca:7d:19:23:fd:28:72:13:84:
75:be:c2:dd:0c:1b:3a:5c:1c:92:d7:2d:9f:47:92:76:db:84:
11:36:d2:bd:31:89:3b:58:52:56:6e:ae:36:ca:4d:18:67:24:
07:85:b0:cc:b7:04:6b:d1:ce:de:d2:f1:7e:90:42:51:56:28:
53:47:cc:fe:cd:94:ba:f3:73:09:a7:12:4b:74:bd:b7:35:12:
d6:88:ad:b5:ad:3f:9f:fe:64:df:1c:37:6c:45:03:24:94:54:
41:13:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:55 2025 by rpki-client