Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603B2CB6B4EE11F0ADCAE388DAE4EC9C.roa
File: 603B2CB6B4EE11F0ADCAE388DAE4EC9C.roa (raw, json)
Hash identifier: L64Fc4FW16eKIlmWt+H79Yrv6xeTbQA+YkrM2bobxz4=
Subject key identifier: C0:D5:B3:E6:B5:13:5B:5C:1C:4B:B8:D2:FC:6F:2D:7B:5A:0D:F6:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603B2CB6B4EE11F0ADCAE388DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 17:40:36 +0000
ROA not before: Wed 29 Oct 2025 17:40:31 +0000
ROA not after: Fri 26 Dec 2025 17:40:31 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.121.0/24 maxlen: 24
156.227.14.0/24 maxlen: 24
156.227.192.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.194.0/23 maxlen: 24
156.227.196.0/24 maxlen: 24
156.227.197.0/24 maxlen: 24
156.227.198.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99290 (0x183da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 17:40:31 2025 GMT
Not After : Dec 26 17:40:31 2025 GMT
Subject: CN=69025194-48b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:31:93:67:11:0c:e7:98:ab:04:4a:44:e2:
4a:92:36:7f:4a:66:8c:f0:e6:62:a7:00:1b:d6:e9:
99:ee:d6:a2:1d:97:08:b3:ac:9a:fb:1b:74:18:93:
9f:4c:af:9b:f0:ea:e0:5f:fe:37:31:af:7d:ea:cf:
6b:40:98:3f:e9:cd:68:ac:0b:4d:79:07:4b:26:a5:
58:3c:f8:aa:27:55:e6:3c:40:44:a4:59:d9:76:2a:
a7:35:c9:eb:5b:e6:b5:e0:54:6e:b4:7b:80:17:c9:
cb:b6:5c:41:90:8c:c9:89:e9:d7:0b:4c:d4:3f:d7:
d0:53:5e:28:5f:98:e5:e8:0b:62:de:83:45:1d:28:
51:e4:f1:33:34:94:74:1d:c2:87:51:5a:dc:0f:c3:
8f:2e:38:6e:c2:e0:2c:85:14:6c:6f:fa:40:ce:61:
42:c5:c9:d2:ec:92:a2:25:df:95:0e:a0:c0:f1:d3:
26:65:ee:9e:61:dd:74:80:ac:f2:2f:07:56:ce:01:
a7:1f:67:06:66:f5:f8:08:58:bb:e2:67:40:3f:f5:
32:e0:4b:58:f6:86:0b:75:4f:a2:49:af:7f:d6:a8:
d5:f5:88:3c:ff:e2:7e:de:ae:82:08:92:7a:62:1e:
29:98:72:4a:97:c6:5f:c7:0c:9f:e4:a1:7f:92:4d:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D5:B3:E6:B5:13:5B:5C:1C:4B:B8:D2:FC:6F:2D:7B:5A:0D:F6:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603B2CB6B4EE11F0ADCAE388DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0/24
156.225.121.0/24
156.227.14.0/24
156.227.192.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:f5:c5:6f:93:23:d9:fb:d5:c5:b1:93:34:29:0f:0e:34:28:
21:5d:a8:4f:23:89:67:5d:aa:f2:d0:57:b6:6c:f4:fb:d5:50:
5d:9e:a0:8e:f1:72:26:98:b0:7c:89:16:4d:a4:79:69:46:2e:
d9:c9:3f:54:4e:fb:c7:7f:d1:b6:a8:21:ff:82:3b:c6:d3:81:
30:c0:44:d9:87:ce:5a:8c:28:cd:f2:ec:98:f1:a1:1e:c8:4a:
3f:fe:d6:0d:e7:a1:ca:a5:32:df:77:c2:a5:2d:b5:73:11:ee:
97:53:e4:d7:7a:5f:ea:42:ac:fe:c5:6d:06:a7:58:54:5e:14:
5e:e4:9c:64:30:9a:29:46:fe:89:c9:29:64:f9:cd:42:9c:fe:
1f:90:cb:b0:54:1e:b5:e3:05:f3:a8:35:a9:85:77:18:7f:88:
74:93:91:a7:9a:b4:8e:4c:6f:e8:49:cb:8b:51:14:8c:88:cd:
01:bb:a8:7b:1d:9d:ee:c8:f3:c4:74:25:10:f9:bd:cc:09:9c:
44:e0:f8:89:71:d2:82:1b:2f:c5:fc:20:e4:5c:d9:17:a6:66:
7f:18:c0:e5:47:0e:2d:74:cc:7d:9b:87:69:97:55:0d:f6:30:
41:84:09:98:8f:e3:34:58:1d:2f:4a:e3:bf:fe:ac:d1:b7:ba:
a2:a8:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:27:00 2025 by rpki-client