Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85524F3EB38111F09FC5068DDAE4EC9C.roa
File: 85524F3EB38111F09FC5068DDAE4EC9C.roa (raw, json)
Hash identifier: eI0uGIWhPmG9s7MRlwST4Wjl1515d+8k9IX6f1M+N3A=
Subject key identifier: 93:EC:B5:E0:63:74:77:9C:E7:21:C8:C9:C2:A3:23:94:94:4F:93:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01833A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85524F3EB38111F09FC5068DDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 22:08:52 +0000
ROA not before: Mon 27 Oct 2025 22:08:44 +0000
ROA not after: Wed 03 Dec 2025 22:08:44 +0000
asID: 23470
IP address blocks: 156.225.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99130 (0x1833a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 22:08:44 2025 GMT
Not After : Dec 3 22:08:44 2025 GMT
Subject: CN=68ffed74-6e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:89:fc:f5:d3:73:49:4c:32:dd:d6:13:af:
52:95:50:ff:a6:dd:b9:bc:e9:cc:c7:e5:40:cd:3f:
50:d0:e9:d4:1d:c8:24:c9:f6:b2:f2:c5:3f:83:c7:
27:db:f5:af:84:4e:c5:43:0a:52:b8:7f:34:e6:9e:
02:55:35:07:c7:25:f6:db:d7:bd:94:1b:05:b8:3a:
a8:47:b4:87:d1:e2:7a:2d:82:1f:9d:31:5f:69:3b:
9a:44:41:d6:73:a4:3f:ba:dc:75:44:08:da:99:70:
c5:c6:76:6c:f5:91:48:0a:55:04:34:4e:cd:9c:5c:
60:fc:98:36:8d:2a:28:a6:b5:74:e0:21:3d:b8:cb:
93:1e:73:46:1a:f9:ed:11:21:0e:31:09:78:b1:ac:
3f:84:b5:f0:21:04:7c:b1:28:a9:ed:e7:2e:4a:b3:
fb:14:2b:ef:3f:25:f4:5c:dc:8b:8f:02:1e:c4:78:
a0:42:e4:06:e3:fc:c5:29:c7:1d:29:fc:fb:1a:c3:
10:e8:5a:3a:e1:57:71:b8:04:b3:07:91:90:a3:6b:
f3:a8:f4:0c:d5:40:6c:02:21:a8:af:4d:6f:d8:98:
15:d8:ff:98:3d:4d:a7:8d:4d:7e:65:b6:76:38:26:
8d:19:15:0e:de:b6:20:c2:e2:46:18:60:10:f8:38:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:B5:E0:63:74:77:9C:E7:21:C8:C9:C2:A3:23:94:94:4F:93:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85524F3EB38111F09FC5068DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:42:7d:2e:c2:c1:9f:73:d4:de:a4:1e:77:a3:27:51:c3:1b:
e5:ca:a9:45:ab:56:2e:bd:66:f7:66:76:5a:c4:b3:ac:32:a1:
c1:04:24:94:85:7c:2d:37:40:74:5f:5a:d9:74:a2:19:a0:6b:
6e:fc:c5:83:39:b9:1e:ea:92:a6:e2:97:1b:a5:53:a6:bf:b1:
2d:93:7e:99:41:c4:50:ab:32:5d:c1:60:d6:8d:cc:f1:11:b0:
53:79:8b:7a:84:80:b2:36:86:93:57:11:0e:f9:61:4c:70:7f:
57:58:50:b8:c5:bf:1e:9e:96:c7:80:52:e6:05:06:8f:1f:6a:
6a:08:33:99:4a:4e:62:6c:44:5a:e5:3c:bf:3c:73:9a:f8:45:
11:fb:75:b5:cd:0b:63:0e:fa:4f:af:cd:eb:71:b8:6b:f4:0e:
31:74:92:6c:62:b9:e4:b6:4b:74:a4:c3:bb:cc:4e:9b:80:b8:
b2:8f:7f:8a:88:94:25:85:10:ab:b0:5e:01:a0:10:40:4e:ad:
c2:14:ed:66:fc:2a:20:9e:db:11:c6:b8:09:65:46:d3:b3:67:
28:89:09:ae:c7:ba:f6:17:4f:c3:12:29:71:41:7e:7d:94:b9:
bf:dc:e4:6f:1a:22:ba:a1:23:0c:65:8e:c2:ff:ef:49:dd:7d:
2b:83:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:27 2025 by rpki-client