Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E8044C0AF3611F0B8C32F7FDAE4EC9C.roa
File: 8E8044C0AF3611F0B8C32F7FDAE4EC9C.roa (raw, json)
Hash identifier: YyWI7bC2Ag2WCdb5rkG0LXUqJDnR48FMa43jclZbRgU=
Subject key identifier: 29:7E:A3:DB:93:03:F5:C9:79:23:3B:5B:DF:E2:7D:44:FD:16:3A:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018209
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E8044C0AF3611F0B8C32F7FDAE4EC9C.roa
Signing time: Wed 22 Oct 2025 11:02:10 +0000
ROA not before: Wed 22 Oct 2025 11:02:05 +0000
ROA not after: Thu 12 Feb 2026 11:02:05 +0000
asID: 140925
IP address blocks: 156.238.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98825 (0x18209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 22 11:02:05 2025 GMT
Not After : Feb 12 11:02:05 2026 GMT
Subject: CN=68f8b9b2-f48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:d6:63:89:e7:36:2b:2f:2b:f2:6c:28:2b:
2c:2b:4d:a3:86:54:0b:67:d3:c4:27:50:04:de:0b:
02:67:41:4e:08:e4:70:b3:4f:79:55:6f:ee:a6:70:
d1:1b:9c:49:c2:1e:3b:6c:c1:cf:af:e6:69:d1:ca:
84:2c:c8:11:79:eb:12:93:13:f5:b7:81:57:d1:55:
f2:d3:e7:e2:db:9f:14:31:a3:a9:4a:84:d3:41:32:
3e:cf:93:bd:d7:8b:fe:c3:29:34:6a:9a:ff:dd:a9:
90:d9:be:fc:c8:41:ed:1b:0f:23:e6:80:25:d6:c7:
db:ae:a0:b1:66:ca:72:05:f3:c9:56:df:96:30:b4:
ca:fe:2e:c2:89:af:de:da:22:aa:c6:cf:5e:26:7a:
c4:ac:09:71:3d:b0:1e:90:75:5b:52:d7:06:94:e5:
83:39:f1:ec:d9:e3:25:5e:54:c6:5d:60:6e:36:db:
a9:b2:71:3f:ab:b5:90:8a:2d:ea:79:73:e8:c7:87:
c8:14:c5:84:76:4c:1d:e9:d4:8e:f2:81:37:c7:e2:
8e:7e:23:31:a3:4d:5d:3a:54:9d:90:66:c8:b3:08:
12:81:fe:e5:d2:c9:2e:7f:3e:ff:4a:36:34:28:45:
b2:d5:72:12:92:ba:d5:8e:8f:1b:a1:48:52:19:13:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:A3:DB:93:03:F5:C9:79:23:3B:5B:DF:E2:7D:44:FD:16:3A:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E8044C0AF3611F0B8C32F7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0a:16:ed:74:d5:86:6b:e2:5d:26:38:a5:3c:e3:0e:1a:f3:
30:ff:df:f5:24:fa:f3:bb:91:a4:90:4c:df:0f:d5:73:bd:44:
bb:fe:a4:d0:1d:3d:da:80:f1:84:78:08:a4:cc:ae:a5:6c:7d:
98:42:9f:97:7a:06:3f:8e:56:b9:2c:d2:f5:a9:2a:06:19:aa:
09:23:70:b3:11:ca:73:d2:d4:67:1d:ab:8e:7b:18:1f:70:3d:
7b:79:e5:07:7b:6c:0a:87:15:53:ac:86:ec:7e:c6:2b:17:a9:
7f:ff:9e:35:e5:74:1f:b0:d0:81:5c:db:db:83:8f:e5:dd:a1:
25:61:fb:33:15:79:64:2d:54:97:7c:8f:5f:4a:ca:e7:7f:ea:
43:11:01:c1:f0:c6:10:d4:e0:53:a7:55:51:e7:c0:7d:48:03:
ff:a8:c6:d7:3d:f3:55:a2:bc:17:6d:ef:0e:43:42:d4:b6:9d:
aa:09:d6:d1:57:6e:d9:ae:75:68:32:25:cc:bb:e5:75:f4:84:
ff:2c:74:32:15:f1:00:a9:7b:f9:93:b9:b3:d4:8e:58:9b:70:
25:0e:36:6f:aa:a4:2f:27:f6:37:c5:5d:52:96:cd:16:98:23:
3d:05:4b:7d:30:05:96:24:4b:68:1b:25:e6:75:92:0e:70:17:
15:74:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:20 2025 by rpki-client