Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A07749F8ADB011F0B5D821A9DAE4EC9C.roa
File: A07749F8ADB011F0B5D821A9DAE4EC9C.roa (raw, json)
Hash identifier: TjyQAc/Wpy4aUkNTGDqfA2bxfjzt3T33NQtQfV6Q8jE=
Subject key identifier: AB:9B:C7:04:86:83:F7:52:4D:2A:93:C7:39:D7:63:E0:C2:63:EE:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A07749F8ADB011F0B5D821A9DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 12:30:57 +0000
ROA not before: Mon 20 Oct 2025 12:30:51 +0000
ROA not after: Fri 05 Dec 2025 12:30:51 +0000
asID: 40779
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98747 (0x181bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 12:30:51 2025 GMT
Not After : Dec 5 12:30:51 2025 GMT
Subject: CN=68f62b81-3498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:a7:ae:c8:99:86:bd:9d:ed:5b:d8:0d:7e:
22:ed:28:f6:4c:7d:1d:8a:2d:f4:09:7e:02:2d:a5:
6b:a7:1d:0b:2a:92:08:93:54:8e:f0:74:34:fc:dc:
9f:36:74:da:a2:25:e4:0a:8c:97:48:72:d9:f5:23:
c0:f7:91:7e:fc:c0:e0:51:d5:f0:b1:49:e2:eb:3d:
3a:c2:78:39:4d:35:86:dc:8b:d2:c1:dd:6a:b3:4f:
9d:d8:c7:a9:c5:78:56:14:39:6f:e5:5e:2c:2d:93:
c6:07:9c:42:d9:05:b9:a0:ab:47:9c:31:4f:61:3a:
f8:ab:b8:94:90:29:7d:de:73:01:36:cc:51:c6:d6:
17:48:03:91:80:52:ad:27:89:3a:7f:2e:45:43:42:
90:5e:da:f6:37:6a:d0:66:74:54:63:27:c1:e1:a8:
4f:79:88:d9:08:57:5c:f9:f7:5e:1a:a9:4f:22:d3:
4c:8c:cd:ac:7c:2b:d5:17:65:8b:8e:a0:80:b6:8c:
3c:ce:18:e2:be:32:69:10:6e:8e:ba:8e:d1:a7:7f:
41:b4:ea:0c:4d:03:41:8c:0a:47:66:24:96:46:c2:
66:b7:7b:cf:76:b8:67:2c:b4:0b:03:8e:5a:12:85:
89:a1:a6:a3:b6:6b:37:4e:15:98:21:00:18:ab:b8:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9B:C7:04:86:83:F7:52:4D:2A:93:C7:39:D7:63:E0:C2:63:EE:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A07749F8ADB011F0B5D821A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:b1:c3:d9:b6:0b:ab:84:e2:54:7d:65:60:08:52:71:25:ab:
4d:8a:18:c4:e7:d4:aa:cd:d2:7a:e3:b5:0e:6b:14:01:68:e7:
7f:cd:10:f3:26:6d:06:04:32:1d:4b:23:93:46:65:3b:8f:f2:
84:61:e3:22:15:7e:56:d3:31:9a:7a:41:7b:ce:c6:a4:38:10:
cc:86:c3:2c:03:26:52:68:0b:fe:37:02:04:68:bc:63:d1:f7:
dc:92:2e:f9:01:cc:f0:21:44:85:d2:60:1a:da:cc:c8:18:f2:
fe:73:5e:2b:a2:6a:9a:66:42:9c:f1:c1:2c:bf:39:18:44:f4:
6c:fa:e8:84:c6:2e:af:bd:cd:6a:94:ec:f6:bb:1e:8d:4f:57:
03:10:cb:49:62:f4:a6:2b:e4:da:df:68:5a:41:ae:60:17:92:
93:0e:3b:2e:dd:b3:16:92:be:99:dc:f3:cb:fb:f1:d0:f6:69:
35:4c:c2:49:64:e4:1a:a3:11:9e:4c:5a:e3:13:19:13:db:ee:
15:2a:18:48:6c:53:e9:fc:f3:6e:76:d4:3c:15:f9:5e:f1:32:
ab:bc:5c:52:56:88:e9:9d:ad:c1:93:fe:a9:27:8c:4b:7a:22:
67:d7:9a:73:60:1e:8b:ad:11:e6:d5:e7:4a:b9:78:3b:b7:01:
1d:d3:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:07 2025 by rpki-client