Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79F66C8ADB411F0800235C3DAE4EC9C.roa
File: D79F66C8ADB411F0800235C3DAE4EC9C.roa (raw, json)
Hash identifier: mRClrtaRITi8JI8iYHSuweuP447NGiikwP2ipwwAvl4=
Subject key identifier: 52:1F:F9:79:54:8C:C4:B0:71:DF:2C:06:D7:5F:30:24:25:F2:F0:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79F66C8ADB411F0800235C3DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 13:01:07 +0000
ROA not before: Mon 20 Oct 2025 13:01:01 +0000
ROA not after: Fri 05 Dec 2025 13:01:01 +0000
asID: 401696
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98759 (0x181c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 13:01:01 2025 GMT
Not After : Dec 5 13:01:01 2025 GMT
Subject: CN=68f63293-84ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:96:c6:89:47:48:2e:a4:eb:88:81:de:f1:
89:08:ec:34:ac:ac:30:56:e4:0d:75:23:ec:e0:d5:
50:ba:18:27:ef:38:45:2d:e4:b2:5e:6e:9f:20:42:
36:e0:47:d7:72:d7:ff:46:15:e5:62:67:57:f6:13:
23:bc:58:5e:1d:c2:fa:71:d8:1f:20:e2:1f:a0:2b:
a1:f5:a5:ae:69:bc:7f:3f:57:bf:ae:0c:ec:f9:1d:
14:8a:74:d2:a1:d2:92:43:52:f4:ad:81:30:a2:9d:
ff:9f:e7:73:47:f1:9f:82:0f:86:f8:9d:5f:5a:b3:
3a:86:c1:40:4f:be:52:42:f7:dd:54:88:d1:7a:1c:
96:0e:95:92:2a:b1:71:74:71:ec:58:66:f3:a0:d5:
02:86:e9:83:c6:7a:40:16:52:7b:4d:3d:71:13:9c:
b8:f7:94:3c:9b:85:03:ba:cd:ff:98:70:58:88:49:
2f:e3:fe:59:ce:57:22:a2:d7:b2:e1:1d:38:2b:fb:
10:8e:1d:c2:30:b5:24:78:3f:35:c5:a7:64:af:a8:
18:60:34:b2:43:aa:39:dc:2e:53:75:77:74:6f:3c:
2b:66:8a:c1:ed:83:a1:09:b8:ed:2c:cc:18:18:e6:
50:8e:04:cd:d4:ca:a4:88:b0:9b:f8:26:0d:90:2e:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:F9:79:54:8C:C4:B0:71:DF:2C:06:D7:5F:30:24:25:F2:F0:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D79F66C8ADB411F0800235C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:32:56:d4:a3:6a:e3:15:0f:c9:e0:5b:42:fd:c4:58:72:76:
05:ea:ba:4a:1b:7d:c0:d1:95:40:43:93:a9:3d:b7:60:38:01:
66:3b:dc:fb:10:23:19:04:83:5d:62:56:31:9a:d3:7e:43:c9:
96:e7:fb:fd:dc:17:e5:96:de:e9:0a:9e:57:57:a0:58:15:a7:
d5:4e:90:40:ad:67:b1:7f:50:1e:05:e2:53:65:88:33:9f:28:
fb:72:32:ec:fb:b0:2a:2a:f9:e6:6b:00:a3:1a:e1:12:c2:c0:
0c:44:3d:ce:5e:69:9e:21:05:32:02:c1:5e:81:66:db:da:ee:
55:02:63:45:9e:2c:5c:ac:f4:77:8c:a2:76:99:aa:4c:82:83:
e9:e8:5c:28:85:17:e0:6e:f8:78:f6:10:62:a4:24:1e:af:b8:
64:32:59:19:6d:26:22:31:da:b9:eb:c9:66:0f:c6:ac:1d:3e:
b0:36:d3:0d:0f:cc:f4:a5:a0:1d:a9:b0:5c:ac:38:b4:e9:50:
24:5a:1b:df:69:6c:4d:97:80:f4:44:95:95:d2:f4:6f:8b:d8:
2d:8f:18:e6:8c:f7:02:cc:99:99:b6:99:0a:50:11:fb:eb:00:
a8:73:a4:ff:27:ad:98:4e:6f:69:31:94:71:44:c1:30:b4:44:
39:c6:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:16 2025 by rpki-client