
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0F7BF66B33D11F0AEF1A9E0DAE4EC9C.roa
File:                     E0F7BF66B33D11F0AEF1A9E0DAE4EC9C.roa (raw, json)
Hash identifier:          py5wtpIPgyyg4aIc6Rg7ScPI6BKoH7hsjprCexcQmQI=
Subject key identifier:   E7:24:AC:42:EA:03:37:1D:69:3B:61:D3:5B:0B:17:39:EB:93:DC:13
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0182FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0F7BF66B33D11F0AEF1A9E0DAE4EC9C.roa
Signing time:             Mon 27 Oct 2025 14:04:40 +0000
ROA not before:           Mon 27 Oct 2025 14:04:34 +0000
ROA not after:            Sun 30 Nov 2025 14:04:34 +0000
asID:                     35916
IP address blocks:        156.225.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99068 (0x182fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 14:04:34 2025 GMT
            Not After : Nov 30 14:04:34 2025 GMT
        Subject: CN=68ff7bf8-4305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:e0:54:f7:53:97:c1:e0:75:ba:d1:ed:ad:
                    35:d2:37:ab:36:ea:ae:82:08:95:72:04:59:bc:70:
                    6f:6d:48:44:cd:86:00:24:b7:94:14:86:d5:45:00:
                    16:3d:81:48:7e:3e:93:93:95:57:58:dc:be:86:7b:
                    6f:87:1c:fa:3a:83:06:cf:4d:2c:1c:36:b7:b2:79:
                    b9:81:30:01:ec:5d:fe:9d:a2:ad:4d:a7:45:27:3e:
                    57:8f:e3:41:f1:29:fe:c0:c9:65:6d:cb:73:47:ee:
                    eb:f4:47:34:2f:66:98:00:8b:4f:96:2c:18:7d:78:
                    40:0e:c7:17:c9:73:37:a9:54:7b:bc:f5:3a:40:98:
                    dc:63:b5:e3:56:0f:6a:52:ae:57:f7:53:70:4f:72:
                    81:aa:7f:19:0f:b1:08:02:44:b9:2f:44:c5:de:56:
                    75:28:7e:8a:12:17:fc:d4:0b:ed:65:de:9e:38:5a:
                    ab:3d:d1:c1:36:ce:44:d8:18:66:be:16:bf:b8:5f:
                    0c:35:9f:2e:ee:87:91:82:9d:ef:cc:47:69:6c:0a:
                    43:ad:f7:76:de:38:aa:23:a9:4b:4a:e7:1a:3d:51:
                    1e:66:02:fe:ae:cf:85:dc:ec:f1:9f:05:9a:fd:06:
                    42:6f:67:92:7d:70:92:71:a7:39:f6:89:79:85:77:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:AC:42:EA:03:37:1D:69:3B:61:D3:5B:0B:17:39:EB:93:DC:13
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0F7BF66B33D11F0AEF1A9E0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.192.0/18
    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:d9:66:7b:ba:1a:e4:46:08:81:09:32:c2:ae:e7:e7:83:
         c8:98:65:40:0c:0d:8e:6c:90:a2:d7:ae:01:ac:00:66:f6:8d:
         f1:f6:9f:09:a3:04:ab:64:ae:3d:96:94:06:08:ea:22:60:c6:
         40:98:4f:9d:13:f0:5b:e3:41:11:e9:d3:b6:6b:e8:ff:8e:fa:
         0e:f7:17:e3:9a:d4:11:4a:9e:03:7c:b4:82:2e:18:e3:4c:c1:
         12:ca:a2:6f:7f:44:75:b2:b6:9d:65:e7:0f:b5:ad:5c:21:4c:
         c5:a1:f7:d6:08:ea:36:9a:de:1f:c6:a9:a2:42:73:69:22:0d:
         7e:9a:1f:96:c4:70:e1:f4:a0:dd:91:c8:d6:fc:0a:c5:7a:2a:
         77:61:a3:b9:35:7e:7b:a7:55:49:37:72:c0:d3:2f:a1:a4:6f:
         f1:3b:7a:f8:ee:7b:ad:b6:f6:cc:93:a5:dd:fc:17:ac:e5:61:
         56:5e:ea:82:c9:38:4a:bc:f0:3d:ca:b9:f8:bc:31:16:93:06:
         56:f3:fa:fb:b8:2d:cb:2d:51:8e:c0:3c:13:9b:ed:39:0b:2d:
         e9:2d:a9:e5:eb:04:68:4d:2e:8a:69:9a:aa:49:57:83:09:43:
         86:4b:b7:76:1f:53:49:4c:a2:75:47:e4:da:c4:3d:38:66:0d:
         76:a8:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:00:53 2025 by rpki-client