Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1842612B4F111F08EBA199EDAE4EC9C.roa
File: E1842612B4F111F08EBA199EDAE4EC9C.roa (raw, json)
Hash identifier: /b/Nl/rQGh/v17kb/9gLrA2+pokqODc3Kk1A4JvpLbw=
Subject key identifier: 3B:05:DF:08:2E:0C:B6:5D:99:D2:52:5F:3B:F5:6E:8F:EE:FA:F4:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1842612B4F111F08EBA199EDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 18:05:41 +0000
ROA not before: Wed 29 Oct 2025 18:05:37 +0000
ROA not after: Fri 26 Dec 2025 18:05:37 +0000
asID: 63139
IP address blocks: 156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.227.9.0/24 maxlen: 24
156.227.15.0/24 maxlen: 24
156.229.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99298 (0x183e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 18:05:37 2025 GMT
Not After : Dec 26 18:05:37 2025 GMT
Subject: CN=69025775-7f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:09:3b:93:91:04:a1:25:c1:be:5f:4e:06:4d:
35:66:a8:69:c9:41:7e:50:13:d9:c6:20:1a:66:1d:
88:7d:c7:d1:7c:5f:b2:54:3d:57:5a:5a:6d:f0:f3:
46:55:f0:4a:87:d2:6c:b0:df:5b:da:ef:00:df:9b:
12:c7:c4:2b:82:20:6b:04:6f:d0:3d:0a:8b:41:c3:
a9:37:8f:bc:e5:0c:07:0f:47:ea:84:ab:d1:b6:f4:
63:94:28:db:4c:10:f8:eb:ca:f5:a9:af:09:29:c7:
85:36:8e:59:28:47:38:bf:00:d2:f4:13:be:38:25:
09:f3:7b:aa:22:9d:1e:17:b2:9c:f9:a6:02:75:31:
17:05:48:99:2d:4d:fc:bc:0a:8a:bd:50:46:7d:59:
49:ca:c8:85:7f:2b:da:11:a7:52:a3:81:4f:a8:04:
ce:55:65:bf:16:a9:57:70:e7:c8:53:37:d3:71:3a:
49:01:06:ca:7e:8c:ca:2f:b8:c5:d4:b5:78:da:f8:
72:cf:d7:29:80:74:3a:06:04:c9:2c:9d:8e:94:e1:
ca:22:30:e4:d2:77:0b:fc:27:8e:97:b0:71:de:b4:
df:10:83:7b:69:4d:79:30:c5:3d:0e:6b:f2:31:ef:
73:bf:9f:73:c7:82:f9:77:f5:3c:36:ae:37:64:70:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:DF:08:2E:0C:B6:5D:99:D2:52:5F:3B:F5:6E:8F:EE:FA:F4:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1842612B4F111F08EBA199EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.124.0/22
156.227.9.0/24
156.227.15.0/24
156.229.46.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ba:4d:d2:03:b1:80:dc:26:0e:9c:fd:24:8c:4e:75:c3:fd:
06:8e:86:24:b1:4c:4d:30:80:11:d5:a2:99:6e:64:b3:8f:81:
92:9a:60:76:47:67:f9:74:13:de:d4:70:e5:f8:a0:33:8f:9c:
4f:60:81:82:c3:23:68:5e:83:57:25:63:25:9b:a3:86:e7:57:
bb:23:2c:32:9f:bf:e7:89:82:a3:b7:56:e2:0c:d6:c3:cc:83:
26:19:0e:1d:a8:bb:fa:58:44:2d:53:92:af:5e:f1:16:ce:78:
8c:06:7f:2e:d7:71:97:a6:82:94:10:1f:c4:a9:be:c0:54:c1:
59:9e:47:be:42:6d:21:ae:cb:0f:ec:4b:55:b5:52:03:64:f2:
77:d7:3b:52:ab:5b:f5:34:49:3e:cf:ab:52:ac:7c:11:6c:73:
60:e9:a6:34:89:21:a2:07:e0:9c:ac:3c:ba:8f:b3:1c:49:25:
e1:bf:a2:25:95:28:ee:56:3f:70:f0:02:94:9d:0e:2d:3d:49:
09:22:9b:64:1c:24:f9:55:4f:9e:42:7f:4f:b4:87:eb:72:64:
62:17:28:84:be:3b:4c:72:8b:fe:65:4a:23:d2:cb:59:ec:c2:
64:c5:54:c4:df:eb:08:ab:2c:89:e2:ec:66:d7:05:bf:df:6a:
7b:61:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:51 2025 by rpki-client