Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E411398AB76011F0A4FA87E5DAE4EC9C.roa
File: E411398AB76011F0A4FA87E5DAE4EC9C.roa (raw, json)
Hash identifier: Ca24NDke6S+kd1xCIeGWNHnLhLeVaxKvaiP58oPHzzg=
Subject key identifier: F4:AC:B6:A3:41:62:B2:17:D0:29:99:3D:60:7C:5C:82:C8:55:AB:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01843F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E411398AB76011F0A4FA87E5DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 20:25:22 +0000
ROA not before: Sat 01 Nov 2025 20:25:13 +0000
ROA not after: Sat 15 Nov 2025 20:25:13 +0000
asID: 137443
IP address blocks: 156.227.1.0/24 maxlen: 24
156.227.24.0/24 maxlen: 24
156.227.25.0/24 maxlen: 24
156.227.26.0/24 maxlen: 24
156.227.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99391 (0x1843f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 20:25:13 2025 GMT
Not After : Nov 15 20:25:13 2025 GMT
Subject: CN=69066cb2-0dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:9e:15:47:db:58:6f:05:d4:a3:f4:4c:61:
8f:7a:2a:13:22:12:a0:66:77:7b:af:46:58:bc:66:
10:45:19:ea:8e:5a:ea:6f:cd:ac:9e:35:2d:1e:94:
5b:4b:ab:b0:d7:47:da:18:2c:54:92:3e:22:17:60:
00:8d:fc:76:97:7b:a2:8f:c0:c2:72:ae:ba:1c:4c:
95:a3:dc:fc:9d:46:06:a3:7c:08:f9:5f:64:0e:d7:
ac:39:78:37:e4:fe:22:c4:72:60:fd:ed:8f:5a:bf:
61:89:26:4d:e4:e2:b0:65:81:07:48:74:4d:98:cc:
0f:15:5e:fd:f1:0e:b3:c4:5a:ec:4e:9d:f1:9f:e1:
4c:00:6a:a4:b5:ca:03:ab:ee:53:f8:90:4e:38:13:
50:ce:ec:f1:44:c5:a1:74:17:8a:3b:72:f9:07:a3:
4a:4f:70:e3:55:28:f8:d3:a2:69:c8:b7:13:91:8c:
95:29:3f:08:dd:75:91:36:6f:07:d1:f9:de:e0:4f:
6e:8f:b9:ed:5c:02:5d:6b:76:d0:6c:cd:d5:64:14:
0d:0a:8b:00:f6:67:de:93:e4:f1:7d:e8:cb:d6:f8:
d2:fa:08:1b:ad:4f:5b:94:03:3e:5b:72:0c:11:47:
af:89:de:f3:2a:ef:0c:39:4b:e1:15:92:ee:a5:64:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:B6:A3:41:62:B2:17:D0:29:99:3D:60:7C:5C:82:C8:55:AB:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E411398AB76011F0A4FA87E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.1.0/24
156.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
16:a9:25:40:33:cc:84:18:94:ec:8e:7e:5b:36:38:eb:b0:af:
76:e9:26:f3:11:e8:85:d7:a3:c7:a8:68:62:20:b9:34:7e:a4:
88:70:9c:f5:09:79:b6:d2:06:8a:7d:75:f4:38:df:d3:03:6c:
e2:7f:b1:2a:03:2b:e8:3c:b7:93:63:03:26:18:98:3d:59:71:
de:2c:50:c9:4a:e3:c2:03:8f:81:35:e3:e8:89:ce:b6:68:60:
7c:f7:7f:49:48:ed:00:11:9e:1b:1e:50:4d:43:a8:35:14:cb:
5f:20:f4:1d:c6:a5:e5:9e:af:ab:5b:6f:81:d2:14:e0:e9:41:
be:6e:ce:1d:05:b7:53:a3:3b:5d:20:cc:9b:91:c5:0e:d9:6e:
4e:1e:d5:06:a1:aa:8f:48:b8:46:13:e2:37:9d:17:84:c6:3a:
b3:78:52:2f:d1:6c:d0:9c:12:54:a0:dd:a0:ad:ee:a9:61:0e:
e0:6a:5f:c2:2d:50:82:54:58:e2:76:b3:50:65:19:ab:26:6f:
13:d7:85:8d:4b:e7:3c:d5:e7:01:ee:d4:8a:ca:7e:bf:bd:ec:
cf:d7:a3:d7:e0:3d:33:b6:a1:4b:ff:19:8b:6b:95:44:03:6e:
3f:5b:89:a7:b2:7d:21:1a:3d:4f:df:57:b9:6a:cb:4d:0e:6f:
d8:15:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:49 2025 by rpki-client