Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5F46AE8AE6211F09C98DEADDAE4EC9C.roa
File: F5F46AE8AE6211F09C98DEADDAE4EC9C.roa (raw, json)
Hash identifier: rOvBt/PyQzqn5EAV/mXQYruVZPELKJgLj28DE1NFV68=
Subject key identifier: 00:F9:A2:CB:FF:3B:C3:38:9E:82:34:B4:CC:3D:7B:09:42:6D:E1:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5F46AE8AE6211F09C98DEADDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:47:31 +0000
ROA not before: Tue 21 Oct 2025 09:47:26 +0000
ROA not after: Fri 28 Nov 2025 09:47:26 +0000
asID: 3257
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98784 (0x181e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 09:47:26 2025 GMT
Not After : Nov 28 09:47:26 2025 GMT
Subject: CN=68f756b3-2361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:30:53:ba:12:76:d6:93:bf:21:26:1f:43:
d6:55:2e:a2:96:23:26:ca:12:65:37:d6:3d:f6:c7:
c9:95:7d:a0:c1:88:a9:10:ad:4f:b0:45:10:13:e9:
a6:86:a1:4d:ed:dc:2c:8f:ba:62:fd:85:ca:21:d7:
3e:ad:77:22:79:15:f5:ca:10:4f:42:f3:15:06:b2:
bc:3a:3c:1a:55:f0:06:d8:f1:5a:f2:e2:85:c3:c6:
29:82:51:54:3d:1f:52:65:74:f8:78:c5:25:b9:c8:
4e:68:f8:55:49:de:79:f3:58:53:1a:21:43:fb:36:
86:d8:33:19:36:c3:49:26:7d:b0:44:73:d9:0c:16:
79:c8:16:cd:6a:8e:e3:a4:52:72:5b:dc:78:00:57:
16:92:f3:57:dd:25:eb:dd:55:aa:8c:c8:35:2b:03:
55:f0:bc:dc:16:d6:6e:5e:be:86:0f:c0:cc:c5:ea:
a2:fe:33:c3:0f:93:f2:0f:71:67:39:4d:89:d4:a4:
38:bf:cd:ce:5c:a5:d4:d4:a2:85:da:94:ee:f4:a5:
db:d4:54:a5:6c:76:66:8a:cf:64:53:5f:27:2c:9c:
8d:de:c9:3b:42:5a:0f:c8:19:4a:f1:81:d6:93:7f:
e6:a1:bb:78:41:8b:2c:ef:a4:f9:56:8c:4e:40:cb:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:A2:CB:FF:3B:C3:38:9E:82:34:B4:CC:3D:7B:09:42:6D:E1:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5F46AE8AE6211F09C98DEADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f4:30:9f:57:22:ba:b5:2a:eb:14:08:f6:c7:b9:ee:c8:bd:
7a:8f:3e:b8:04:ea:23:de:2c:a8:bf:aa:90:c9:bf:d3:57:d0:
b9:65:4b:15:4c:41:34:17:92:4c:80:32:c4:50:5d:68:58:b2:
21:8d:2a:98:90:b5:c3:80:0c:ee:6c:98:f2:d4:60:68:b9:aa:
54:c3:2d:0e:63:81:72:6c:f7:42:7b:f6:8f:cf:6f:9f:13:64:
15:04:64:90:15:75:aa:5d:67:42:8d:79:23:2e:1e:1d:19:0a:
d3:41:ae:e5:9d:51:98:a5:88:64:91:b2:25:d7:60:f8:a7:20:
d4:5e:2c:69:48:50:51:70:d9:4f:d3:af:a3:c2:bd:a2:bd:89:
7c:af:4d:22:a9:f3:3e:08:e6:ef:3c:f9:38:31:6f:4e:6e:8c:
4c:ee:1c:df:be:37:6a:52:63:3f:a3:d1:4a:44:6b:88:95:b5:
da:4d:73:66:c8:20:7b:9a:e3:d7:2e:cb:dc:50:e2:04:65:e8:
c1:a7:0a:74:6b:95:01:5b:08:bc:26:71:27:f4:76:27:61:08:
90:5a:e1:89:96:45:e6:c2:54:bc:e7:f9:f8:ab:81:0f:4f:a3:
77:0a:75:58:87:d8:05:dc:90:02:08:4c:17:df:95:d9:3a:bb:
24:dd:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:51 2025 by rpki-client