Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA6117AB7AB11F0B886DAC0DAE4EC9C.roa
File: FAA6117AB7AB11F0B886DAC0DAE4EC9C.roa (raw, json)
Hash identifier: HfLeQm/ap3EkTwOjfU+4N1t71Tcan+DMh/gq9Cx35Ec=
Subject key identifier: 18:89:34:92:2F:96:03:40:EC:B2:E8:71:C5:50:FD:76:C1:C1:0C:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018446
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA6117AB7AB11F0B886DAC0DAE4EC9C.roa
Signing time: Sun 02 Nov 2025 05:22:52 +0000
ROA not before: Sun 02 Nov 2025 05:22:42 +0000
ROA not after: Fri 07 Nov 2025 05:22:42 +0000
asID: 131273
IP address blocks: 156.242.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99398 (0x18446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 2 05:22:42 2025 GMT
Not After : Nov 7 05:22:42 2025 GMT
Subject: CN=6906eaac-417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:f1:59:65:e1:75:39:e3:d0:ad:76:c5:b0:
a5:f1:eb:a8:bf:75:60:ca:f0:31:05:31:04:0d:db:
d8:75:c7:3c:e0:6b:01:65:65:ac:10:69:80:6a:e8:
d8:27:3a:ca:cc:7b:69:ad:26:86:30:1c:92:7f:6d:
7f:aa:88:3e:66:27:4c:a8:94:3c:0e:18:25:0f:37:
56:fc:d5:16:a2:e0:1c:4c:d0:28:c3:04:a2:9a:28:
40:e3:47:93:38:38:21:b4:3c:c9:48:4e:74:11:d0:
f0:e0:90:6a:84:37:34:4d:7f:31:eb:51:51:8b:ab:
65:d3:49:2a:36:53:57:a5:73:15:ab:61:ce:8c:79:
97:fb:ac:96:db:3b:ac:58:e4:07:91:6c:7b:6c:2d:
3b:c2:d3:e5:75:44:60:f6:68:54:0a:ec:f8:06:84:
64:bd:8f:c7:10:1a:4c:e1:5c:a0:90:74:c4:af:4f:
3f:30:f5:ec:c7:14:69:fc:64:c4:d4:db:38:8f:37:
a5:a6:a9:aa:4f:09:56:42:78:fd:7d:cb:29:91:61:
9d:54:6f:bb:38:eb:33:d3:0b:e0:3c:6c:c3:d3:36:
5f:4b:c3:d9:5d:88:70:6a:b6:80:47:fd:42:ee:49:
31:e7:c7:e9:1c:cf:53:64:e7:ed:75:fa:d1:1d:03:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:34:92:2F:96:03:40:EC:B2:E8:71:C5:50:FD:76:C1:C1:0C:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAA6117AB7AB11F0B886DAC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.9.0/24
Signature Algorithm: sha256WithRSAEncryption
76:86:a1:79:44:48:d0:ca:5f:99:d9:ab:9b:ba:f4:90:6e:73:
d2:ed:32:3f:92:09:57:d0:39:37:f2:cf:0e:9e:f4:e6:82:fc:
6e:d5:42:e6:7a:66:80:c7:55:4e:83:71:74:5e:4b:cf:41:ba:
e6:42:78:ae:96:29:bc:88:49:b6:58:2b:8f:ff:49:b6:37:c3:
67:43:e9:43:2b:ad:82:4b:c5:64:7e:74:e3:32:12:83:c0:15:
b1:9d:ca:89:c3:7d:29:50:f4:ae:22:a0:e1:45:4b:e6:0a:b1:
19:09:64:73:29:35:d6:9f:a4:ca:7c:4a:0d:27:d2:b6:df:a0:
8f:ff:00:8d:5c:0c:23:7b:80:5a:30:55:8b:f5:44:9e:ef:30:
a3:4c:9d:a9:4c:75:8b:0d:b4:f7:a2:80:07:57:1e:dd:97:12:
77:4f:1e:a6:57:c0:0a:f8:eb:83:25:0a:8a:4f:66:ea:57:69:
6f:e9:99:14:d7:b7:4f:40:ad:fe:5a:54:b4:cd:ca:d6:6c:f3:
b8:ae:38:e0:95:f3:d2:92:13:a1:2d:9c:fd:3e:ee:aa:07:dd:
08:3e:44:a4:72:2b:bf:f5:3f:53:74:21:56:a8:29:57:2c:b8:
e4:da:5e:d7:da:90:7b:63:66:95:71:77:ef:e8:bc:dd:15:5c:
99:51:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:58 2025 by rpki-client