Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0489D0A8947211F0AD9017DCDAE4EC9C.roa
File: 0489D0A8947211F0AD9017DCDAE4EC9C.roa (raw, json)
Hash identifier: zRNiiQ0wAYdT12+seLnSSzPTodjFlgUMwqsXXZ2NG88=
Subject key identifier: 5D:5D:76:DD:F8:DC:97:B7:EA:CA:85:35:36:01:2E:C2:C0:6A:BE:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0489D0A8947211F0AD9017DCDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 09:29:47 +0000
ROA not before: Thu 18 Sep 2025 09:29:43 +0000
ROA not after: Thu 30 Oct 2025 09:29:43 +0000
asID: 62468
IP address blocks: 156.245.244.0/22 maxlen: 24
156.245.244.0/24 maxlen: 24
156.245.245.0/24 maxlen: 24
156.245.246.0/24 maxlen: 24
156.245.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97263 (0x17bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 09:29:43 2025 GMT
Not After : Oct 30 09:29:43 2025 GMT
Subject: CN=68cbd10b-6e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:64:8e:e4:da:05:db:db:2a:69:75:4c:b8:a2:
29:e2:2b:33:55:7e:86:5e:ac:17:c6:08:35:b6:b6:
d5:98:89:d7:3d:9b:18:bf:f0:71:c6:4c:60:a5:6b:
aa:d6:7d:2d:cd:07:f7:45:5c:31:6f:fa:d0:ae:f3:
cb:55:da:5c:bf:a4:3a:f3:67:95:f8:85:61:38:ee:
6f:05:60:ab:19:e9:9e:25:c1:d2:c3:e6:75:a0:af:
a0:2d:15:9b:c3:ef:1b:81:79:15:82:9d:2f:3a:a1:
d4:33:00:58:15:fc:b1:65:fb:a6:c3:a0:4c:fb:6b:
bb:a5:28:3b:ee:60:34:f2:e1:98:12:88:46:23:3d:
0b:6d:64:83:b8:9f:c7:ef:1b:e4:bd:85:ad:73:5d:
da:06:b7:c9:d5:18:d3:70:0d:28:2b:4f:e4:8d:6a:
66:3b:90:c6:7b:87:c8:52:31:5e:27:e3:52:d9:8e:
4b:c4:52:ff:e6:66:68:46:9c:a9:85:31:bf:1b:96:
b6:d2:7d:ef:5a:1f:07:08:e6:58:f4:fe:df:67:6e:
56:a1:b6:10:fa:fd:f5:31:0a:06:02:0a:d6:b1:2d:
13:ba:6b:58:9d:18:c8:69:46:c5:27:7a:26:8c:1b:
b1:b7:bc:24:0c:aa:ec:c2:b2:7a:41:d4:80:35:53:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:76:DD:F8:DC:97:B7:EA:CA:85:35:36:01:2E:C2:C0:6A:BE:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0489D0A8947211F0AD9017DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
30:53:76:bb:58:1e:fd:f8:ea:ca:55:f1:ae:8f:76:5d:34:02:
7f:25:73:90:71:97:29:f9:44:70:8b:38:61:50:12:03:b6:97:
03:17:fc:3b:ff:4d:9a:e8:bd:aa:08:87:66:fc:9c:8c:8d:86:
31:f4:18:f4:a9:70:c4:b8:22:f6:a4:2e:7e:f8:23:be:9d:f7:
49:88:20:37:27:ca:82:24:ec:97:ca:ec:b0:6a:8a:86:62:24:
d5:4a:8a:db:7f:1c:a3:eb:a8:65:c2:06:d7:f9:4f:c5:61:40:
b0:b2:6e:7e:d6:5e:63:9c:7a:08:2a:d4:79:20:18:13:c5:c9:
76:98:a3:8d:45:c8:3a:78:e3:ea:72:a4:1e:07:ce:e7:b4:fa:
51:33:5c:55:2f:2a:b6:9a:9c:0d:27:e9:4b:1f:3b:60:2f:36:
48:67:49:35:47:a6:96:7e:44:e9:ec:ae:7b:79:3b:8a:88:e2:
aa:08:8c:eb:63:fb:f5:33:84:ad:66:42:68:f1:ec:47:bb:cc:
84:f7:55:5c:bc:98:87:f0:0b:32:1e:14:af:38:04:85:40:b3:
bd:e5:75:14:e0:2e:9e:76:7e:79:3d:95:05:ac:dc:2b:1b:8a:
f9:f6:7e:4e:d4:a4:9d:fb:e7:fe:95:ce:f3:45:ee:36:5b:84:
6f:4b:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:05 2025 by rpki-client