Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12E4D666A41711F08183CBBDDAE4EC9C.roa
File: 12E4D666A41711F08183CBBDDAE4EC9C.roa (raw, json)
Hash identifier: OY+HBmEnj+YGqKcunNIKTeWIoxK/h/mzLuAP/Y8YsT8=
Subject key identifier: 6D:82:04:96:09:97:01:00:D8:D2:D6:32:5F:1D:02:23:32:7F:D0:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12E4D666A41711F08183CBBDDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 07:19:06 +0000
ROA not before: Wed 08 Oct 2025 07:19:01 +0000
ROA not after: Sun 07 Dec 2025 07:19:01 +0000
asID: 139646
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98130 (0x17f52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 07:19:01 2025 GMT
Not After : Dec 7 07:19:01 2025 GMT
Subject: CN=68e6106a-8fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:16:ca:82:cd:b0:4f:38:8c:7e:b0:02:69:ae:
fa:11:de:ea:0e:0f:bb:69:7e:8a:83:b5:59:df:0b:
b4:43:ce:64:8d:b4:a5:f2:2f:cf:80:dc:55:c9:78:
05:fc:53:af:32:e3:44:18:07:49:0c:c7:88:9d:e6:
7f:97:f8:1d:bd:32:45:e0:23:22:b7:33:69:6a:5c:
0b:0f:32:61:b1:9a:70:93:86:71:04:52:41:67:81:
c4:d3:b8:fb:8d:b3:69:ec:bd:42:a0:47:f8:91:42:
6e:c6:c0:24:72:bc:eb:e0:76:06:f6:57:57:30:e6:
bc:af:d0:66:2b:ff:c4:64:21:aa:d2:fd:51:e5:78:
4d:eb:f9:6e:8c:44:5b:6e:12:ec:c8:6e:54:46:5e:
bd:6a:66:c3:b9:99:ab:6f:19:10:ed:0e:a3:a6:dd:
fe:ca:92:71:a9:56:22:81:5e:4e:13:c3:dc:b4:73:
83:dc:ee:07:ab:da:5b:b4:9a:67:2f:79:5d:61:34:
98:a8:d8:6e:6a:b9:cd:a6:4e:d6:7e:43:f5:4e:1e:
23:84:46:0b:7b:57:3a:40:5c:9c:4d:59:7d:ce:97:
55:90:4c:50:0f:6a:bf:eb:e3:f6:2e:e2:61:7d:05:
5b:b2:5b:a8:77:ff:19:2a:ca:14:19:c9:b9:0a:b5:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:82:04:96:09:97:01:00:D8:D2:D6:32:5F:1D:02:23:32:7F:D0:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12E4D666A41711F08183CBBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:99:99:60:cc:e3:70:b0:03:5e:fa:f3:e8:89:b9:ea:3f:60:
9e:d0:3c:27:42:42:ba:70:78:d5:1a:36:6c:c8:15:76:9e:d7:
c5:32:f0:43:a6:94:b5:3a:36:13:54:dd:41:7c:92:d1:e8:3d:
41:f4:9b:8a:f7:06:3f:20:4b:c8:f7:68:81:e2:4e:55:ea:97:
37:30:4b:60:83:16:cc:53:fa:32:a1:bf:0b:92:38:9a:ed:e2:
45:db:b9:fc:e5:d3:e3:26:bd:05:9f:c2:d7:f3:44:cb:5d:2d:
74:1b:ef:8f:1e:47:28:81:60:0c:76:70:6c:bf:da:9d:b8:e1:
38:c5:7c:08:fc:d6:3c:e7:c7:78:12:a5:d2:c8:70:6c:c7:8c:
61:25:b0:01:1f:56:2f:11:32:92:65:c0:4d:7c:73:e6:43:4d:
d3:e3:95:3e:82:89:65:56:8c:15:6b:09:53:ea:80:92:a9:73:
6f:3d:c8:ed:38:50:1d:ac:19:ab:79:71:54:a2:c5:6a:a1:39:
8b:df:7f:9c:fb:ca:53:6b:da:ed:6f:84:4c:d6:21:d8:64:55:
16:e3:57:d6:df:12:e7:4a:b7:5d:37:a1:5c:3e:8c:62:47:a9:
19:18:fc:46:43:de:7f:e1:d7:13:ee:74:33:d0:b9:5b:13:d6:
49:6c:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:13 2025 by rpki-client