Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D7EE472A29111F090E6E3DDDAE4EC9C.roa
File: 1D7EE472A29111F090E6E3DDDAE4EC9C.roa (raw, json)
Hash identifier: xDXfZ169eSZnxRFnjtfOs0QDRdUaOeRwkA5pg6MXxGM=
Subject key identifier: AF:E0:3E:EC:D2:05:D0:72:79:0F:E9:4F:77:35:7D:0F:1D:29:D0:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D7EE472A29111F090E6E3DDDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:47:40 +0000
ROA not before: Mon 06 Oct 2025 08:47:35 +0000
ROA not after: Tue 11 Nov 2025 08:47:35 +0000
asID: 29802
IP address blocks: 156.238.117.0/24 maxlen: 24
156.239.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98036 (0x17ef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:47:35 2025 GMT
Not After : Nov 11 08:47:35 2025 GMT
Subject: CN=68e3822c-b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:93:0e:e5:5c:fb:06:64:02:a9:85:0f:57:
4e:9c:47:aa:fd:f3:fa:39:25:45:db:1f:2e:74:28:
f3:d4:00:98:2a:2c:e3:e7:07:65:5c:c6:9b:d1:f1:
21:85:39:21:da:0a:20:2d:a5:3e:f6:7d:ab:eb:d6:
5f:fa:00:02:d4:56:ab:29:a9:75:0a:88:89:87:c2:
d5:96:b2:1f:a5:16:6a:54:41:71:1c:4c:b7:c6:df:
63:f2:73:38:4f:51:c3:0a:7d:8b:39:b7:16:22:5b:
f1:06:70:9e:dc:6e:d9:30:96:25:e7:7e:55:4a:00:
32:c6:39:74:16:7c:fa:88:e7:36:4b:fb:65:3a:36:
ba:83:f1:d1:be:99:6e:43:3c:b1:16:ce:57:8d:52:
8b:f0:83:67:32:d1:7d:aa:de:6f:46:ea:75:b0:5f:
3b:e3:f2:b3:ea:e0:ff:da:53:32:56:2f:34:ce:40:
92:ca:ec:ea:37:c6:d8:9c:85:d6:40:8e:18:c5:c4:
4a:cb:2c:57:fe:75:1d:30:1e:e4:69:b4:94:1a:79:
31:e6:28:73:ee:f0:8d:e9:8b:eb:3a:95:f6:75:15:
5c:62:4e:39:3f:ff:e9:cf:8a:54:82:9a:dc:65:b7:
08:23:70:6f:3b:37:92:99:71:4e:20:a3:c5:de:e1:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:3E:EC:D2:05:D0:72:79:0F:E9:4F:77:35:7D:0F:1D:29:D0:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D7EE472A29111F090E6E3DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.117.0/24
156.239.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7e:f8:36:11:5a:3c:45:af:3f:84:23:8d:a4:6e:b7:64:2e:
fe:4e:3e:89:f7:77:d1:39:a8:bf:b3:cd:4b:0f:66:6e:64:9c:
42:83:a5:08:f3:d7:a2:0b:96:6f:71:17:1a:6d:e1:5d:ba:8d:
f1:5a:2f:82:19:85:64:b1:9d:99:6c:d1:57:03:f6:55:67:8d:
f4:46:d6:be:3f:d6:66:f6:d0:57:ca:26:51:7b:9a:84:bf:23:
d4:a8:8f:20:b9:96:b3:a3:79:c2:9e:8f:37:57:0a:23:67:fd:
26:59:58:66:6c:f3:d3:79:20:17:3f:b6:03:82:63:a5:af:d0:
18:58:ad:d3:0d:05:0b:79:30:bc:78:1c:d6:a1:a0:30:09:d1:
6f:b4:5d:8c:17:3c:2a:f9:92:33:c7:77:5e:76:2d:6a:7d:4b:
17:53:30:50:0e:66:d3:82:7c:ff:fd:b0:f8:35:1b:41:a1:c8:
05:cc:1e:ec:6a:04:ca:f1:89:1d:89:dc:e0:8c:16:39:37:aa:
36:43:3b:0b:bb:56:b6:83:f7:04:02:21:7f:88:90:c0:4d:ba:
cf:bf:1d:11:af:0e:71:6b:09:ae:ed:9c:d6:4a:d3:3b:f1:c9:
8b:90:28:cd:32:ff:f1:dd:03:3b:1f:cf:a0:60:44:d1:fb:e9:
e3:2b:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:58 2025 by rpki-client