Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D6A7390A50411F0AB7719BDDAE4EC9C.roa
File: 2D6A7390A50411F0AB7719BDDAE4EC9C.roa (raw, json)
Hash identifier: KyJ3BZPYEmCRbLSxL955emmnI0paR7RwuJ9aJRSApUo=
Subject key identifier: 92:74:D4:BD:88:76:C7:8F:7D:2B:6A:89:F1:DF:8F:5B:AE:CB:F9:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D6A7390A50411F0AB7719BDDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 11:36:21 +0000
ROA not before: Thu 09 Oct 2025 11:36:16 +0000
ROA not after: Sun 16 Nov 2025 11:36:16 +0000
asID: 22773
IP address blocks: 156.243.48.0/20 maxlen: 24
156.243.64.0/20 maxlen: 24
156.243.100.0/24 maxlen: 24
156.243.203.0/24 maxlen: 24
156.243.204.0/24 maxlen: 24
156.248.26.0/24 maxlen: 24
156.248.27.0/24 maxlen: 24
156.248.28.0/24 maxlen: 24
156.248.29.0/24 maxlen: 24
156.249.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98253 (0x17fcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 11:36:16 2025 GMT
Not After : Nov 16 11:36:16 2025 GMT
Subject: CN=68e79e35-c90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:f7:0c:c7:6a:64:d0:35:3e:80:60:8f:49:
f5:b0:d9:f3:9a:80:08:fd:cb:dc:4a:bb:55:36:8d:
74:82:1d:e4:27:c1:f4:13:06:f4:7f:2b:8d:ad:89:
94:ac:eb:54:08:38:2e:9c:ca:e1:18:40:cb:1b:31:
a7:8c:ce:7e:68:3f:db:4a:0d:d8:cb:53:dc:a2:d5:
e8:3c:2a:42:ff:68:1c:ff:a4:1d:47:f4:e0:4c:68:
82:3e:a8:4c:d3:1d:96:24:11:30:4d:b9:80:75:19:
d7:65:0f:4f:55:93:d7:4b:52:1d:41:cf:6e:74:f4:
98:cc:f3:32:08:0d:e8:ba:96:bd:bb:f5:36:2e:e0:
0b:d8:2e:4d:67:51:a5:29:23:70:ae:eb:12:9d:6a:
0d:1e:7e:08:89:21:f3:cd:91:74:80:39:3b:e9:ef:
83:bd:01:e1:c4:08:ff:1f:ce:9c:a3:91:64:c6:a0:
55:00:3c:d4:20:b6:64:3b:5a:84:51:49:d1:17:2e:
d7:fd:84:39:4c:d0:d3:5d:1d:af:bc:a7:be:fe:44:
6b:d0:b2:11:1f:6d:ff:61:d2:c9:76:11:58:2d:70:
2f:d6:ee:ee:9e:f2:14:5a:a4:7b:9c:d8:18:4f:15:
39:97:fd:7c:65:bc:6b:d8:65:1d:1a:46:1e:88:70:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:D4:BD:88:76:C7:8F:7D:2B:6A:89:F1:DF:8F:5B:AE:CB:F9:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D6A7390A50411F0AB7719BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.48.0-156.243.79.255
156.243.100.0/24
156.243.203.0-156.243.204.255
156.248.26.0-156.248.29.255
156.249.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6e:f8:ed:f0:fd:a5:1b:dc:91:91:77:4e:e8:64:69:7c:e6:
cd:6a:1b:5b:9d:98:fb:cd:19:fe:a3:d7:b3:b6:45:25:09:27:
28:1d:38:60:1e:e2:c4:4e:58:19:23:c6:be:20:21:bf:8f:94:
62:fa:3d:cf:a4:a9:0e:5c:af:b3:8d:24:f3:43:40:f4:b0:c4:
ea:57:a5:9c:5d:fc:07:de:6f:4a:c4:cb:08:f3:13:c7:67:6d:
42:13:5b:47:48:a1:e5:6a:75:13:fb:9e:8b:e3:0e:42:58:ed:
62:d6:3b:89:56:d9:4b:67:de:c1:4f:03:0a:03:32:ba:cd:2b:
2b:28:d9:ef:c8:8c:73:df:d5:0a:e6:84:a6:70:d5:21:50:24:
73:87:9d:31:5b:a2:7c:f0:6d:02:3e:5a:67:c5:d0:fd:a4:e8:
c9:f9:c8:c7:a3:7b:53:c8:8c:d4:08:b5:91:75:5c:80:95:72:
6b:3d:c8:3b:85:3c:6e:4e:ac:5d:85:ed:91:39:3b:4d:4c:f1:
42:28:85:91:1e:c2:13:33:0f:77:1c:d3:cd:25:53:e9:36:2d:
4c:92:44:4f:a0:a1:82:5e:ba:3a:a8:12:59:c5:ab:a0:34:bc:
80:96:79:a2:cd:3f:ca:5e:15:9b:fe:f3:9a:54:33:60:a8:95:
00:d7:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:02 2025 by rpki-client