Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F8737CAA4F611F09E7D46E3DAE4EC9C.roa
File: 2F8737CAA4F611F09E7D46E3DAE4EC9C.roa (raw, json)
Hash identifier: 1Hiofgh4xs8jzTU+qUdkYOuMw9i86CWI/wu26YlEXPY=
Subject key identifier: 55:F7:46:62:C1:89:2D:5E:0D:DA:E8:F2:EC:15:F9:58:AE:BD:98:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F8737CAA4F611F09E7D46E3DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 09:56:12 +0000
ROA not before: Thu 09 Oct 2025 09:56:01 +0000
ROA not after: Sun 16 Nov 2025 09:56:01 +0000
asID: 22773
IP address blocks: 156.242.241.0/24 maxlen: 24
156.242.242.0/24 maxlen: 24
156.242.243.0/24 maxlen: 24
156.242.244.0/24 maxlen: 24
156.242.245.0/24 maxlen: 24
156.242.246.0/24 maxlen: 24
156.243.108.0/24 maxlen: 24
156.243.109.0/24 maxlen: 24
156.243.110.0/24 maxlen: 24
156.243.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98229 (0x17fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 09:56:01 2025 GMT
Not After : Nov 16 09:56:01 2025 GMT
Subject: CN=68e786bc-048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:a1:76:5f:00:b9:98:80:bb:cd:3f:2d:09:
8c:7a:5a:61:31:dd:92:24:d9:1f:ee:ca:7c:b0:2b:
88:eb:3d:0d:68:58:e7:9b:35:81:98:c8:cc:d4:64:
14:f3:a0:22:7f:a4:a6:9b:7e:22:97:36:08:df:65:
25:cc:38:12:0f:be:0b:2d:58:ff:86:0a:4e:1d:c5:
2f:69:d6:be:3f:a6:5e:60:77:b9:0f:17:0b:fe:2a:
3c:5e:e1:8d:0c:96:7c:91:64:ac:e1:bb:d8:f4:43:
9e:7a:91:51:45:7e:dc:33:42:c3:5e:f7:cf:79:a5:
fb:5b:10:b1:86:c1:f7:ff:ed:00:73:cd:cb:45:60:
73:10:53:c8:a0:40:c9:4b:61:54:86:d5:0c:91:2b:
91:ef:73:e6:27:40:85:40:a7:90:db:71:6d:4a:53:
6f:4f:8a:46:ed:21:ee:9d:a5:0b:03:cb:a6:b1:d3:
cd:79:dc:aa:dc:c4:c3:4b:9e:f3:d4:bd:eb:0f:ee:
99:47:4d:82:66:48:ec:e0:17:a1:b6:8b:5e:2e:38:
d6:52:81:2c:92:f6:ca:5d:cb:06:d8:4d:d0:59:03:
5c:86:0e:6c:65:99:3f:eb:5e:18:f2:a1:1d:93:0c:
39:2f:e0:04:33:5c:43:a5:41:05:1e:72:df:8e:d7:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:46:62:C1:89:2D:5E:0D:DA:E8:F2:EC:15:F9:58:AE:BD:98:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F8737CAA4F611F09E7D46E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.241.0-156.242.246.255
156.243.108.0/22
Signature Algorithm: sha256WithRSAEncryption
43:62:f8:26:90:2f:97:f0:f6:11:0a:dc:64:e0:17:bc:ed:7b:
86:55:7e:0d:6f:9c:4e:ec:95:c5:d9:1f:ba:bd:74:78:8a:5c:
89:61:d1:c6:f3:e8:22:bd:ed:ba:92:33:fa:58:b9:52:fe:40:
52:91:53:b8:a0:29:10:fc:61:bc:12:b3:ab:3a:8a:41:71:e0:
06:eb:20:0a:ad:74:49:1d:df:87:df:4d:f0:05:af:36:62:0c:
b4:ce:6f:6b:f9:74:d7:8e:36:b8:90:cc:34:13:27:ae:e5:61:
4c:0d:90:fd:12:bc:c7:ed:07:30:77:11:ed:af:b5:bf:6c:c4:
c3:d0:75:c4:9b:a9:bd:42:e7:c6:72:a0:59:ec:9c:57:6f:30:
b6:93:c2:a4:a7:a6:28:56:77:c4:6c:dd:e5:3e:ac:33:33:81:
2a:1e:0b:49:3f:19:7e:c4:8e:3c:81:f6:a0:e3:a7:e8:0a:69:
b1:87:b0:e5:3c:4f:90:a0:dc:80:22:fa:aa:49:9c:11:b4:85:
2d:d0:f7:54:48:31:14:da:fe:57:06:0c:2d:12:e4:37:f3:3c:
44:73:51:26:c1:42:20:ff:ff:0a:b8:9e:ad:00:b6:d8:1c:dd:
93:9f:30:5a:3e:05:c7:d9:be:d6:a9:c3:42:11:08:36:b4:c1:
b7:8d:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:10 2025 by rpki-client