Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/319478768EE311F0BE9E2AE3DAE4EC9C.roa
File: 319478768EE311F0BE9E2AE3DAE4EC9C.roa (raw, json)
Hash identifier: uBN64Y3yrfA+I+v1/1A1JcDWIyOBWhzMU5FwvbYyInI=
Subject key identifier: 7F:FD:B4:F7:94:15:B6:18:00:C8:53:16:01:C6:FC:48:C7:8B:A5:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/319478768EE311F0BE9E2AE3DAE4EC9C.roa
Signing time: Thu 11 Sep 2025 07:44:49 +0000
ROA not before: Thu 11 Sep 2025 07:44:45 +0000
ROA not after: Fri 17 Oct 2025 07:44:45 +0000
asID: 22773
IP address blocks: 156.233.44.0/23 maxlen: 24
156.233.47.0/24 maxlen: 24
156.233.56.0/24 maxlen: 24
156.233.58.0/24 maxlen: 24
156.248.104.0/21 maxlen: 24
156.249.0.0/24 maxlen: 24
156.249.2.0/23 maxlen: 24
156.249.4.0/22 maxlen: 24
156.249.16.0/24 maxlen: 24
156.249.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96916 (0x17a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 07:44:45 2025 GMT
Not After : Oct 17 07:44:45 2025 GMT
Subject: CN=68c27df1-1c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:11:02:ba:ac:74:b3:92:8e:77:b8:d6:9f:
75:d1:7f:90:ef:b2:b4:c8:af:3a:98:68:33:9d:25:
79:0d:83:0c:e6:e5:37:87:eb:fe:93:ec:69:9a:d2:
e4:bc:fd:17:cf:96:da:a5:d3:0d:a9:55:6d:be:23:
33:f7:8a:b1:25:94:13:cb:57:ce:91:f4:01:df:ff:
5b:77:10:f1:82:2a:93:f2:b0:44:c3:45:59:e7:ad:
02:0e:3a:4d:70:ea:de:53:ee:6d:1a:77:0a:ad:e2:
5a:4d:88:10:ea:77:44:81:a6:52:cc:79:24:5b:1e:
6e:65:34:76:a3:f9:25:03:24:3e:fe:05:09:88:ec:
f6:75:e5:c9:a2:86:0d:6f:50:eb:5d:f1:e0:00:77:
80:f6:ca:0b:76:f5:44:58:e5:2d:e4:e7:58:46:f4:
6f:75:50:bc:20:a7:c0:aa:df:3c:4a:d1:ae:62:e3:
36:5a:f7:f0:bd:9b:89:bb:8a:2d:20:33:d1:a0:6c:
18:fb:6b:93:ee:c3:89:f3:a9:2b:a8:19:9b:5c:cb:
9b:45:fa:ec:66:57:15:4b:fc:d5:91:60:09:02:16:
80:0c:0e:f2:81:14:f5:e7:25:96:26:d1:54:c8:3d:
b0:ff:55:02:9f:e0:3c:a9:a9:20:63:b6:74:d3:ef:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:B4:F7:94:15:B6:18:00:C8:53:16:01:C6:FC:48:C7:8B:A5:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/319478768EE311F0BE9E2AE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.44.0/23
156.233.47.0/24
156.233.56.0/24
156.233.58.0/24
156.248.104.0/21
156.249.0.0/24
156.249.2.0-156.249.7.255
156.249.16.0/24
156.249.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:7a:10:d9:81:bb:20:0d:18:8c:4b:3a:b2:75:66:9c:e6:27:
63:07:60:ec:c0:ad:99:89:0e:b1:ff:b0:db:7c:0e:29:8f:f5:
7f:6c:ef:af:f4:9b:67:b4:48:b3:0d:3e:46:1e:51:58:06:c6:
7c:f3:eb:42:e8:bd:66:5b:2b:4e:31:1e:67:9e:37:6b:1c:c7:
08:33:e7:5d:22:de:28:6b:af:c8:72:e0:a4:32:e1:8d:f8:89:
0a:fc:09:a4:6e:12:fb:3b:55:ea:c4:43:ae:a8:47:60:14:59:
f3:cc:3c:2c:14:f9:21:5a:19:22:9f:11:ab:c4:a7:8a:a1:b6:
96:37:c3:4f:96:48:21:77:a6:4c:ef:88:1e:ce:30:ff:c6:7d:
50:23:65:ec:32:cd:53:8f:af:07:04:bd:12:dd:bb:c2:7f:c7:
44:e7:78:0b:19:83:60:5b:5b:64:e5:8b:38:3f:cc:0d:93:a9:
2b:6f:3d:c5:ae:2d:46:40:98:9f:5e:ff:be:cf:62:27:a7:27:
83:62:42:44:19:c5:d4:c1:12:ee:49:0b:71:85:86:9d:8c:89:
e5:15:c6:bf:6b:1c:1a:ae:cd:a9:a6:41:1d:88:1b:93:e3:9f:
3a:62:8f:54:ba:ad:f3:46:b0:d2:25:11:ae:fa:bb:5e:35:9a:
ba:b7:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:05:37 2025 by rpki-client