Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DC87806947111F08E50BBD7DAE4EC9C.roa
File: 4DC87806947111F08E50BBD7DAE4EC9C.roa (raw, json)
Hash identifier: tJc99vvZaYggCVFPL2SUW6uKTf4IMAPWev7h7X2xbhw=
Subject key identifier: 63:C9:40:D3:83:A8:20:3E:98:F4:EC:A7:8B:B9:C2:DA:01:2D:45:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DC87806947111F08E50BBD7DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 09:24:41 +0000
ROA not before: Thu 18 Sep 2025 09:24:33 +0000
ROA not after: Thu 30 Oct 2025 09:24:33 +0000
asID: 62468
IP address blocks: 156.245.242.0/24 maxlen: 24
156.245.248.0/21 maxlen: 24
156.245.248.0/24 maxlen: 24
156.245.249.0/24 maxlen: 24
156.245.250.0/24 maxlen: 24
156.245.251.0/24 maxlen: 24
156.245.252.0/24 maxlen: 24
156.245.253.0/24 maxlen: 24
156.245.254.0/24 maxlen: 24
156.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97261 (0x17bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 09:24:33 2025 GMT
Not After : Oct 30 09:24:33 2025 GMT
Subject: CN=68cbcfd9-5f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:f4:25:93:ff:ae:67:0a:da:d9:38:f3:49:
c0:18:e5:05:59:06:60:cb:89:0a:e9:af:08:66:ae:
b4:25:d1:c4:64:47:ce:1b:e5:e5:95:a7:45:a9:1a:
ed:30:57:9f:ea:1e:31:65:e5:d8:e9:5e:94:d5:0f:
93:0a:90:c4:c9:6b:9b:53:75:af:57:98:e4:d6:0d:
f3:09:23:c7:47:83:c6:65:58:84:55:1e:32:e5:97:
9d:76:fe:c2:e8:fe:ac:39:18:52:06:46:e1:f4:ef:
11:03:68:e2:2a:98:cc:13:c0:e5:dc:23:cd:c2:89:
89:db:f8:d6:3f:37:f6:88:a2:42:a3:03:b1:f6:91:
62:80:fc:ce:65:6a:75:7f:72:55:e3:a7:74:86:45:
5c:e9:b4:e9:eb:b6:ea:0a:57:e1:d9:3c:89:4c:43:
99:e3:75:01:96:eb:98:09:4d:62:59:d9:14:70:15:
b6:f8:51:dd:b2:64:42:d1:3f:8e:a0:8d:45:d0:cf:
21:b9:5a:da:4a:b1:0e:84:c9:1a:5a:09:8c:9b:06:
c8:ec:31:be:7c:1d:8a:5b:62:f1:4b:5b:b5:11:01:
11:f8:09:d7:67:20:f0:70:0f:1c:9b:3f:48:e6:40:
f1:15:08:e4:c2:05:06:86:89:af:20:8b:ec:11:2c:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:40:D3:83:A8:20:3E:98:F4:EC:A7:8B:B9:C2:DA:01:2D:45:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DC87806947111F08E50BBD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/24
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
22:59:fd:3b:18:e2:43:48:b5:07:67:a0:08:23:e6:65:1b:bc:
89:e9:d5:f2:92:58:77:cb:63:cf:b4:d6:c0:84:cb:54:47:c8:
df:a2:10:6f:ef:67:50:07:26:53:5b:11:f9:5a:1c:2c:28:f6:
3d:54:f7:64:23:f9:8e:4b:90:ab:97:1f:9c:49:18:8d:0b:84:
6e:50:64:27:81:89:32:72:b4:8d:30:e7:8e:dd:6c:0b:e9:08:
b9:3e:10:89:36:c8:47:bf:21:6c:04:74:38:1b:d3:b8:98:67:
ed:62:bf:d8:08:73:3e:2a:2b:c3:b8:9c:60:be:db:c1:e5:b4:
c4:7a:a8:a1:bd:92:fe:04:f5:23:aa:75:8e:00:f3:cf:af:d6:
d6:08:20:6b:1d:5f:36:b8:8a:ae:22:a1:9b:c9:eb:a8:e2:c6:
ca:ea:26:ca:4c:e4:6c:23:65:e2:4f:80:11:a9:0f:4a:3f:1a:
1d:84:4b:4c:7d:32:13:48:76:d2:0c:a4:de:e0:c0:a0:4a:8c:
2f:c9:28:93:e3:1f:7b:0b:78:b9:3d:71:18:3b:f3:19:73:d4:
34:ff:8f:84:e1:6d:65:7b:3b:53:03:23:04:b6:d9:bb:59:83:
0e:00:30:6d:b5:1d:cd:d2:a0:9d:2c:ee:8a:63:4d:f5:a5:c9:
a9:4d:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:55 2025 by rpki-client