Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/500D50CE92DB11F0B92E6994DAE4EC9C.roa
File: 500D50CE92DB11F0B92E6994DAE4EC9C.roa (raw, json)
Hash identifier: MxoRr2xcvtvgzDPgi3u4ffHkaQQ3ebZ1goexjtu7D60=
Subject key identifier: DD:4B:42:76:FA:C5:6C:80:EB:70:0A:39:FB:10:15:37:61:0C:4C:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/500D50CE92DB11F0B92E6994DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 08:58:29 +0000
ROA not before: Tue 16 Sep 2025 08:58:23 +0000
ROA not after: Sun 23 Nov 2025 08:58:23 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 24
156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97146 (0x17b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 08:58:23 2025 GMT
Not After : Nov 23 08:58:23 2025 GMT
Subject: CN=68c926b5-805a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:e3:b3:99:ad:3c:5d:59:da:51:9d:68:f3:
28:81:3d:00:37:36:df:45:4e:dc:27:e3:8d:ff:11:
47:91:79:ac:2b:89:24:a7:a5:9d:2f:af:c1:ab:94:
8f:0a:2b:51:a5:e9:6e:37:65:69:b1:bc:e8:4f:fe:
94:60:93:78:84:e2:75:70:69:15:32:f7:8f:62:26:
5d:43:f5:c9:5a:cf:30:79:db:d0:7a:ac:1f:13:1c:
7c:11:93:2d:2e:51:ac:fa:71:bd:e5:96:4c:67:a8:
4b:d4:46:a4:f8:ac:eb:47:f9:84:2a:90:bb:2a:2a:
d2:52:6a:92:70:88:e4:8e:78:47:6a:70:ba:15:af:
14:31:53:c2:5d:f4:ef:e2:93:4b:5e:6e:5f:00:13:
13:a7:d7:bc:5f:43:40:4f:91:cd:b6:95:86:ed:76:
79:05:a1:9a:1b:a9:1d:1f:a5:a3:22:d7:9a:86:d4:
da:06:73:bb:6c:79:77:fd:49:e7:12:58:de:5c:d1:
29:66:df:50:7c:8f:7f:df:43:71:2a:f7:51:15:ff:
da:02:a1:3d:f1:d8:d5:32:41:68:12:5d:e6:39:f4:
96:af:d0:a1:de:8d:0d:0d:ee:b2:1e:12:13:e0:1f:
b7:0b:43:65:39:5f:19:9b:5d:56:fd:f2:7a:e0:6a:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:42:76:FA:C5:6C:80:EB:70:0A:39:FB:10:15:37:61:0C:4C:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/500D50CE92DB11F0B92E6994DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
83:dd:ef:61:25:2b:58:a9:06:e1:23:c3:ac:58:14:e6:74:47:
ba:c9:8b:e9:d1:bf:36:b1:6c:cb:e2:12:7f:e4:63:02:e1:4d:
7d:d7:5f:c2:8e:98:2e:1e:4e:88:c5:a4:47:b9:65:0d:ef:fc:
6e:b2:a5:fe:89:3a:9b:a7:cc:db:56:28:7f:90:ff:f2:a4:b6:
d7:d7:8f:7b:d7:53:40:d1:fb:e4:de:e9:65:86:ab:1c:41:0b:
ee:da:8a:22:4e:b8:13:3f:5c:0d:72:f0:65:3d:66:4c:90:05:
f5:8c:10:03:77:cb:d1:a3:2e:44:fa:be:a6:3f:3e:51:c6:1f:
48:9e:99:d9:dc:53:b9:1c:e9:dc:44:b0:cd:06:26:4b:c0:42:
94:8e:55:70:d7:00:4c:e9:09:80:8c:a4:5b:8d:95:5f:16:32:
b5:a4:64:9e:2b:84:49:b7:d3:e7:ab:18:ae:95:13:cd:f7:01:
a0:04:f3:b2:ba:0b:cc:b1:55:1a:f6:bf:56:ae:a5:15:2b:b2:
dc:fd:5f:f0:ed:82:3a:fd:ac:5f:e5:a1:de:66:b0:39:51:66:
09:2c:43:0c:be:53:ce:ff:79:d6:9e:f0:8f:59:78:e6:fd:c8:
84:e7:1d:7d:6f:97:25:03:d4:6b:da:6c:f9:38:d0:ed:5b:b4:
ff:64:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:08 2025 by rpki-client