Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501487C4B8A911F0BF780E86DAE4EC9C.roa
File: 501487C4B8A911F0BF780E86DAE4EC9C.roa (raw, json)
Hash identifier: D+kFkftu9jQTD6qmuiwgEJzJiYWfz06VmspY5pYcm38=
Subject key identifier: 61:28:7D:EE:DF:29:85:3A:42:D3:32:C7:53:7C:17:22:77:A3:A3:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501487C4B8A911F0BF780E86DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 11:36:18 +0000
ROA not before: Mon 03 Nov 2025 11:36:13 +0000
ROA not after: Wed 10 Dec 2025 11:36:13 +0000
asID: 141159
IP address blocks: 156.233.224.0/24 maxlen: 24
156.233.225.0/24 maxlen: 24
156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
156.233.236.0/24 maxlen: 24
156.233.237.0/24 maxlen: 24
156.233.238.0/24 maxlen: 24
156.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Nov 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99489 (0x184a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 3 11:36:13 2025 GMT
Not After : Dec 10 11:36:13 2025 GMT
Subject: CN=690893b2-9f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:2b:b6:9b:3e:b0:52:4d:11:7c:48:b5:9a:
ec:ba:1c:5b:21:7a:67:df:a3:23:5b:73:ed:08:f4:
c2:ff:77:4a:06:7d:a7:88:b3:ff:cc:ff:8c:c5:bd:
2f:dd:a7:be:7b:07:6d:c7:3c:27:18:a4:0f:71:bd:
a0:ae:db:a7:2b:0a:62:c1:59:31:26:f0:59:72:c3:
ce:23:68:13:05:d7:2b:94:2a:3b:55:92:72:de:f8:
26:9f:2e:66:b0:9a:38:e1:45:f9:13:5a:aa:8f:1f:
40:35:ce:1d:eb:b9:3a:2d:ce:b6:ed:cd:f0:e2:5a:
08:60:bb:7b:42:14:69:63:df:20:5a:c5:f1:45:68:
23:c5:20:ec:78:a3:24:76:70:1b:0f:ab:78:e6:66:
04:65:a0:9a:3a:9a:1f:b1:7b:55:f6:86:ff:42:b3:
3d:2b:52:e8:35:03:1f:84:6c:74:ba:64:cb:ab:1a:
d2:17:ea:16:69:f9:af:9e:e0:a1:23:63:0f:99:a2:
19:19:55:10:c5:22:42:5b:83:5c:bb:b3:bd:74:f1:
25:1b:69:89:18:3e:8c:f7:ca:b7:0b:8a:f5:7e:a0:
75:b8:2c:5a:89:e5:1e:d8:54:54:e2:3d:3f:fe:a3:
df:a1:8a:c9:a0:19:d1:12:a5:d4:16:74:3f:7a:2f:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:7D:EE:DF:29:85:3A:42:D3:32:C7:53:7C:17:22:77:A3:A3:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501487C4B8A911F0BF780E86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/23
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
73:cf:a8:f9:6e:6d:48:c3:17:cc:c5:47:68:e5:59:4d:37:e8:
e9:dc:f1:13:3a:00:6c:46:cb:48:c4:e3:a8:a7:ed:75:2b:07:
cf:a6:f9:a8:6d:d4:3e:df:6f:25:d2:7e:f8:4f:35:56:0e:89:
87:6b:7c:f3:88:1d:da:cb:3e:c3:b9:69:fb:4d:35:5c:4f:85:
4f:e8:36:41:de:6e:3d:f8:df:59:02:91:f8:97:a1:5a:3f:f0:
30:0b:1c:38:8a:92:98:a1:2d:b9:94:ad:21:9b:3a:a7:ef:ad:
dd:89:9e:91:0e:04:2c:77:0a:7d:51:aa:85:5b:1e:74:15:5a:
95:d2:b6:b8:c2:3f:84:7e:07:cf:a5:62:f9:c0:69:a0:c2:7a:
91:2b:a6:c7:75:2f:e5:80:a3:55:3e:4f:fc:00:88:6b:1e:94:
a3:3a:f1:a6:34:42:a8:99:66:55:3d:e3:ea:38:27:f8:8c:3c:
66:de:32:97:67:21:ad:e4:da:ed:2e:88:fe:d7:e2:b7:c1:5b:
bb:72:33:27:01:f4:f7:ee:ec:b2:96:cb:fd:30:9c:4d:9b:e7:
cb:fd:28:66:9d:19:ef:6b:f4:27:fc:7e:77:eb:2d:f3:a7:ce:
d9:cc:5d:33:04:b6:cb:63:ad:a6:44:00:53:0d:50:75:e6:de:
4e:ef:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:00:13 2025 by rpki-client