Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5838E650910511F09F4A23A0DAE4EC9C.roa
File: 5838E650910511F09F4A23A0DAE4EC9C.roa (raw, json)
Hash identifier: vDXwyHWX41XTIvddoo7tgYhGLTQbILCY0eXWTRCLPQE=
Subject key identifier: 4D:0A:E2:04:09:95:78:D4:D5:5C:C4:EF:73:F4:E2:BC:E0:68:F9:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5838E650910511F09F4A23A0DAE4EC9C.roa
Signing time: Sun 14 Sep 2025 00:54:19 +0000
ROA not before: Sun 14 Sep 2025 00:00:15 +0000
ROA not after: Tue 21 Oct 2025 00:00:15 +0000
asID: 203020
IP address blocks: 156.233.180.0/22 maxlen: 24
156.233.184.0/21 maxlen: 24
156.233.192.0/24 maxlen: 24
156.248.32.0/19 maxlen: 24
156.251.96.0/20 maxlen: 24
156.251.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97037 (0x17b0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 00:00:15 2025 GMT
Not After : Oct 21 00:00:15 2025 GMT
Subject: CN=68c6123b-a767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:37:74:f9:8d:fd:a4:53:7a:9a:40:33:7e:
b9:79:76:03:60:e7:0f:b2:76:04:fd:2e:80:ca:8f:
f8:4c:25:1f:f2:46:50:6c:96:ae:3e:84:b8:45:1b:
1b:dc:47:c9:6f:7d:fb:11:7a:07:a9:64:09:85:d0:
f8:a9:f5:ea:19:9e:9c:dc:63:ec:81:78:c8:07:69:
c3:28:4c:43:4b:74:d0:46:1c:95:61:42:e4:4b:76:
67:bd:12:47:6f:4e:90:91:fb:6a:f0:29:e7:5d:6d:
b4:59:82:f2:0c:59:bb:26:9e:ec:ba:5c:53:ac:ef:
8f:6d:15:c8:65:6f:b7:f8:a3:5f:bc:09:30:27:30:
52:db:8e:73:c6:97:f7:6e:05:26:aa:7a:76:36:26:
6d:90:0a:6a:a9:ab:91:67:ca:85:bf:fc:a1:da:0f:
99:25:95:94:03:1e:fd:9f:39:fb:6d:8c:9b:d5:94:
7b:3d:1b:ac:c0:ef:92:d3:cd:87:db:10:76:4c:32:
02:b0:07:6a:8a:e5:b7:3b:b4:bc:ce:2b:6c:52:92:
0b:50:b8:b9:05:5c:c7:8c:bc:02:a0:96:82:a8:a8:
27:eb:2c:93:56:21:4f:dd:36:c6:b4:9e:05:f5:69:
f4:64:ff:76:5b:c1:04:e6:04:9a:6c:d4:df:cf:2e:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:E2:04:09:95:78:D4:D5:5C:C4:EF:73:F4:E2:BC:E0:68:F9:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5838E650910511F09F4A23A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.180.0-156.233.192.255
156.248.32.0/19
156.251.96.0-156.251.119.255
Signature Algorithm: sha256WithRSAEncryption
24:c4:45:e7:70:60:27:6a:80:25:42:bb:3f:1d:ef:e3:6c:e9:
a9:50:5e:3b:7d:3f:bb:ad:c9:e8:79:1e:7f:5f:b0:47:70:a0:
4d:1d:19:ca:fe:b8:d7:84:a5:bf:4a:40:4c:e6:d8:23:45:14:
2f:bd:a8:9e:81:80:fd:e1:d1:5d:8e:bd:09:3c:e6:10:64:6b:
56:3e:ea:a4:95:1c:fd:34:89:26:42:77:61:2e:14:ba:de:7d:
2a:c7:e3:56:85:89:f8:c7:8a:5e:0d:90:3c:ad:29:25:f9:9a:
29:36:26:4f:4f:ba:ce:fe:1e:47:91:39:29:4f:ee:d2:a4:fe:
3a:73:67:86:89:8c:cb:5b:e1:f9:06:df:be:48:2a:02:5d:e1:
c1:6b:19:4e:f4:ee:c5:0b:7c:8d:dd:94:a4:df:4e:f0:78:76:
16:80:3c:6a:b3:95:aa:ae:cf:45:dd:40:86:1d:ec:d6:9f:6e:
54:e3:87:66:9d:5c:93:b4:c6:fd:e5:c1:ee:8f:4d:05:27:93:
9b:9c:14:0d:8a:fe:e0:63:c9:39:cb:42:13:cf:ac:1c:51:d7:
dc:27:5a:62:21:79:9e:b7:ef:13:71:b4:bd:ea:32:04:17:f6:
3f:16:9f:2a:de:6f:f3:da:96:78:40:39:e5:2a:78:a1:14:13:
33:66:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:48 2025 by rpki-client