Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E2BA6629DCE11F0B4E3C47BDAE4EC9C.roa
File: 5E2BA6629DCE11F0B4E3C47BDAE4EC9C.roa (raw, json)
Hash identifier: zasv3XbPKnsawvJQkaSsfYG7LGAjvLIdboR5HMyF9po=
Subject key identifier: AE:9D:C6:FD:B5:CE:A9:C9:D4:71:B2:30:2B:C2:33:1D:5D:C8:AC:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E2BA6629DCE11F0B4E3C47BDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 07:23:32 +0000
ROA not before: Tue 30 Sep 2025 07:23:24 +0000
ROA not after: Tue 28 Oct 2025 07:23:24 +0000
asID: 44559
IP address blocks: 156.246.219.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
156.246.229.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
156.246.234.0/24 maxlen: 24
156.246.235.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97809 (0x17e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 07:23:24 2025 GMT
Not After : Oct 28 07:23:24 2025 GMT
Subject: CN=68db8574-ad23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:f4:b8:8c:01:a5:f1:a5:f7:f3:08:88:e9:
1e:55:69:9d:85:16:53:10:e1:35:96:74:db:0d:38:
bc:58:ab:d8:36:0f:bd:86:10:77:bc:8f:62:85:cf:
fb:63:39:97:56:df:36:83:05:39:f4:57:5f:c2:21:
cb:74:16:f1:ce:ce:9c:c2:8a:e3:dd:84:be:ef:70:
cd:80:70:52:ff:0e:5b:f1:ce:b6:b6:f8:12:f4:05:
60:c5:ab:18:44:de:2a:53:0d:fa:a9:e7:27:73:96:
3d:4b:70:46:8c:8a:9d:2c:79:c0:c6:cc:f8:c8:cf:
03:f9:1b:82:86:15:ca:33:91:91:45:f1:6f:bb:0a:
6b:09:f0:2a:0f:1f:3e:f5:b8:7f:16:5f:81:35:bc:
57:fb:2c:23:6c:08:69:5c:6c:5a:e8:f1:44:b7:90:
33:a2:43:aa:f9:15:8b:47:ad:7c:d3:01:cb:df:0d:
d6:a2:da:8d:ee:c8:e9:22:01:46:cf:54:0e:40:5e:
b2:b7:ec:d4:3e:82:48:51:3c:bb:0e:b2:68:88:ce:
d1:4b:eb:cc:dc:65:ed:d9:cc:b2:b6:39:a6:fa:0d:
7d:50:19:0e:bc:c9:41:17:d8:e6:f8:87:3d:0a:73:
4f:15:db:4e:84:ce:9a:0b:c6:14:a1:14:66:5f:ca:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:C6:FD:B5:CE:A9:C9:D4:71:B2:30:2B:C2:33:1D:5D:C8:AC:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E2BA6629DCE11F0B4E3C47BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.219.0-156.246.238.255
Signature Algorithm: sha256WithRSAEncryption
43:83:3c:52:7d:55:83:ca:3d:bc:5d:22:56:2e:ed:b1:05:ab:
0f:4c:22:06:7c:8b:2a:15:f9:ec:ab:98:e9:4d:40:7b:fd:92:
09:33:82:ab:f5:a9:03:1e:53:4e:eb:e3:f8:e9:c5:3b:0b:7e:
e1:82:be:44:a0:33:09:26:ce:d7:9e:45:c6:88:f2:15:98:78:
af:05:a4:67:3a:ed:94:fc:fb:86:3a:eb:aa:60:f6:48:31:99:
c8:ed:95:a7:9b:a0:e9:c6:b0:2f:9c:eb:cd:92:57:f9:8d:35:
eb:64:8d:f0:dd:cb:d2:48:c1:30:37:d0:58:af:56:50:a3:39:
35:40:76:d0:1a:d6:c3:48:e5:0f:27:20:df:ba:b8:a6:dd:67:
f4:36:b9:65:af:77:ce:93:c3:bb:de:67:6f:71:ef:20:6a:34:
5c:f1:f0:03:1a:7c:1e:be:99:86:0d:76:23:41:85:e8:7c:c6:
23:a1:9b:b0:a3:72:6c:55:a5:a7:83:39:43:fe:a1:74:d3:ad:
97:6a:16:c6:33:14:4e:b3:ad:c7:a3:01:8e:ec:82:3f:2d:36:
f4:44:54:38:c4:6f:78:9a:5f:56:34:4f:24:0a:14:ca:ef:28:
c6:64:df:9b:5a:37:2d:72:84:e6:07:ac:ed:07:9c:ec:5d:f9:
8b:99:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:04 2025 by rpki-client