Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66843E88AE4911F097F37689DAE4EC9C.roa
File: 66843E88AE4911F097F37689DAE4EC9C.roa (raw, json)
Hash identifier: mHB/htpKIPXjy2sYL2RC56VZm3Fw6xSIApZFiz9EBx8=
Subject key identifier: 3D:A5:D9:00:F9:81:90:D2:97:7E:43:D6:8E:9C:53:DE:3A:96:6D:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66843E88AE4911F097F37689DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 06:44:33 +0000
ROA not before: Tue 21 Oct 2025 06:44:28 +0000
ROA not after: Sun 30 Nov 2025 06:44:28 +0000
asID: 137547
IP address blocks: 156.245.242.0/24 maxlen: 24
156.245.243.0/24 maxlen: 24
156.245.248.0/24 maxlen: 24
156.245.249.0/24 maxlen: 24
156.245.250.0/24 maxlen: 24
156.245.251.0/24 maxlen: 24
156.245.252.0/24 maxlen: 24
156.245.253.0/24 maxlen: 24
156.245.254.0/24 maxlen: 24
156.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98764 (0x181cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 06:44:28 2025 GMT
Not After : Nov 30 06:44:28 2025 GMT
Subject: CN=68f72bd1-c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:d4:67:cd:ea:60:f4:6d:e9:65:91:4b:bf:
af:f4:49:61:a6:8a:b3:44:0c:8e:40:c4:24:d2:8c:
da:03:f0:93:3a:84:1e:66:11:02:78:01:29:5c:72:
c7:a3:57:5a:80:37:bf:ff:20:dd:43:0a:83:5b:68:
d3:a3:c6:cb:45:53:8a:c0:87:f2:d8:29:20:8d:79:
d3:06:0b:41:62:49:d8:07:2d:23:dc:ea:64:c4:ad:
5e:71:12:c4:49:a4:c5:2d:40:3d:c1:49:d5:06:70:
02:c5:a8:d7:44:62:27:55:80:71:bc:95:ac:d1:c5:
09:75:55:f5:4a:83:9d:17:a7:24:4e:60:fd:06:4f:
02:89:0b:a8:6f:19:5a:48:ea:64:e8:ae:47:cc:33:
40:45:70:6a:42:08:51:87:ce:3e:ed:4d:62:e8:e3:
0b:cd:6d:5f:f3:fc:bf:2a:95:8e:a4:a5:3e:d3:12:
4f:d5:bf:29:89:f5:c3:f7:1c:d4:96:86:92:88:a7:
0a:d8:5d:d0:9c:24:57:7b:12:f8:20:2a:f2:f4:4f:
2d:23:3a:31:55:5c:55:ea:e5:88:08:46:5f:47:e4:
c7:92:8c:11:ae:36:ee:5e:eb:50:79:c3:ee:17:3c:
ab:7d:41:e9:df:5c:9a:79:59:ad:ca:11:11:d3:02:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:D9:00:F9:81:90:D2:97:7E:43:D6:8E:9C:53:DE:3A:96:6D:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66843E88AE4911F097F37689DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:41:d5:1d:a7:9b:4d:af:80:27:8d:c3:d9:b6:68:54:f9:e4:
0a:cb:c4:38:5a:3a:01:57:bd:a5:45:cc:ea:17:6a:99:e4:8f:
cc:c2:b3:16:67:e2:be:64:8a:ef:88:0c:92:b5:e8:cc:bd:3b:
bd:9b:57:ec:1c:01:db:cd:d7:b9:81:d3:bf:51:7b:8a:b4:82:
18:7f:e3:89:bd:bc:f6:d4:8d:2f:30:d7:97:af:9d:56:73:ed:
ac:7d:80:1e:d7:19:a7:87:25:b9:83:15:a6:50:b1:11:5a:90:
e9:f7:4d:30:98:db:70:ca:bf:12:8e:63:f8:29:0c:60:4e:45:
34:64:ff:9d:d2:1a:99:97:87:0c:e6:43:b5:ba:f3:8f:04:7c:
f2:51:69:65:5a:a9:cb:08:6d:9d:ce:05:50:f3:e1:7e:10:c3:
0a:3d:fb:3c:de:f5:de:94:2d:18:ef:96:f8:65:71:b2:86:cc:
38:64:e2:c8:83:82:ef:a5:b6:12:37:de:93:dd:d3:bf:72:34:
df:7d:eb:ed:00:94:d7:40:7e:fb:ce:57:bf:73:ae:55:27:0f:
f4:ce:2e:1f:43:da:49:14:63:9c:e8:79:5c:8c:ae:cb:11:3c:
74:e0:61:58:12:3b:61:04:bf:4c:84:e5:cc:0a:be:62:37:dd:
4a:ed:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:49:43 2025 by rpki-client