Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/711387AAA75F11F0961CF97FDAE4EC9C.roa
File: 711387AAA75F11F0961CF97FDAE4EC9C.roa (raw, json)
Hash identifier: pVRP8Fj0+RU8RWZIgIbTfdHHqZs9TsPH3DVduVL6MeE=
Subject key identifier: D6:AF:5C:16:2E:24:48:8A:03:02:FA:72:A1:F6:B4:60:66:32:68:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018010
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/711387AAA75F11F0961CF97FDAE4EC9C.roa
Signing time: Sun 12 Oct 2025 11:34:41 +0000
ROA not before: Sun 12 Oct 2025 11:34:33 +0000
ROA not after: Sun 16 Nov 2025 11:34:33 +0000
asID: 138415
IP address blocks: 156.247.32.0/19 maxlen: 32
156.247.32.0/24 maxlen: 32
156.247.33.0/24 maxlen: 32
156.247.34.0/24 maxlen: 32
156.247.35.0/24 maxlen: 32
156.247.36.0/24 maxlen: 32
156.247.37.0/24 maxlen: 32
156.247.38.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98320 (0x18010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 11:34:33 2025 GMT
Not After : Nov 16 11:34:33 2025 GMT
Subject: CN=68eb9251-66ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:74:b3:a9:db:54:13:2e:8d:d0:09:38:36:
fb:14:65:ee:71:b2:02:86:36:ad:b5:f5:07:30:5d:
1b:b6:8b:be:2e:e6:01:87:cf:74:57:33:dd:e3:a3:
1e:ca:01:cc:e9:38:63:28:f2:26:f6:52:e8:60:0a:
72:4f:b7:4f:34:af:48:af:86:f6:40:ff:cc:68:1f:
e0:7d:dc:ef:21:cd:51:46:25:34:da:41:a4:65:1c:
73:88:e3:25:a9:a6:aa:87:a2:38:44:84:03:6d:28:
5c:c6:1f:26:fa:75:45:1b:0f:25:a3:6b:92:af:bd:
fd:53:93:8b:c0:38:35:c0:e8:fa:34:ee:9a:90:d6:
37:e3:4a:46:3c:fb:b4:92:ed:08:d8:72:36:b8:e5:
3a:f1:bc:9b:a0:1b:77:26:e4:a8:90:92:73:88:dd:
14:bf:17:a0:81:a0:47:f6:c5:8d:c7:12:38:32:e8:
4d:3c:02:d5:e0:bb:c4:ae:94:90:52:6a:5c:e5:da:
1e:9d:58:d8:f0:cf:ca:25:89:05:00:9c:73:c2:92:
8c:0b:0b:bc:8b:f2:65:52:37:15:87:3f:22:7f:1a:
de:ea:f0:f2:d2:47:f2:9e:12:d4:bd:ff:3a:ad:f1:
95:42:bc:fb:df:cb:8a:8e:bd:ee:08:bf:f7:1b:d3:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AF:5C:16:2E:24:48:8A:03:02:FA:72:A1:F6:B4:60:66:32:68:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/711387AAA75F11F0961CF97FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:15:c4:f8:39:16:78:ad:7c:5e:92:0f:a9:86:ad:ab:fd:21:
37:cf:84:88:8b:56:e2:83:10:37:b1:f5:8a:03:5f:47:97:c2:
3e:74:d8:d0:c6:dd:a0:c5:39:75:59:c4:61:1c:02:7f:21:d1:
eb:d2:3e:23:06:59:f4:20:04:97:e9:31:f6:e6:9d:be:d3:5e:
16:28:0a:16:59:b1:d9:95:13:0c:f3:ec:c8:d2:2d:c3:9a:33:
0a:be:12:bd:ca:9e:29:f3:28:e9:d7:53:2a:ae:9e:6c:e1:1f:
81:3c:d8:3c:e8:d5:82:72:98:33:81:be:b3:56:17:1b:7e:f5:
ea:5d:31:1e:36:0d:13:81:e5:fc:c5:a3:58:32:e8:ab:f1:53:
b2:fa:30:e2:84:06:a7:da:c0:08:91:47:f8:ad:ee:88:2a:f8:
ae:97:6e:c3:24:91:79:f4:99:7b:88:1f:47:c0:43:0b:2a:5d:
b4:0f:79:c1:47:de:38:ac:8c:01:66:a1:fe:9f:3e:0d:d1:ce:
f1:dc:a2:fe:ea:68:e4:ba:d1:a5:1b:f6:df:ae:67:17:84:84:
37:9f:b5:ca:08:ae:4a:b1:d6:d4:b0:2a:cf:b1:ce:1c:73:69:
82:1d:2a:c9:84:f1:81:d4:0c:cf:b5:b4:7f:e7:36:05:15:0d:
28:05:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:13 2025 by rpki-client