Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F24B6C2A50011F0BD9288A2DAE4EC9C.roa
File: 7F24B6C2A50011F0BD9288A2DAE4EC9C.roa (raw, json)
Hash identifier: aPL+E8YurawAxbvsXqF5YvzuIjg7TYMkb9MGIFYQZyI=
Subject key identifier: C5:45:81:09:C2:A0:F1:9B:3D:19:90:CA:63:32:4F:2F:A3:18:83:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F24B6C2A50011F0BD9288A2DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 11:10:01 +0000
ROA not before: Thu 09 Oct 2025 11:09:54 +0000
ROA not after: Sun 16 Nov 2025 11:09:54 +0000
asID: 22773
IP address blocks: 156.242.54.0/24 maxlen: 24
156.242.55.0/24 maxlen: 24
156.242.56.0/24 maxlen: 24
156.242.57.0/24 maxlen: 24
156.242.58.0/24 maxlen: 24
156.242.59.0/24 maxlen: 24
156.242.60.0/24 maxlen: 24
156.242.61.0/24 maxlen: 24
156.242.62.0/24 maxlen: 24
156.242.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98245 (0x17fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 11:09:54 2025 GMT
Not After : Nov 16 11:09:54 2025 GMT
Subject: CN=68e79808-9a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:de:cf:5f:19:a5:45:f9:9e:89:35:93:1b:
45:99:ef:c1:45:79:72:1f:b3:9c:0b:c5:e4:02:56:
22:03:65:77:02:ce:16:40:bd:7e:1f:3f:f3:50:53:
ea:d4:0d:c3:16:cf:7d:a8:5d:3e:12:7f:8c:10:47:
8a:5e:34:5d:8a:59:1d:fd:94:9f:9e:02:f1:15:1c:
22:61:2b:0d:51:8e:ea:92:4b:12:12:8a:b6:b2:1c:
43:95:30:e9:40:94:17:6d:fe:b9:f0:bf:1e:4d:ed:
9f:49:06:42:1f:eb:73:47:b7:56:04:4c:c3:e8:9f:
94:b7:a8:ce:8c:76:53:da:fa:9e:bf:3c:11:65:b7:
76:88:9b:4e:24:e5:f7:5b:d9:ea:d9:b0:81:65:87:
41:70:67:bb:cd:83:72:80:f3:0f:b0:25:53:31:f0:
a2:63:70:bd:a4:d0:c9:9b:c4:71:8e:61:36:08:8c:
f3:96:a7:c0:36:a5:74:38:6b:dc:c3:08:90:3e:d4:
70:91:7d:d7:76:21:87:4b:b7:57:ba:68:ed:c8:9e:
39:67:bc:1e:6f:99:6b:c5:1d:26:57:16:bb:2f:20:
f0:2d:5d:37:48:e7:9b:9f:2e:35:19:c4:96:19:ff:
4f:30:a0:74:9e:8f:19:a6:5a:54:34:71:e0:b5:73:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:81:09:C2:A0:F1:9B:3D:19:90:CA:63:32:4F:2F:A3:18:83:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F24B6C2A50011F0BD9288A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.54.0-156.242.63.255
Signature Algorithm: sha256WithRSAEncryption
65:ef:b2:e3:24:8d:bf:4e:83:c5:f8:c2:5e:a9:92:16:15:13:
18:f8:80:8b:98:a4:10:57:62:a3:b0:cc:b2:9b:e6:d4:59:c5:
e2:d0:16:3f:cb:9b:24:f1:51:fb:27:b2:5a:25:cf:52:2f:d2:
23:40:37:c4:b0:3c:2c:69:d8:46:31:ff:0b:a9:26:2a:37:3b:
9d:21:4c:d6:ff:42:45:dd:c9:df:1d:78:91:f5:6d:4d:f9:96:
f1:5f:e0:ab:65:ac:9c:06:90:10:e5:9f:73:b6:09:72:19:98:
99:b9:c3:03:fd:67:f7:c5:3d:e1:c2:71:c0:1d:b1:7f:3d:23:
b3:06:b3:80:3e:cb:45:d4:da:ba:9d:6f:25:f1:09:d5:ff:e0:
7b:e9:0d:e0:31:84:86:ea:91:01:19:bf:8a:71:66:fb:cb:82:
a9:4d:f8:68:73:c9:78:52:55:6c:b4:93:30:97:ff:87:8b:fc:
d6:6c:ed:7d:30:4e:49:a8:92:1b:0d:bf:cb:d1:3a:9f:3d:86:
01:ec:40:1f:d6:a3:93:b6:2e:80:37:47:02:40:4b:d2:af:e9:
c3:65:fe:1d:f2:86:13:a9:ea:8f:1b:c6:68:53:8d:cc:65:37:
2a:7d:b3:e2:34:46:b6:6e:cb:b0:e1:87:65:52:f5:ac:31:1a:
b1:20:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:06 2025 by rpki-client