Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8848B6028CD411F0A76F6CCDDAE4EC9C.roa
File: 8848B6028CD411F0A76F6CCDDAE4EC9C.roa (raw, json)
Hash identifier: bwMeZd0JQv8I7Ea1cT2ZyWgA82LGuCVNyg1s1yH44uo=
Subject key identifier: 79:36:5D:03:B0:81:F8:B1:80:70:74:79:ED:0A:50:76:A8:36:7D:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0179DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8848B6028CD411F0A76F6CCDDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 16:54:50 +0000
ROA not before: Mon 08 Sep 2025 16:54:45 +0000
ROA not after: Sun 09 Nov 2025 16:54:45 +0000
asID: 328608
IP address blocks: 156.229.174.0/24 maxlen: 24
156.243.138.0/24 maxlen: 24
156.243.145.0/24 maxlen: 24
156.243.146.0/23 maxlen: 24
156.243.148.0/23 maxlen: 24
156.244.204.0/22 maxlen: 24
156.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96732 (0x179dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 16:54:45 2025 GMT
Not After : Nov 9 16:54:45 2025 GMT
Subject: CN=68bf0a5a-d61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:32:34:d3:e7:c1:58:65:de:a0:a1:14:70:
34:4e:40:47:98:ff:77:92:91:df:51:73:40:df:04:
0d:d7:c1:44:93:d2:03:19:0d:e6:7c:9d:16:f8:cd:
9e:a1:c1:73:bf:ea:fe:43:10:a9:4d:e8:8c:8e:aa:
79:ec:8a:f9:e6:50:b3:62:43:e2:21:f5:ce:41:7a:
87:f9:f7:de:55:76:7d:5b:73:e7:91:4c:21:d8:47:
e5:82:d3:29:40:17:64:d8:5c:44:05:c6:2b:00:dc:
e5:87:3f:49:43:af:c7:ce:f6:72:b7:c1:53:2a:f0:
f7:3f:68:f7:68:33:9a:b2:df:07:b1:44:27:d9:68:
d2:b8:35:0a:86:ce:4e:5a:f9:64:f4:73:13:34:ff:
a1:02:9c:88:cc:9c:38:31:6f:b8:c1:f8:90:ae:34:
53:39:a6:de:61:ea:cd:bb:e4:01:67:6d:52:d1:38:
cf:97:66:13:26:93:00:8a:af:69:50:3d:8b:d4:da:
05:e1:68:65:99:1e:2f:6e:c6:c0:b7:0b:ab:d2:fe:
8a:7d:df:5b:b4:dd:13:f7:22:15:51:93:a4:0b:8f:
ff:30:e9:03:8a:b1:d7:d4:81:92:f0:89:8d:d0:61:
b4:19:b9:b9:05:c7:bd:3e:25:33:95:4e:c6:56:51:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:5D:03:B0:81:F8:B1:80:70:74:79:ED:0A:50:76:A8:36:7D:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8848B6028CD411F0A76F6CCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.174.0/24
156.243.138.0/24
156.243.145.0-156.243.149.255
156.244.204.0-156.244.208.255
Signature Algorithm: sha256WithRSAEncryption
26:b1:96:fb:40:b6:67:eb:dd:a7:a5:b8:89:94:e8:18:d2:58:
58:a4:cd:42:70:e2:77:fd:68:a3:7e:14:7f:12:46:13:3b:d3:
91:ce:a4:8e:24:50:61:b4:61:7d:e4:58:66:ee:d9:27:33:2d:
3f:ce:b9:94:99:89:cc:38:26:5c:59:ac:29:13:31:56:f9:c5:
03:21:66:db:66:bc:e7:90:da:8d:1b:82:1e:d8:bb:aa:08:9a:
3f:ba:b6:ac:f7:f4:6d:65:a9:fa:65:98:5a:79:37:0d:71:ad:
e9:47:ec:a9:79:a2:ba:50:b2:31:58:85:2d:e0:a7:85:fb:33:
fb:11:d5:98:a9:12:46:a9:7c:28:0d:e1:77:2d:7b:21:cc:b3:
14:73:81:16:79:72:bf:10:4f:fd:4d:6a:72:a3:4f:9f:1a:b1:
17:9d:2a:e9:67:08:e1:ec:2a:e5:b3:b1:7e:14:5f:7a:ee:f3:
03:41:6b:99:df:72:66:70:a7:bc:f2:0b:27:6e:79:f2:ad:2a:
b8:95:b5:4d:83:5c:03:22:0d:9b:ce:e1:dd:c4:10:a6:02:0e:
90:8d:45:f7:0a:6d:99:53:c6:7e:ce:c9:b0:ed:82:58:b5:e5:
65:4a:bf:52:d8:1f:dc:bb:b3:26:a4:15:52:08:09:a7:c4:38:
1e:61:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:56 2025 by rpki-client