Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A77A6654A80611F097E03FC2DAE4EC9C.roa
File: A77A6654A80611F097E03FC2DAE4EC9C.roa (raw, json)
Hash identifier: kELhQWFSQlabsGm8nQa0Wc+zV8jCKKc9BII/sQhPq5w=
Subject key identifier: 0A:5F:8D:DF:33:E6:11:40:6A:94:5C:59:C8:11:04:B8:66:73:78:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018041
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A77A6654A80611F097E03FC2DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 07:31:38 +0000
ROA not before: Mon 13 Oct 2025 07:31:34 +0000
ROA not after: Sat 17 Jan 2026 07:31:34 +0000
asID: 136907
IP address blocks: 156.227.22.0/23 maxlen: 24
156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
156.232.16.0/20 maxlen: 24
156.249.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98369 (0x18041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 07:31:34 2025 GMT
Not After : Jan 17 07:31:34 2026 GMT
Subject: CN=68ecaada-71d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:39:40:ff:60:f2:3a:86:54:52:5d:df:39:
e5:f9:31:7a:3f:50:f4:b7:ee:1b:c5:b8:60:fa:87:
e7:22:a4:e5:cd:04:55:d2:ad:dc:38:25:30:bf:03:
8c:12:81:21:b3:1e:4c:c3:3f:db:62:59:88:d7:34:
5b:37:d3:83:41:27:1f:af:87:d9:04:a7:ea:20:3f:
c1:d2:c9:b0:15:f4:ea:55:b3:41:83:1a:38:fa:02:
1a:32:5d:9c:e7:91:fb:eb:e3:42:03:54:9b:72:10:
70:fb:49:9e:2a:de:89:a1:70:a3:ad:f6:33:55:4d:
1a:d6:72:eb:0b:0c:02:2d:a9:58:c2:d5:52:d3:bb:
b0:c8:03:f5:4c:57:fd:b0:21:aa:4c:45:b7:8e:3b:
bb:ef:d2:e8:04:a9:5d:56:74:8f:06:9b:a8:03:2c:
10:f0:9c:89:28:34:88:63:70:cd:62:47:f6:3e:99:
20:37:b2:9f:9f:1c:13:0a:8d:d6:81:d2:c5:37:8a:
1e:91:7e:45:d5:18:f8:f1:39:0e:27:73:ab:eb:f2:
7f:2b:0d:d6:d8:f1:c9:5a:f2:15:dc:4d:3e:ff:d7:
a9:17:69:da:27:1d:43:3b:72:26:0e:7c:ab:2b:4c:
67:b7:fa:ab:28:40:46:9c:86:97:6c:50:c1:f2:0b:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5F:8D:DF:33:E6:11:40:6A:94:5C:59:C8:11:04:B8:66:73:78:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A77A6654A80611F097E03FC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.22.0/23
156.230.32.0/20
156.230.64.0/18
156.232.16.0/20
156.249.32.0/20
Signature Algorithm: sha256WithRSAEncryption
99:28:d8:ad:40:7f:08:0c:c5:58:03:46:f6:91:5f:26:22:2d:
36:7b:51:d0:49:aa:e1:05:07:1b:c0:e0:10:bf:7a:87:e1:c5:
f9:fa:a7:7e:cd:27:38:8e:6c:77:d3:e4:03:39:3b:5a:39:e6:
cb:26:06:a8:0f:de:2a:c5:f6:dc:5e:b6:09:b5:5b:b9:ae:04:
73:b3:96:b6:05:f2:e6:c7:7b:7b:83:a2:03:dc:d8:53:b8:35:
c0:e1:13:be:af:4f:0b:03:3d:f0:12:10:45:b8:5b:f9:1e:d3:
7c:e5:05:f2:1a:0b:bc:58:95:10:c4:87:65:4c:8e:7b:73:73:
a0:ed:74:f4:05:44:16:0f:64:26:84:38:67:11:b1:17:6f:84:
7c:54:16:96:5e:0a:1e:b7:b3:7f:23:43:eb:17:4f:96:ec:9c:
50:a5:ab:e7:76:09:b2:54:96:6c:e0:17:9f:ff:95:3a:3e:7d:
26:bc:58:dc:67:7d:17:ba:a7:63:df:6b:18:36:80:18:f7:d0:
40:fc:a4:89:78:35:d8:ce:78:ea:b6:b5:e1:34:72:41:d4:ea:
7b:e3:14:2b:6a:3d:0c:4b:55:ba:d2:3f:bc:ab:38:16:e5:6e:
1d:2d:54:bd:05:1b:4d:30:5d:7c:0a:7a:45:04:2d:2d:e3:72:
7d:38:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:01 2025 by rpki-client