Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B896E71AA4F911F0A32C907ADAE4EC9C.roa
File: B896E71AA4F911F0A32C907ADAE4EC9C.roa (raw, json)
Hash identifier: DGaCgL3cpRFA2pv6Qc8qOvR0SEqbiC9KdCiR3heT4Is=
Subject key identifier: 29:55:E3:CF:9A:15:F2:BE:A3:DB:CF:C8:E3:B1:7F:D7:86:B4:22:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B896E71AA4F911F0A32C907ADAE4EC9C.roa
Signing time: Thu 09 Oct 2025 10:21:30 +0000
ROA not before: Thu 09 Oct 2025 10:21:21 +0000
ROA not after: Sun 16 Nov 2025 10:21:21 +0000
asID: 22773
IP address blocks: 156.238.154.0/24 maxlen: 24
156.238.155.0/24 maxlen: 24
156.238.156.0/24 maxlen: 24
156.238.157.0/24 maxlen: 24
156.238.158.0/24 maxlen: 24
156.238.159.0/24 maxlen: 24
156.238.160.0/24 maxlen: 24
156.242.16.0/24 maxlen: 24
156.242.17.0/24 maxlen: 24
156.242.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98237 (0x17fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 10:21:21 2025 GMT
Not After : Nov 16 10:21:21 2025 GMT
Subject: CN=68e78caa-0fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:f3:7d:5b:7e:55:c3:bc:65:b3:0c:4d:74:
bd:6d:76:c3:79:86:5a:b7:82:35:f2:45:cf:0e:ab:
92:2a:8a:a0:62:59:fa:4b:d7:87:82:d0:4c:06:05:
88:41:ee:b7:aa:38:fb:c2:ed:13:39:9b:f6:1b:24:
f8:36:41:82:58:f9:0b:ff:c1:09:92:e4:f5:d7:b6:
bd:b6:3a:5a:ff:26:17:0c:06:d5:e1:49:5d:cb:f2:
ee:5e:66:5c:0b:58:04:a8:ed:29:14:81:f8:b9:ce:
c3:ff:0f:37:03:29:ba:0e:2e:4e:ff:b5:e3:c8:e5:
3d:2f:ad:65:e8:76:d1:6a:8c:02:72:f9:d5:c1:d6:
84:4f:1a:60:d7:b6:fe:fc:87:0e:1b:f9:05:73:d2:
34:7e:ac:93:3a:49:85:88:42:95:b0:b7:83:82:68:
70:d6:d8:bf:8a:71:3b:f3:ce:23:ff:f4:75:57:15:
f8:cd:3d:9b:a3:1f:d2:e7:ad:23:cf:83:7b:2d:93:
44:5b:69:92:b4:36:84:23:a6:34:5d:b5:e0:4a:2c:
9a:c5:b6:ce:0a:a2:2c:75:a8:e5:ae:e6:7e:fb:c3:
f3:58:c3:e2:dd:a8:48:6c:58:4e:8b:07:24:03:df:
f3:ae:2d:bc:69:99:36:79:84:9b:5f:b7:70:a4:7d:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:E3:CF:9A:15:F2:BE:A3:DB:CF:C8:E3:B1:7F:D7:86:B4:22:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B896E71AA4F911F0A32C907ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.154.0-156.238.160.255
156.242.16.0-156.242.18.255
Signature Algorithm: sha256WithRSAEncryption
b9:9c:f9:df:ee:c2:3c:f5:ef:14:7c:1e:ad:f9:27:1d:02:3d:
9d:ec:24:54:c9:f1:87:6b:59:12:2f:fb:5d:10:4d:26:15:8b:
ae:45:d2:49:df:ff:df:c4:d8:d9:2c:22:a4:5b:5f:79:05:ea:
f5:d1:8b:13:58:38:a8:99:5f:5e:86:8d:c1:57:7c:e0:da:5b:
0d:3a:c0:f9:13:91:40:91:ea:64:66:90:31:26:9b:a2:e3:47:
fb:31:15:00:11:ec:fa:d0:e8:c4:cf:82:e6:46:dc:93:e1:73:
8c:f2:17:ab:14:2e:1e:e7:32:c0:11:6b:d5:92:93:f0:b7:33:
40:a3:16:f9:85:2b:03:0d:69:74:d8:ef:f3:c1:35:ca:6f:da:
1c:c0:57:93:18:f3:9d:02:6a:dd:f2:e0:0a:78:4b:8b:fa:ce:
42:92:9f:9e:7e:c8:c6:52:fb:4f:77:ca:11:0f:a9:60:f9:2b:
83:d8:9d:3b:e5:9b:66:6e:0f:2c:09:f6:2e:fd:38:08:1e:0c:
bd:a0:62:f2:1a:8e:46:e9:02:ad:35:4a:8a:13:cd:4e:84:60:
2b:ac:2b:58:86:2f:04:f1:0f:f7:35:e9:82:3d:ef:7b:08:aa:
60:ff:45:50:49:99:69:6c:f2:06:be:20:0c:c7:b5:98:9c:72:
f9:3a:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:00 2025 by rpki-client