Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D711E5E294A911F089F5C0BDDAE4EC9C.roa
File: D711E5E294A911F089F5C0BDDAE4EC9C.roa (raw, json)
Hash identifier: flMFUG3e9xe60KRROZFZx+EClNWpv0EKmWivT3h7slM=
Subject key identifier: 7B:FC:A5:F8:15:48:8F:6C:B8:2B:F0:C7:4F:5D:89:25:16:41:A8:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D711E5E294A911F089F5C0BDDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 16:09:23 +0000
ROA not before: Thu 18 Sep 2025 16:09:18 +0000
ROA not after: Sun 16 Nov 2025 16:09:18 +0000
asID: 138648
IP address blocks: 156.247.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97294 (0x17c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 16:09:18 2025 GMT
Not After : Nov 16 16:09:18 2025 GMT
Subject: CN=68cc2eb3-82bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:cb:57:89:22:a9:9c:59:19:e2:a4:99:0f:
91:47:3b:2d:b1:0b:d2:d3:e1:87:fa:14:5e:e7:ba:
c5:76:f9:3c:74:80:47:ea:75:21:fc:be:99:00:66:
7a:a3:eb:7f:5a:e7:7d:3d:f1:67:a4:37:51:42:bd:
35:d9:4c:d6:8a:be:3f:5a:da:b7:06:ec:22:48:61:
bf:0c:c4:ea:a5:10:9a:fc:c6:76:dd:ee:54:7f:78:
64:7b:9c:f7:f8:5e:50:71:6c:bb:be:20:94:e7:87:
77:f0:1a:52:e9:a7:9a:52:12:f7:12:28:f1:7c:ab:
90:4e:7a:70:f8:fb:ec:ff:f6:de:9e:7c:a9:c2:42:
40:59:68:46:6f:e0:89:ef:3f:8b:4a:07:71:65:f9:
b0:7e:29:17:48:8c:44:0b:6b:ff:69:5c:4b:13:6d:
8f:53:5c:cf:f6:0c:f0:33:c5:2a:cf:86:b2:e4:da:
aa:e1:72:19:fe:46:e9:ce:29:30:d8:76:c4:cf:94:
84:a8:77:40:70:28:3b:ef:0a:d0:3c:f0:28:3a:38:
ca:0b:6b:46:77:5c:73:ed:a3:ea:01:4e:af:14:72:
1f:01:56:51:9e:f8:8f:74:29:1c:b8:d3:90:06:da:
95:13:8d:26:c9:52:c4:db:0a:c5:0a:6c:7e:0d:5b:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:A5:F8:15:48:8F:6C:B8:2B:F0:C7:4F:5D:89:25:16:41:A8:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D711E5E294A911F089F5C0BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:20:41:9e:b0:af:72:fd:c7:8f:bf:c1:1c:8a:c6:7a:a5:34:
b8:8e:d7:d5:fd:4e:87:7c:14:87:f0:ef:cb:1d:1d:16:47:ed:
ec:1b:27:dd:11:f9:8f:2f:37:c2:cd:0f:6b:43:24:08:f1:3a:
36:f4:ac:4a:f4:9a:bb:ce:f8:91:87:88:34:0f:ac:4c:eb:c5:
9c:28:92:1d:e3:01:87:80:65:b5:bd:b1:14:9d:f4:e2:8e:75:
d5:fc:c0:79:18:6d:65:90:43:3d:c1:ff:4d:18:2a:8e:6d:d6:
14:96:e3:dc:c5:ca:f6:32:f9:db:b2:57:df:49:48:cb:9a:4f:
0f:cc:9f:eb:6d:9f:52:98:79:70:c8:6c:da:8f:43:9b:6d:4d:
07:4a:69:c8:cb:3d:59:e8:78:76:50:9f:eb:12:34:42:05:14:
cd:97:0d:73:57:e9:05:05:1a:d0:62:54:02:5e:8c:a3:58:25:
5e:53:65:b7:4b:d8:6f:6d:23:60:32:bc:9f:d0:be:ce:3d:8e:
fb:fd:7c:c4:22:9c:15:f5:8c:fe:ca:cb:17:d6:12:c7:39:fc:
6f:d7:de:8c:e1:0f:3e:6c:83:7b:31:ef:ee:fd:11:b5:40:d7:
e2:b7:82:df:f5:a5:04:34:e7:5c:f2:c1:81:3e:84:fc:ee:c3:
4a:15:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:46 2025 by rpki-client