Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77392DAA9AB11F0B54D2FD1DAE4EC9C.roa
File: D77392DAA9AB11F0B54D2FD1DAE4EC9C.roa (raw, json)
Hash identifier: v67U/Qw1786n5N17ddMLSi5ehsUgYPg7qXDTdXyDPfc=
Subject key identifier: CE:B3:BD:3E:3D:27:EB:C3:04:6D:BC:3C:BC:7A:2C:BF:F0:F6:86:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01809F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77392DAA9AB11F0B54D2FD1DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 09:46:37 +0000
ROA not before: Wed 15 Oct 2025 09:46:32 +0000
ROA not after: Mon 20 Oct 2025 09:46:32 +0000
asID: 136907
IP address blocks: 156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 09:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98463 (0x1809f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 09:46:32 2025 GMT
Not After : Oct 20 09:46:32 2025 GMT
Subject: CN=68ef6d7d-3b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:86:a4:be:23:0e:88:fa:9c:be:19:2d:0e:
63:e2:aa:db:e0:30:2a:ad:aa:e7:eb:dd:f0:0e:ea:
8c:c8:fa:de:37:e7:02:a6:b7:f3:2e:f9:6e:dc:ea:
20:e7:b5:d2:2b:75:e2:d4:d5:8b:17:43:9a:63:d0:
37:0a:0f:d4:6c:c5:09:95:aa:9e:4b:5a:a9:b5:1a:
08:df:5e:70:fd:23:c4:76:ee:3e:41:6e:b3:56:07:
be:2e:c2:c3:d6:1b:5a:cf:5c:09:8f:c4:02:7e:fe:
46:ca:03:64:75:63:8c:1b:29:31:8d:e8:8a:41:57:
ca:a7:ca:5a:d6:fd:46:e5:9c:7d:9a:a9:ce:fd:2b:
38:b1:fb:16:49:91:dc:d4:ba:29:0b:39:fa:46:d6:
be:9d:4a:b6:3d:a6:ad:71:78:d7:fb:e2:76:51:06:
48:f1:a3:3e:a7:f7:03:4b:d7:fc:8c:12:7b:84:8c:
7d:f0:37:d3:e0:2f:76:86:31:5d:f3:61:e3:ea:7c:
02:56:10:46:a6:fd:73:39:0c:8c:20:40:31:54:9c:
59:4a:89:e8:c4:60:0a:40:b2:d6:40:7e:df:f6:42:
70:a1:28:14:80:62:6e:5a:3f:35:fb:49:77:ec:7f:
df:c2:7a:24:c3:12:e0:74:23:0d:a5:84:8b:61:4a:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:BD:3E:3D:27:EB:C3:04:6D:BC:3C:BC:7A:2C:BF:F0:F6:86:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D77392DAA9AB11F0B54D2FD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.32.0/20
156.230.64.0/18
Signature Algorithm: sha256WithRSAEncryption
44:d7:14:f7:14:13:16:63:d1:7f:da:57:70:5f:91:e1:88:7a:
8f:f0:e2:fa:86:0d:e8:60:c5:37:de:ed:5b:4e:24:8d:1a:a6:
6d:4d:b9:ed:ec:28:90:1b:11:ee:2a:15:ef:62:60:a3:3b:e9:
e6:bb:07:ef:7e:76:c4:74:fc:2f:69:fc:51:71:f1:c1:cf:13:
9b:e5:65:a4:1f:99:c3:96:f2:2e:8e:0d:41:aa:da:b0:32:b3:
39:cc:fa:33:ef:21:66:7c:35:dc:af:54:85:64:52:0f:ea:77:
b4:ab:50:31:a1:f5:5b:68:cc:31:6c:91:25:d2:f3:82:23:69:
6c:a0:4f:13:d6:f5:78:44:e3:30:f4:06:98:39:79:2f:c2:67:
09:36:dc:f1:e2:89:db:b6:f3:da:75:85:e7:32:c4:10:3e:53:
fe:de:97:a8:d8:6b:59:c9:50:c7:8c:72:ed:b5:59:ff:7c:f7:
3b:47:b1:55:d1:50:02:93:c4:04:98:1e:73:b5:9d:4c:b4:49:
54:e5:74:aa:67:81:7d:93:91:52:e6:d8:7b:e4:af:1e:05:e1:
d0:b4:3d:95:19:da:90:e9:74:ca:e9:f1:2f:f1:73:47:e5:13:
ab:ca:7f:f6:05:51:ee:fb:02:22:12:61:e0:f7:e5:a4:e0:a6:
c6:34:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:11 2025 by rpki-client