Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E196E13C99E711F091B684B7DAE4EC9C.roa
File: E196E13C99E711F091B684B7DAE4EC9C.roa (raw, json)
Hash identifier: veQrs2Fv2rMBXhVk8kOpZ2XEloXV9etLFji/u0p+7lk=
Subject key identifier: 6E:41:DA:86:D4:7A:EE:45:19:6E:7E:DE:A8:41:7F:38:A8:F7:13:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E196E13C99E711F091B684B7DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 08:16:05 +0000
ROA not before: Thu 25 Sep 2025 08:16:01 +0000
ROA not after: Sun 09 Nov 2025 08:16:01 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97596 (0x17d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 25 08:16:01 2025 GMT
Not After : Nov 9 08:16:01 2025 GMT
Subject: CN=68d4fa45-f115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:40:33:93:db:09:d8:f2:fc:fb:c5:2a:04:
23:11:86:32:0b:73:f7:1b:4b:82:5e:e9:14:c5:82:
10:5b:69:4c:6c:b8:6d:7f:1b:7c:5f:e4:1a:d7:b4:
6a:04:bc:ac:ca:79:21:85:1d:54:7d:16:e5:8a:48:
65:56:df:d6:de:1f:7e:13:65:0b:3c:64:3f:8f:83:
09:a2:d3:32:7e:8d:1a:bb:ab:d7:0a:e8:35:67:f8:
34:fc:db:6c:04:f4:08:50:02:43:40:4a:d2:7c:7a:
11:a0:e2:d5:4c:d6:c2:44:db:c8:8f:56:94:b3:1b:
80:26:96:6a:a7:41:37:07:4a:52:24:fb:ff:d3:49:
ba:3b:fa:dd:59:c9:ea:ed:7d:20:8d:e9:13:43:f2:
15:d2:94:02:dd:77:3c:3e:39:4a:4f:ea:36:f5:c7:
c5:64:f9:5e:98:d0:7d:d9:c8:02:2c:3c:f7:e2:4c:
31:7e:39:22:84:fc:f0:5b:23:b9:54:b4:84:41:8d:
a2:35:e1:d9:81:0b:97:96:92:58:cd:51:78:2e:d4:
ba:06:0c:d7:a8:76:83:1f:84:13:80:82:eb:0f:17:
61:3b:b3:70:35:2c:32:8b:56:6c:0c:3b:9c:90:be:
2d:1a:80:f4:2d:a1:05:38:af:26:97:e3:38:69:4c:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:41:DA:86:D4:7A:EE:45:19:6E:7E:DE:A8:41:7F:38:A8:F7:13:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E196E13C99E711F091B684B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0-156.244.24.255
Signature Algorithm: sha256WithRSAEncryption
a8:80:16:7e:a6:84:7e:de:bf:e0:e1:30:5f:0e:0a:e4:0a:41:
6c:c0:fe:a0:64:21:7e:c2:5b:ae:8f:14:fd:7f:7e:c3:45:5a:
b9:82:0e:18:a7:d8:c7:9b:5f:46:d4:b4:42:65:2e:f0:93:32:
32:b7:71:33:1d:09:c4:d0:c2:73:dc:cc:a9:7e:52:3b:07:28:
6f:4b:33:7c:d5:26:64:f4:09:ac:ff:cd:a6:e8:c4:09:19:1c:
d7:ef:d9:95:af:c6:28:cf:06:be:bb:37:32:05:38:fb:9b:2e:
a7:de:23:bb:96:d0:6b:51:9f:5b:e4:e7:5a:91:52:11:a3:82:
3b:7e:41:d2:68:fd:a1:1d:9d:cf:dc:bc:21:4d:3f:fe:35:04:
d7:c3:75:42:f0:b6:2d:21:4f:bc:43:4a:ee:7a:c8:4e:49:9a:
58:2a:d5:80:18:77:39:17:4b:50:23:6c:66:c7:82:6a:69:07:
c0:1a:96:a9:8c:cf:8d:f8:0a:ad:ba:7a:63:50:85:f4:b4:61:
0a:8f:1d:04:7f:af:e0:dc:41:28:e8:a9:ac:e7:a3:ec:e4:cc:
33:59:2c:a9:6e:35:c9:bd:f4:3a:24:0e:cc:e7:65:b7:84:87:
9e:f3:04:1e:d3:fc:b8:b2:be:3a:0b:e8:23:38:37:27:be:c3:
cb:6e:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:15 2025 by rpki-client