Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC6A0CA4AD9911F08E58BB99DAE4EC9C.roa
File: EC6A0CA4AD9911F08E58BB99DAE4EC9C.roa (raw, json)
Hash identifier: JQ/7spQ0zzUcLYoz8yVi1mFMBWSxjliuMAalvqbCLUE=
Subject key identifier: AB:4D:A2:19:4A:5B:5E:98:DB:51:9C:B3:58:D3:20:63:DB:8C:42:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC6A0CA4AD9911F08E58BB99DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 09:48:26 +0000
ROA not before: Mon 20 Oct 2025 09:48:21 +0000
ROA not after: Sun 30 Nov 2025 09:48:21 +0000
asID: 62468
IP address blocks: 156.245.244.0/22 maxlen: 24
156.245.244.0/24 maxlen: 24
156.245.245.0/24 maxlen: 24
156.245.246.0/24 maxlen: 24
156.245.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98727 (0x181a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 09:48:21 2025 GMT
Not After : Nov 30 09:48:21 2025 GMT
Subject: CN=68f6056a-9db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:84:98:e4:1c:02:30:4b:96:49:0f:df:77:
3b:85:bd:5f:c8:42:16:23:0f:c1:0a:52:2e:9a:1f:
29:2d:9a:28:ce:d5:1d:6e:2a:a6:2c:c0:40:88:c1:
b1:89:23:1b:dc:83:46:82:6b:48:9e:a4:61:a7:0d:
29:b4:ef:57:23:65:7d:a7:9c:d1:7b:b4:05:f4:60:
0b:d7:9d:6d:5c:c8:9f:35:e5:1e:53:84:83:de:4b:
8c:8c:b0:34:ce:8a:64:17:10:d8:32:7b:d9:3c:c5:
c0:9a:ba:61:c4:f1:af:01:49:a1:18:29:ec:4b:c3:
13:c7:90:72:70:04:37:7e:37:a3:13:dc:d5:ea:17:
04:cc:75:3a:1f:2d:cf:23:aa:70:7e:f7:a6:c6:91:
bf:d9:f6:ae:dd:54:31:b1:0f:a5:87:c5:99:2f:18:
69:47:03:57:cc:0c:c4:68:27:d7:b0:60:9c:36:fe:
9b:7b:a8:a3:fc:65:87:39:45:7d:19:ae:29:b7:6f:
88:a4:e0:23:36:53:58:b2:06:e4:e3:71:5f:62:c5:
bb:58:67:8c:19:4e:4b:42:72:db:83:f2:9e:ae:8c:
5d:06:87:41:44:a3:62:52:4e:03:25:58:d0:11:91:
92:cc:c5:da:a3:10:ff:4b:cd:ec:57:49:ae:00:a1:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:A2:19:4A:5B:5E:98:DB:51:9C:B3:58:D3:20:63:DB:8C:42:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC6A0CA4AD9911F08E58BB99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:07:8b:1a:e9:96:ba:60:25:2d:08:b9:84:7f:81:06:58:d3:
1c:5b:d0:7f:e0:19:1d:7e:dc:9b:f1:f8:da:b3:7f:ad:48:41:
03:12:a3:eb:45:9e:6c:15:2f:cd:e3:7d:7b:4a:f1:cc:ee:ae:
5e:6c:2f:b0:41:b6:80:8b:26:3b:0e:4c:9e:d9:92:cf:fb:f4:
24:2b:1f:1e:c9:74:d4:97:03:90:d5:96:bb:b0:47:b1:f7:07:
48:6e:da:d4:d6:60:83:64:69:9f:1b:b8:dd:18:25:db:3f:da:
c6:14:44:16:3c:60:ef:dc:e8:99:2c:eb:7d:a9:09:99:df:6e:
60:de:23:0d:c0:f1:98:03:ff:67:30:db:b1:54:26:fe:d2:3e:
db:26:be:9f:5c:54:32:f8:37:6e:31:38:30:3a:bf:a2:23:63:
bf:27:f1:72:63:dd:e0:e5:d8:5b:7d:c5:33:c5:be:98:65:3d:
ce:00:83:8e:28:60:1b:05:de:e4:4e:2c:d8:5c:34:1d:df:61:
15:ce:8f:ae:80:f1:58:66:45:ac:94:24:95:1f:0a:e8:a1:a5:
8e:84:8b:20:48:34:cf:7c:bb:ff:26:57:39:28:a5:3d:52:55:
70:5c:23:80:86:b0:f5:df:82:99:6e:62:95:23:17:cb:bb:03:
6d:58:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:57:55 2025 by rpki-client