Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED4F155C93A311F0AEE50DA7DAE4EC9C.roa
File: ED4F155C93A311F0AEE50DA7DAE4EC9C.roa (raw, json)
Hash identifier: PFkH2vnf5ko01cKp4oHLRIRa4Z11G9ZkTU2tLkpAxjs=
Subject key identifier: 31:F4:2C:6C:1C:F0:8F:87:AE:9C:D3:6F:52:E5:F6:02:A0:73:11:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED4F155C93A311F0AEE50DA7DAE4EC9C.roa
Signing time: Wed 17 Sep 2025 08:54:32 +0000
ROA not before: Wed 17 Sep 2025 08:54:25 +0000
ROA not after: Sun 23 Nov 2025 08:54:25 +0000
asID: 138415
IP address blocks: 156.234.0.0/16 maxlen: 24
156.247.32.0/24 maxlen: 24
156.247.33.0/24 maxlen: 24
156.247.34.0/24 maxlen: 24
156.247.35.0/24 maxlen: 24
156.247.36.0/24 maxlen: 24
156.247.37.0/24 maxlen: 24
156.247.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97198 (0x17bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 08:54:25 2025 GMT
Not After : Nov 23 08:54:25 2025 GMT
Subject: CN=68ca7748-e27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:41:08:e0:9d:81:ce:f3:02:76:6b:74:dd:
2a:b0:3e:5b:2b:50:b8:7f:86:d2:b8:db:d6:03:ff:
41:a7:ad:cd:4a:6c:37:5a:26:02:e8:fc:c4:ce:35:
5c:5e:51:62:13:d3:3d:2b:ef:c2:ce:28:b7:be:66:
68:3c:46:db:78:0d:c8:07:5c:2a:72:fe:26:9f:3c:
72:22:ab:71:a0:1e:07:b1:bd:c5:a8:41:98:a8:4b:
78:05:ac:2b:06:c2:92:03:ab:8b:d6:ce:99:62:66:
75:0a:62:43:18:10:4f:c8:be:21:87:77:1d:4a:85:
13:b8:82:d0:8b:db:c9:f8:58:85:70:38:70:78:62:
d2:b8:25:16:8d:95:ae:ee:c8:85:01:0d:9c:a0:ec:
b2:db:77:37:aa:6f:2a:ff:e4:38:90:04:4d:c0:fd:
47:e9:06:7f:93:d4:14:d1:07:a4:69:a8:99:2d:68:
b2:6c:00:4b:cf:28:af:30:1d:11:47:81:ed:a9:aa:
cc:5f:c6:f9:80:5a:2f:f7:80:09:28:56:1f:86:d2:
e9:12:f1:0c:97:12:97:21:2a:32:28:bf:47:0a:66:
f0:23:11:cc:04:f6:58:86:d8:fd:84:14:55:e2:4a:
48:05:04:f5:c7:fc:25:e2:77:9d:98:ab:4d:d1:af:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:2C:6C:1C:F0:8F:87:AE:9C:D3:6F:52:E5:F6:02:A0:73:11:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED4F155C93A311F0AEE50DA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
156.247.32.0-156.247.38.255
Signature Algorithm: sha256WithRSAEncryption
9b:9d:47:17:ab:3d:6b:18:57:cb:a4:fd:67:62:77:d4:43:20:
c5:83:51:53:a4:cf:26:56:09:3d:43:a5:98:12:d8:61:06:49:
0d:fd:85:85:34:68:87:15:be:37:5d:3b:4b:9a:29:64:f9:37:
ff:ac:39:24:f2:9e:8f:00:c1:f6:94:b2:2a:9c:18:e8:cc:90:
8a:fe:e6:68:43:cd:03:44:51:f0:e6:db:a1:11:2e:c5:73:50:
6a:fd:cd:88:9f:a3:fb:b5:25:82:33:e1:97:2c:34:29:b0:c1:
a0:08:4f:c1:42:f2:fc:41:b8:68:b2:db:6f:b5:46:9c:37:63:
3c:d2:9c:b7:ff:35:11:5a:e8:7c:37:a2:16:d1:84:8d:ea:93:
35:49:7e:19:6d:25:38:e9:28:89:df:93:0d:45:55:ff:0f:18:
42:7b:ba:0a:93:48:9f:85:9a:30:40:19:d8:3d:cb:82:7d:a4:
2e:eb:24:92:86:a8:b2:bc:93:4d:d7:16:34:b0:a6:e4:a4:b7:
27:cc:e6:d3:5b:3a:eb:d9:b3:27:03:fd:9d:a6:23:c6:b9:cb:
f4:47:48:5d:25:9b:8e:d8:62:17:98:45:4f:fd:55:35:f8:3f:
e9:02:d1:a0:07:b9:37:f1:60:35:db:56:03:85:52:a1:f6:74:
6b:9b:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:17 2025 by rpki-client