Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3504BE0A81311F0A8705B92DAE4EC9C.roa
File: F3504BE0A81311F0A8705B92DAE4EC9C.roa (raw, json)
Hash identifier: 0CCgQ5ARDtGW6K1qv9Sw3iKZkAC4CEnwSjKzzNg4iCQ=
Subject key identifier: 0F:79:DA:B8:68:96:FC:75:F9:A1:DC:D4:B3:EF:EF:A7:86:0D:2D:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01804D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3504BE0A81311F0A8705B92DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 09:06:49 +0000
ROA not before: Mon 13 Oct 2025 09:06:44 +0000
ROA not after: Sun 19 Oct 2025 09:06:44 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 09:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98381 (0x1804d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 09:06:44 2025 GMT
Not After : Oct 19 09:06:44 2025 GMT
Subject: CN=68ecc129-5cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:61:3f:a7:67:4b:cf:b8:69:5e:2e:46:95:
9b:3d:41:27:af:63:75:e1:37:d3:1b:0f:d7:03:33:
45:2c:88:e2:98:26:e8:cf:44:cd:7a:01:c8:ac:c3:
9a:b1:2f:60:1c:cc:05:d6:68:ca:3a:79:99:13:c9:
4f:43:13:18:15:7b:e8:34:e3:99:be:26:3d:c6:8c:
6d:cb:96:ed:73:43:b4:71:5d:20:51:a7:0c:55:8f:
b8:a1:8b:83:2f:3e:4f:c0:c8:81:f7:2b:01:39:b4:
20:39:96:4c:8a:82:ed:62:11:6f:78:b7:5e:b3:29:
ed:b0:b3:78:23:5f:af:55:06:fc:74:ab:3f:b9:f6:
bb:4b:75:40:27:d8:2c:9a:2a:14:76:55:b2:e0:15:
bb:58:88:f9:f5:59:61:bb:a9:db:a1:a0:f3:cc:21:
b3:af:d1:61:c6:f0:95:d8:c0:1d:5d:db:40:ba:ce:
20:47:05:82:b6:e4:34:f2:b2:ea:04:1d:9b:cd:f4:
62:03:66:65:38:92:59:4c:8e:f8:b3:68:6a:17:f5:
19:aa:ff:88:4c:a1:d4:1c:48:9d:1b:d9:44:90:c4:
cb:f9:d4:b1:2f:5a:30:88:52:46:05:e1:03:2a:9f:
b9:ab:d4:7c:73:2b:6c:cd:9f:aa:00:ab:b6:44:0f:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:DA:B8:68:96:FC:75:F9:A1:DC:D4:B3:EF:EF:A7:86:0D:2D:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3504BE0A81311F0A8705B92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:25:b4:dd:a6:cb:36:7a:79:8a:4a:21:51:41:69:d6:2a:7c:
7e:92:56:ba:e2:47:f4:46:e3:80:d6:82:1d:20:73:12:7c:8f:
77:9e:d0:5f:0e:dd:88:27:3a:53:7a:ec:1e:75:e3:3d:78:81:
9c:b3:cf:8d:84:0e:32:fd:f8:f1:e9:50:18:73:ab:82:f4:d9:
12:97:99:85:7f:58:7d:8d:48:2c:12:7c:bc:76:e4:76:68:cc:
7d:27:df:5d:04:80:e5:83:21:4f:45:7b:6d:c0:33:63:c0:b1:
75:ed:8b:50:2c:7b:a6:e9:35:da:83:4c:90:50:f2:6e:13:e5:
c4:54:5a:6b:de:a5:fa:a2:6b:44:36:b3:47:6d:7c:05:6a:8c:
96:ef:b0:17:7c:17:42:80:2d:0d:0a:05:f3:67:60:2e:43:02:
8c:15:40:00:b0:3a:53:f5:38:9d:dc:7f:b5:dd:bd:36:29:89:
17:37:49:54:f5:51:19:d0:b4:b0:54:2f:30:e1:eb:2f:4b:2c:
34:2d:82:65:e5:da:44:4e:dd:99:bd:4c:24:8d:9c:e0:8e:ff:
59:4c:51:35:d7:6c:e6:ab:27:b3:ef:76:f0:9b:85:be:54:49:
4a:c3:e4:9d:83:2d:f0:4e:21:31:fd:0c:e3:4d:9d:92:52:d6:
5f:0f:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:16 2025 by rpki-client