Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F44EF09E945B11F0B28FFCD1DAE4EC9C.roa
File: F44EF09E945B11F0B28FFCD1DAE4EC9C.roa (raw, json)
Hash identifier: gqjdbx1iX++CjSl4Gk+AotSgtHlcLVUfwimlUaqQm7w=
Subject key identifier: 12:C0:03:B1:54:02:71:0E:2F:08:13:85:C7:2B:5C:19:BB:18:92:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F44EF09E945B11F0B28FFCD1DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 06:51:51 +0000
ROA not before: Thu 18 Sep 2025 06:51:47 +0000
ROA not after: Thu 30 Oct 2025 06:51:47 +0000
asID: 137547
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97221 (0x17bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 06:51:47 2025 GMT
Not After : Oct 30 06:51:47 2025 GMT
Subject: CN=68cbac07-2fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:e0:51:a9:de:39:55:bd:7d:a3:df:b6:2e:
2f:cc:65:c1:71:1b:2d:b3:7f:08:30:43:44:95:e4:
1a:b9:0e:a5:eb:bb:7e:96:2a:1e:16:d8:a9:39:b4:
09:47:fc:3a:ce:13:2c:8c:2b:6e:2d:15:09:ed:c2:
d5:f3:47:3f:db:6e:ca:b1:5e:3b:ef:7d:22:5d:1d:
19:ea:49:5c:16:b0:30:59:0d:ca:29:92:67:b9:47:
6c:ea:ba:36:d0:8f:3e:19:ec:59:56:08:d7:dc:d8:
12:ec:73:21:d7:dc:15:a8:05:e6:29:6d:0d:34:40:
86:c7:a4:2e:76:89:a7:2f:cf:8d:83:35:60:2f:51:
0f:4a:49:d9:cc:de:19:2b:eb:3c:12:71:19:d0:92:
a8:8d:7f:89:c5:2e:98:cb:e9:df:c9:a0:de:9f:37:
d3:e5:a2:4a:bc:e8:15:ab:fc:52:d7:2f:99:1f:42:
c6:8d:e1:a3:d3:66:b8:ad:58:51:c9:62:f5:78:e3:
33:f7:8d:50:d2:35:8b:1f:63:e0:d5:4b:e1:74:e3:
22:fd:ce:f7:51:8d:a7:b6:00:47:e1:07:ac:d5:22:
63:76:8b:4d:ab:28:cd:b1:55:4d:3a:96:2f:79:b4:
cd:ea:87:4b:72:57:f2:57:ae:ed:2a:18:cb:b3:f4:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:03:B1:54:02:71:0E:2F:08:13:85:C7:2B:5C:19:BB:18:92:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F44EF09E945B11F0B28FFCD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:cd:86:7c:23:f7:d5:cb:50:8b:26:69:de:af:ff:65:9e:91:
b8:d4:25:d9:ff:d7:25:09:38:be:69:19:8a:42:19:5d:c5:4d:
64:c0:32:14:fa:08:02:b1:b1:f9:b1:d8:10:5f:ee:22:90:d1:
da:21:b2:a4:ba:0a:04:5a:45:77:6b:45:32:ee:f8:63:28:d7:
aa:ee:25:15:04:13:2a:36:9f:17:fe:8a:5b:33:a0:26:a9:59:
46:52:aa:5a:bc:1e:92:07:de:06:82:46:ff:e8:9a:17:9a:4a:
a8:e8:58:43:2d:1b:f4:7d:91:ca:6c:13:5b:b3:8b:77:0e:a8:
d2:66:d4:f3:e9:bb:05:16:1f:30:ef:20:1f:4b:ee:44:73:15:
f6:18:d6:5e:ee:b1:58:58:04:05:94:55:87:3b:34:0f:24:27:
c8:b9:42:22:a7:62:83:ce:09:a5:82:64:1e:b1:9b:6d:f6:9f:
9e:24:36:17:9b:88:65:44:34:a9:54:c6:d7:d7:13:33:8c:ab:
f6:7a:0a:8f:85:66:4c:cb:ce:ba:1c:08:17:32:9d:24:d5:3c:
49:1f:a6:58:9e:0c:51:4d:b6:88:a2:79:1b:b0:03:31:9d:d3:
0d:15:40:70:3e:0f:67:03:fb:42:b0:2e:4a:cb:1b:5a:22:9f:
65:2c:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:01 2025 by rpki-client