Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AE0206996211F0BFE243CCDAE4EC9C.roa
File: F6AE0206996211F0BFE243CCDAE4EC9C.roa (raw, json)
Hash identifier: qlZNt2u9vL3C+SJn7xUmpM1tL+6eHeb88U4+tW1c8PI=
Subject key identifier: EF:49:44:C3:19:E8:3C:56:07:AE:78:06:F1:2A:15:45:D7:DE:1F:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017CF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AE0206996211F0BFE243CCDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 16:24:38 +0000
ROA not before: Wed 24 Sep 2025 16:24:33 +0000
ROA not after: Fri 31 Oct 2025 16:24:33 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
156.229.160.0/21 maxlen: 24
156.229.160.0/22 maxlen: 24
156.231.111.0/24 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97521 (0x17cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 16:24:33 2025 GMT
Not After : Oct 31 16:24:33 2025 GMT
Subject: CN=68d41b45-2a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ad:f6:7f:c9:14:21:55:2c:19:a4:7e:71:d7:
91:84:72:cf:44:8a:3e:79:35:d9:c2:0e:0e:e8:f7:
20:26:8e:81:3d:a3:82:d4:76:88:47:f8:c7:3f:fe:
fb:ef:54:a3:0f:53:07:9c:a1:21:8d:e0:4b:d2:a9:
d2:71:6c:64:82:37:a0:dc:1f:4f:d2:55:3d:fe:c9:
5a:c7:85:2d:0b:ac:99:0b:40:83:6d:72:92:dd:d5:
66:91:e3:41:79:cc:51:a2:5c:13:a3:d8:e4:29:1c:
c5:9e:ce:38:75:36:62:4a:09:4a:3b:c3:35:22:61:
e3:d3:0f:0a:ba:49:0b:9a:9c:28:02:86:5e:ba:b5:
22:2d:c3:56:c1:2c:d6:03:7e:3a:38:2b:b0:a4:45:
2d:52:e8:24:9c:3c:86:6b:7e:49:8e:de:9b:4f:8c:
53:49:19:29:8b:5a:32:d9:00:33:5c:a6:13:e9:fd:
f1:03:1c:4d:cd:31:5d:94:9b:6f:20:cb:0b:7d:09:
88:7f:0a:77:bb:1d:0e:a4:74:24:ef:7a:70:0b:28:
7b:20:74:91:e0:1f:06:bc:70:90:56:c0:0e:2c:85:
63:11:3e:51:0a:87:ca:f0:7d:b7:04:15:46:a3:7f:
45:2f:a3:d7:8f:42:33:d2:32:a4:86:a3:8e:16:47:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:44:C3:19:E8:3C:56:07:AE:78:06:F1:2A:15:45:D7:DE:1F:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AE0206996211F0BFE243CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
156.229.160.0/21
156.231.111.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:af:72:dc:ce:88:42:e6:0b:43:03:14:56:f9:e8:d4:0c:ef:
a6:63:e1:56:7c:16:d2:97:06:e2:d2:04:d6:19:c6:12:cc:ae:
2d:1a:b3:45:17:8b:04:ec:ef:96:f9:90:04:61:34:f6:73:f4:
fa:9f:b3:21:8c:ba:1d:3d:90:ba:fd:89:be:5b:4d:42:66:86:
eb:de:74:fd:ca:a8:40:0e:41:22:b4:7e:0b:a2:06:ed:5f:31:
6c:76:c3:78:dc:99:2d:22:94:33:4e:d6:a2:f9:76:78:8b:b0:
a6:be:fa:9f:95:2b:98:0b:d9:7a:3b:fd:09:01:3e:aa:17:46:
9e:3e:fe:6a:33:0a:25:9e:31:5a:5b:e9:fb:5c:d4:24:44:46:
67:eb:c2:40:c5:df:2a:cd:f4:5b:69:6a:e7:6a:da:62:52:cc:
c1:7d:51:5c:06:bd:5f:c6:3f:8d:4a:b5:1e:3c:bd:4a:47:73:
ba:78:f4:2b:32:b0:6a:65:f4:c1:b7:b8:6b:37:ed:16:a2:99:
8f:44:06:8a:d8:49:de:d4:71:22:15:a6:ca:4a:41:df:77:c4:
bb:43:1a:fb:fe:7e:aa:95:08:0e:3c:ad:ca:0d:62:d0:13:67:
96:d8:e5:8d:95:a2:0b:58:9d:fb:25:a6:31:1d:59:cc:9e:57:
7d:a8:71:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:06 2025 by rpki-client