Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6BD1B4AA6B11F0BBE31883DAE4EC9C.roa
File: FB6BD1B4AA6B11F0BBE31883DAE4EC9C.roa (raw, json)
Hash identifier: Pr4PQgdEzbITjSmwwchOEz0J4ZUpKZEeIP4z97tO3x4=
Subject key identifier: CC:18:2B:36:F8:B9:34:7E:BD:83:04:C3:1A:A2:A2:39:EF:9F:FE:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6BD1B4AA6B11F0BBE31883DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 08:42:01 +0000
ROA not before: Thu 16 Oct 2025 08:41:56 +0000
ROA not after: Fri 25 Sep 2026 08:41:56 +0000
asID: 135097
IP address blocks: 156.250.4.0/22 maxlen: 24
156.250.8.0/21 maxlen: 24
156.250.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98554 (0x180fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 08:41:56 2025 GMT
Not After : Sep 25 08:41:56 2026 GMT
Subject: CN=68f0afd9-d913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:a1:f7:a4:fa:8e:7c:a2:53:54:79:60:44:
34:bb:45:03:22:de:6d:ca:2e:48:d1:24:07:5f:c5:
d1:a9:43:c9:c7:ea:c9:5b:80:da:07:a3:01:5f:8d:
12:f4:7a:9d:02:1d:4b:2d:fa:f6:30:6a:d4:f9:7f:
6e:f5:b2:e9:cb:9d:d4:da:64:bf:cf:79:11:02:fa:
78:ad:f4:13:5b:64:55:c2:d7:9b:98:c3:e3:72:ae:
c8:53:00:b3:aa:1f:b7:37:0a:10:61:46:d3:ba:c6:
ae:5e:84:b5:6b:80:07:f0:c5:c8:1c:f3:37:66:22:
5a:3f:ad:6b:79:e0:24:7f:d8:15:c6:e3:08:bf:13:
44:48:04:8e:73:20:41:fc:a8:c8:0a:9f:b7:e1:aa:
02:79:c4:98:72:f5:07:56:cc:55:20:cf:7a:57:ba:
4a:2b:ee:86:05:61:c8:7c:d4:49:fc:b3:56:45:8d:
04:90:d5:86:0c:42:38:ad:88:1d:89:fa:45:48:91:
8f:d7:8c:59:6a:04:42:1c:b7:19:b4:22:b6:ca:13:
63:86:2f:0f:35:2c:b2:38:64:00:e9:97:1d:36:df:
72:a0:91:8a:a2:2e:45:9a:b4:cc:2b:f8:82:ed:c8:
e5:56:77:c9:4a:29:dd:0a:e4:64:c7:04:ff:5f:04:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:2B:36:F8:B9:34:7E:BD:83:04:C3:1A:A2:A2:39:EF:9F:FE:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6BD1B4AA6B11F0BBE31883DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.4.0-156.250.31.255
Signature Algorithm: sha256WithRSAEncryption
57:32:93:12:e4:d1:88:af:3c:cf:00:6a:c0:4c:6d:2c:42:b6:
23:20:e6:8b:0c:57:35:aa:66:73:67:1f:2f:a7:e2:95:df:c2:
a3:ec:5d:db:a2:3a:b6:93:ae:76:22:6d:f5:59:b1:3d:cc:ae:
05:3f:59:f5:1f:c3:d7:d5:fd:a5:81:57:a0:b0:9f:10:f6:e7:
01:a5:20:44:4d:13:91:0b:f8:8a:a7:33:fd:02:6a:47:2e:46:
86:11:a4:25:e9:5e:63:f2:bd:4e:36:6a:e4:e9:f8:28:4e:d5:
5b:a4:d6:09:f9:3b:c5:e5:03:c5:7b:50:29:b8:8c:e6:a5:a7:
df:92:5a:1f:35:1b:30:07:43:62:42:25:08:92:1a:b1:27:7c:
8a:ae:46:9b:28:19:8e:f4:ce:7b:f5:2b:c0:c5:0e:ff:cd:63:
1d:c4:8b:f5:eb:4b:cc:24:b1:da:05:39:3d:90:7f:02:61:99:
d3:cd:97:85:64:7e:d1:8a:16:33:da:e8:47:23:45:e1:6d:fa:
46:80:b2:1a:4c:e6:89:13:55:5a:3e:df:e6:4c:7e:8e:b4:fa:
66:5d:85:32:5e:f2:0d:1b:c6:e0:ef:5e:4f:0c:2c:b6:5c:2e:
38:59:60:9c:fd:05:6a:55:43:48:de:f2:05:9e:cd:3a:f8:c4:
2b:e7:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:01 2025 by rpki-client