Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC363E54834C11F086B670C7DAE4EC9C.roa
File: FC363E54834C11F086B670C7DAE4EC9C.roa (raw, json)
Hash identifier: MI9A7E/L+coLW9icOJA01DbklqsuEAKAipccmBjohwQ=
Subject key identifier: BA:AB:64:95:BF:5D:3B:AD:2E:B5:D5:4E:B4:AE:67:B6:3E:B1:7F:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0171C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC363E54834C11F086B670C7DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 13:51:53 +0000
ROA not before: Wed 27 Aug 2025 13:51:48 +0000
ROA not after: Fri 10 Oct 2025 13:51:48 +0000
asID: 138915
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.2.0/24 maxlen: 24
156.244.3.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.8.0/24 maxlen: 24
156.244.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94657 (0x171c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 13:51:48 2025 GMT
Not After : Oct 10 13:51:48 2025 GMT
Subject: CN=68af0d78-4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:b7:11:f3:2c:b5:60:24:6e:8c:1b:24:3a:
f6:f3:f8:6e:8c:36:bb:64:4e:48:6f:ce:0f:31:e5:
a5:76:70:7b:1a:2a:23:57:76:a5:c9:cc:a1:de:6c:
af:f8:a6:72:cd:87:56:7e:e0:e3:c6:88:37:ee:d7:
c1:e2:c6:12:f6:4b:35:c9:ef:f7:0a:6a:96:f8:1f:
4f:39:1b:c4:b9:68:85:20:58:dc:38:a2:53:b5:67:
46:d6:6f:31:b7:7d:c4:dc:41:2d:f1:e0:64:60:44:
6d:d8:55:71:6c:e7:b8:ca:3e:2f:db:74:79:5a:b4:
62:98:2d:e0:90:39:d0:3e:62:0a:6b:05:a5:5a:d9:
f1:44:d5:8f:2c:4c:46:34:86:b9:a6:2f:0b:76:09:
78:69:15:fa:21:bc:ab:35:f2:74:b0:c0:17:3f:86:
e8:5c:6b:cf:9c:75:82:e1:2c:23:ac:24:aa:4f:2c:
29:c8:e6:fd:b1:d9:5d:31:2a:87:a5:16:77:87:f9:
23:2c:ac:1b:57:f8:cc:67:53:28:ab:c0:bf:0c:1b:
86:ff:9c:10:f4:f8:14:24:86:fd:65:65:dc:ea:f9:
78:19:66:ef:c6:50:31:95:04:be:cf:e1:b0:e4:6b:
20:05:39:df:92:31:56:c6:cb:78:f1:e5:88:a5:31:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:64:95:BF:5D:3B:AD:2E:B5:D5:4E:B4:AE:67:B6:3E:B1:7F:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC363E54834C11F086B670C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0-156.244.8.255
156.244.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cd:b6:cb:78:e9:6b:aa:e7:ef:09:f0:5a:5a:32:5a:0d:2e:
52:db:a1:e7:b2:a6:6b:60:e6:b8:a2:81:95:24:b4:df:66:1e:
f0:66:42:72:85:d8:2f:67:17:a5:b0:24:67:67:4a:a7:ba:a8:
29:e4:be:61:ae:92:99:50:28:30:0e:29:7f:d8:cd:e0:c2:ad:
3c:89:e8:7e:0c:02:0d:bc:b5:70:d6:10:14:af:e3:09:c4:16:
f1:cb:ad:be:98:93:bc:ce:16:54:9c:6b:eb:57:bb:fd:5c:de:
99:71:2c:74:62:be:73:c4:b4:42:54:5e:35:aa:03:e4:7b:a2:
92:df:dd:0a:17:cd:61:31:c2:eb:98:0c:18:9f:ab:44:57:01:
94:df:3e:aa:ca:10:2e:d1:e2:b0:66:bd:af:44:14:c9:15:ee:
f4:e0:95:6d:61:c8:76:e0:47:13:b1:28:9e:33:09:cc:50:c0:
9b:99:26:25:08:ff:19:bf:42:62:13:8e:2d:16:20:81:f2:91:
97:85:96:e4:12:dd:5d:ba:d1:d3:81:d8:83:13:1c:a7:46:b9:
9f:5b:b7:a0:5f:15:52:67:d5:bc:b9:18:ea:d3:8f:54:f4:a3:
01:61:2f:44:ad:1e:32:e5:b4:8d:54:c3:4f:ad:d4:37:a5:48:
38:a7:e9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:01 2025 by rpki-client