Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002B37DEB00D11F092E3B2ECDAE4EC9C.roa
File: 002B37DEB00D11F092E3B2ECDAE4EC9C.roa (raw, json)
Hash identifier: m20AaEJGGXhA87N+Ckq/LvDxGTS/laGL57EqEDVOt8w=
Subject key identifier: C0:32:3F:5F:12:EA:84:AC:61:45:D7:02:D8:D5:92:47:4E:B8:48:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01825E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002B37DEB00D11F092E3B2ECDAE4EC9C.roa
Signing time: Thu 23 Oct 2025 12:37:14 +0000
ROA not before: Thu 23 Oct 2025 12:37:06 +0000
ROA not after: Fri 28 Nov 2025 12:37:06 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98910 (0x1825e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 12:37:06 2025 GMT
Not After : Nov 28 12:37:06 2025 GMT
Subject: CN=68fa2179-3213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:1c:a2:ac:33:75:16:5f:75:62:84:a9:fd:
03:f3:3e:15:ea:15:88:ae:07:6f:51:da:91:7c:24:
11:9b:91:be:c4:7c:87:74:b7:30:fe:00:2f:66:dc:
65:48:0b:c9:1d:44:fb:87:ff:e7:c3:a9:dd:b6:c3:
1c:cf:9f:32:45:bb:0c:2f:7c:b4:81:0c:48:6c:09:
af:62:94:f5:82:74:69:06:16:c5:c4:64:2b:48:c9:
78:1a:c0:cc:84:ff:b0:ce:d9:c7:a8:7e:b3:54:a9:
27:32:d5:62:24:73:74:7b:05:c4:22:7c:cf:1b:2c:
b5:be:52:6e:7b:a5:07:d9:6d:1c:72:bf:f0:53:cb:
bf:3e:13:94:8d:85:5b:64:35:bc:28:29:de:36:c7:
e3:99:19:5e:5c:83:d9:97:ed:4b:a3:77:7b:9d:3f:
53:b1:f4:de:68:0a:92:73:a2:61:dc:92:db:38:0b:
ed:eb:bf:e8:9f:70:60:60:c8:80:99:02:3f:87:9f:
e3:1d:3d:9e:58:29:70:84:c8:d5:dc:b1:51:32:49:
d8:15:6b:ae:9d:fc:87:09:70:8d:0f:dd:e8:9f:07:
80:87:3d:a5:9c:a9:c0:a2:7d:1a:9f:d4:25:47:9f:
9a:7a:14:f9:f2:0f:c8:48:50:f1:de:38:0f:79:48:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:3F:5F:12:EA:84:AC:61:45:D7:02:D8:D5:92:47:4E:B8:48:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002B37DEB00D11F092E3B2ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
40:52:59:92:01:01:60:2f:41:ea:c0:03:5e:56:93:4c:cf:3d:
ae:8c:37:5f:a7:b8:c9:36:a3:79:a6:e4:68:03:5b:4e:9a:64:
61:73:c2:8d:ff:88:c0:af:60:3d:7b:4d:1f:ea:5b:44:b7:95:
d5:26:55:01:20:ca:ee:fc:5e:da:81:38:eb:cc:79:03:f1:49:
b5:1b:2c:c0:fc:4f:e5:2b:8f:c9:2b:2d:9b:48:a0:1e:81:e9:
bd:3c:fc:e7:c5:cc:22:cf:39:17:46:70:e9:a6:21:d3:3e:34:
15:62:a2:5c:b5:8a:19:57:e1:6a:03:2d:5f:8a:84:97:d1:82:
04:91:6a:16:7d:f1:c4:df:9f:20:d7:7c:64:f8:6b:73:19:06:
46:3d:1d:ce:24:e9:ce:c2:c4:14:b6:73:7a:1f:38:3e:a9:80:
53:67:94:2d:36:19:61:49:6e:88:ae:df:77:8f:95:97:84:59:
f9:17:d4:30:26:a5:0f:1f:44:10:10:0d:c3:a7:81:64:21:3d:
0e:bd:48:cf:16:76:b3:db:bb:b8:bc:c2:61:31:3b:01:d3:15:
8e:2d:df:90:91:d4:a4:ea:60:43:12:50:ec:12:6c:35:11:4d:
7b:34:d2:4b:51:11:46:12:ff:bf:0c:5f:52:0b:18:19:32:ae:
5e:38:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:59 2025 by rpki-client