Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B4777B0B96011F08171CE85DAE4EC9C.roa
File: 1B4777B0B96011F08171CE85DAE4EC9C.roa (raw, json)
Hash identifier: eHpfGXQQ8BvDv5mb5aYrN0mf25NFTrv3DLpi3M889xg=
Subject key identifier: 36:69:98:46:0C:3E:AA:3A:92:C5:DC:D6:6A:9C:17:7B:AA:CD:3F:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0184D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B4777B0B96011F08171CE85DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 09:24:48 +0000
ROA not before: Tue 04 Nov 2025 09:24:42 +0000
ROA not after: Tue 09 Dec 2025 09:24:42 +0000
asID: 200373
IP address blocks: 156.239.156.0/23 maxlen: 24
156.239.192.0/20 maxlen: 24
156.239.208.0/20 maxlen: 24
156.242.32.0/20 maxlen: 24
156.242.51.0/24 maxlen: 24
156.248.80.0/21 maxlen: 24
156.249.56.0/21 maxlen: 24
156.249.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99542 (0x184d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 09:24:42 2025 GMT
Not After : Dec 9 09:24:42 2025 GMT
Subject: CN=6909c660-d3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:f3:e6:b5:17:0e:c3:63:1c:6e:19:72:10:
da:80:0a:de:14:53:49:e5:b1:3b:c9:61:97:6e:84:
82:52:02:37:b8:70:2f:99:bf:b9:1f:27:d4:6d:ee:
3a:58:ed:f5:25:36:8b:96:3f:05:ab:1f:1c:d2:bf:
1e:79:f1:b7:43:48:eb:57:d6:a9:4f:e8:78:5d:d5:
78:56:8a:1f:8a:da:39:e5:63:5b:a8:b8:18:76:4c:
b3:85:cd:ff:eb:64:3b:f5:83:e1:46:28:9f:79:52:
b2:56:61:42:9b:69:d8:c6:b8:9f:24:96:a5:33:85:
21:26:0c:eb:9c:ba:8f:da:27:d4:dd:c9:6e:14:28:
c3:b9:ca:69:0f:ef:c1:cc:d6:f1:bd:ea:3b:75:0c:
64:7a:84:d2:a0:d4:48:08:5a:6f:ca:c6:c8:0f:f5:
05:dd:5a:5d:8b:8c:44:8f:2b:33:2c:0c:75:ff:01:
c5:58:dc:81:7f:06:0c:1f:7c:54:b1:00:ff:2c:8a:
72:4b:44:7e:11:1a:16:78:da:23:f1:cb:c8:81:88:
d4:61:70:8f:53:72:e0:65:3c:41:f7:60:ff:2b:c5:
6e:f6:a0:de:04:41:da:45:80:d6:d1:88:a6:8f:d8:
7a:73:af:7e:83:b4:54:e1:bd:82:88:87:ed:4a:1e:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:98:46:0C:3E:AA:3A:92:C5:DC:D6:6A:9C:17:7B:AA:CD:3F:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B4777B0B96011F08171CE85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.156.0/23
156.239.192.0/19
156.242.32.0/20
156.242.51.0/24
156.248.80.0/21
156.249.56.0/21
156.249.124.0/22
Signature Algorithm: sha256WithRSAEncryption
82:01:a7:d1:ec:60:54:8d:14:33:9f:57:83:5e:cd:eb:cd:05:
a7:dd:d2:fc:bd:09:06:91:a9:02:93:a3:c7:93:0f:8d:d0:a0:
c0:47:f7:4c:ea:8a:0c:70:ca:6c:8e:b4:ba:fa:1a:dd:94:1e:
9b:7d:4d:0d:64:4e:21:40:fc:3d:3e:79:6c:96:5d:01:30:3c:
11:b3:86:6e:77:af:02:7a:f8:7e:ef:a0:68:6e:23:29:da:8f:
3d:dc:58:6e:6d:2f:76:d6:59:e5:8f:71:79:b3:a2:f4:d3:75:
ce:58:51:0f:60:bf:a9:fc:49:5e:5d:a4:80:38:ec:90:25:ae:
c3:91:f1:f7:46:2a:3f:cf:8c:33:71:b8:16:9e:3b:ee:2d:b3:
2d:da:46:87:37:38:09:3f:74:e9:9f:a0:da:b2:a8:95:41:89:
bd:9f:08:fb:67:12:44:58:c7:b4:d1:3d:31:ee:ff:ac:e8:01:
45:35:1a:9b:d1:c2:8f:3b:81:8a:2a:5d:c5:cc:3b:3e:b0:4d:
47:c9:66:23:bc:1d:4d:71:74:f9:f0:90:cb:aa:2a:62:f8:f5:
bd:4d:77:fc:37:7a:3f:03:4f:9f:80:fe:1f:68:82:35:d9:1d:
cc:6e:a8:11:10:9c:8a:2d:76:fb:d0:ea:ab:68:90:f4:eb:b5:
4f:78:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:08 2025 by rpki-client