Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47EE3FBAB31611F0A5CE10DDDAE4EC9C.roa
File: 47EE3FBAB31611F0A5CE10DDDAE4EC9C.roa (raw, json)
Hash identifier: xHpHn/t1rBKog2LJW9fjPpWNrmGwgFN0vAqDKgeKEZQ=
Subject key identifier: 0C:14:7C:09:68:52:36:04:FB:F1:49:2E:3A:C9:75:98:2F:31:9C:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47EE3FBAB31611F0A5CE10DDDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 09:21:13 +0000
ROA not before: Mon 27 Oct 2025 09:21:08 +0000
ROA not after: Sat 08 Nov 2025 09:21:08 +0000
asID: 55714
IP address blocks: 156.238.72.0/24 maxlen: 24
156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
156.238.77.0/24 maxlen: 24
156.238.78.0/24 maxlen: 24
156.238.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99007 (0x182bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 09:21:08 2025 GMT
Not After : Nov 8 09:21:08 2025 GMT
Subject: CN=68ff3989-96ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:96:7e:9f:9e:5c:e2:31:9a:e5:d7:c1:b5:
d9:c0:ca:c1:32:53:ff:21:b8:97:15:a6:dc:c4:14:
69:53:4e:7d:66:8b:d3:c6:49:30:8c:00:f6:95:14:
1e:73:c2:9b:64:74:b8:03:6b:8c:98:fb:09:60:19:
fc:94:db:bc:dc:68:74:88:e5:22:e9:b0:05:c4:81:
d6:7b:06:80:52:0b:ff:07:98:c5:c3:00:c7:3f:76:
c2:31:61:e9:1a:ac:38:5f:d6:13:91:75:34:82:9a:
f1:73:99:56:6e:c4:92:15:5d:42:1d:69:62:5c:db:
b3:28:b2:f8:2d:5d:87:f9:2c:7e:05:a9:da:43:ca:
9c:8e:db:f3:9b:2b:73:3b:f4:9b:17:b4:f9:09:9d:
51:9f:09:b0:1e:8b:8a:af:51:ca:ca:85:0b:2a:2c:
32:9a:61:85:10:b3:d2:2b:72:fa:47:92:09:a1:5f:
df:a7:c1:a5:ff:88:4b:01:2e:fd:54:5e:5d:b3:df:
6d:8e:89:5b:3c:ef:97:47:19:cc:4f:c8:47:bf:91:
3e:05:35:32:23:20:21:6a:20:a5:fd:14:82:7e:f1:
2a:bd:0c:68:b6:0a:e0:a4:62:7f:5e:49:54:4d:52:
f6:51:d5:c2:19:36:1d:ba:2d:fa:c3:43:27:f9:db:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:7C:09:68:52:36:04:FB:F1:49:2E:3A:C9:75:98:2F:31:9C:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47EE3FBAB31611F0A5CE10DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.72.0/21
Signature Algorithm: sha256WithRSAEncryption
83:1f:ef:cc:50:55:8b:de:35:a4:fe:50:32:0f:26:5e:a7:0d:
67:50:bc:e2:6b:f4:66:e2:de:b7:e6:b2:dc:73:d9:fe:f4:c0:
76:54:8d:3d:17:eb:d6:3e:b4:77:d7:a2:ad:4b:59:11:91:f8:
f0:3c:1c:b8:62:09:dc:aa:90:9a:99:5c:07:f7:6f:b9:f2:82:
9f:26:2d:f0:69:1e:39:9c:83:29:c6:eb:03:c7:03:5b:ec:5a:
9b:a0:77:1a:9a:a6:09:bd:90:35:d8:91:cc:80:db:d0:9b:2b:
f2:07:87:8e:13:91:e1:b5:67:74:72:12:7d:82:38:16:d8:d1:
e5:d5:6f:3e:ca:b4:ce:f9:99:fd:a8:0a:f2:0c:fc:27:22:17:
35:71:a6:e7:49:2d:7a:57:ca:2d:19:40:75:d2:e4:30:2d:8a:
6d:46:5e:5c:8e:b4:e0:dc:94:25:4d:b1:dd:91:a7:7d:50:75:
e5:a1:de:42:c3:71:66:7f:40:20:f0:82:49:73:c3:d1:6b:e3:
30:95:f1:33:41:e7:96:57:5d:be:ab:09:de:53:a8:15:5f:ca:
6b:73:45:f4:dd:4e:5c:29:ca:6d:e5:c7:b0:4e:9d:d7:15:28:
20:59:dc:e1:f6:79:35:0c:9b:22:df:4e:f8:e0:f9:68:ae:c1:
55:6c:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:44 2025 by rpki-client