Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DE1F2CB32211F0A2564EA7DAE4EC9C.roa
File: 59DE1F2CB32211F0A2564EA7DAE4EC9C.roa (raw, json)
Hash identifier: F+tmrRKfJiWhnVv6CTLN5xNiB+yQmNk9sf4CZxq6254=
Subject key identifier: A8:0F:17:5D:D8:DB:15:C7:78:4C:F7:0A:95:16:2A:F2:AA:7F:7B:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DE1F2CB32211F0A2564EA7DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 10:47:37 +0000
ROA not before: Mon 27 Oct 2025 10:47:30 +0000
ROA not after: Mon 01 Dec 2025 10:47:30 +0000
asID: 44559
IP address blocks: 156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.233.116.0/24 maxlen: 24
156.233.117.0/24 maxlen: 24
156.233.127.0/24 maxlen: 24
156.233.193.0/24 maxlen: 24
156.233.194.0/24 maxlen: 24
156.233.195.0/24 maxlen: 24
156.233.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99031 (0x182d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:47:30 2025 GMT
Not After : Dec 1 10:47:30 2025 GMT
Subject: CN=68ff4dc9-e31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:54:b5:4f:85:64:72:ab:38:f9:f4:3f:38:
a9:05:ee:42:5f:e9:39:c7:29:56:5d:40:be:59:b4:
29:1a:7f:e7:cd:a6:41:0c:32:07:62:11:dd:c8:fc:
22:4e:42:3c:76:e4:59:ae:10:91:e3:54:ef:aa:17:
ba:67:4e:83:97:09:39:62:1f:7b:67:e5:05:e8:80:
03:25:07:d8:da:76:e2:1d:f1:3a:35:e4:4c:2d:0c:
c9:0d:92:2c:f4:73:72:01:34:a2:33:fb:97:89:92:
82:36:66:11:bf:5f:08:9c:0b:e5:23:e2:84:c0:d3:
84:8e:f1:a7:12:f5:0a:c6:52:6c:3f:42:ed:99:9d:
77:41:15:44:cf:94:1d:66:72:fb:e2:31:53:dd:26:
e2:d4:e0:89:28:d4:f0:ec:6b:96:f2:9f:e6:1c:ac:
ba:a2:ea:b5:38:ad:71:e0:9e:41:81:c6:5f:a4:0e:
81:b1:2c:cb:a5:11:be:3f:b0:93:0b:8b:ba:ec:a9:
fc:f3:a0:47:89:52:5f:f0:46:7d:d3:75:d6:83:81:
3d:43:67:a6:82:df:29:21:50:a5:ed:5b:12:5e:d2:
1d:96:64:91:06:e2:6e:74:43:be:f5:c7:74:44:e0:
cd:c6:c8:72:4f:76:55:85:ce:69:a4:fd:4e:49:97:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:17:5D:D8:DB:15:C7:78:4C:F7:0A:95:16:2A:F2:AA:7F:7B:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DE1F2CB32211F0A2564EA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.96.0/23
156.233.106.0/24
156.233.116.0/23
156.233.127.0/24
156.233.193.0-156.233.195.255
156.233.204.0/24
Signature Algorithm: sha256WithRSAEncryption
98:44:10:4d:3f:84:6f:7a:18:8a:46:d1:ad:56:f0:39:e2:3c:
97:dd:a2:40:ef:34:d4:17:a6:77:9c:af:3c:bd:67:ab:5d:28:
d8:b5:52:1a:1a:8e:27:f8:ef:2b:af:dd:30:f4:01:96:79:77:
2d:b2:62:24:9b:6d:69:47:3e:d2:71:a4:84:3f:e8:1f:66:0d:
b3:aa:ba:e8:79:94:ac:27:50:3b:a9:13:a2:21:36:5a:85:b6:
11:0f:92:a1:24:c1:2b:b9:0a:06:c1:4a:f2:56:dd:b6:e0:d5:
70:b1:2c:6a:18:6f:69:31:52:2b:f4:07:c9:fa:a3:64:0d:a1:
4f:25:01:51:8f:96:81:d0:34:b2:b0:4e:e9:95:ed:7a:63:65:
89:c5:0b:48:c3:5b:56:27:4e:86:e1:18:f8:3e:c3:d1:e4:a0:
6b:ba:75:3e:e7:98:9c:7a:09:2c:b8:79:ce:06:16:19:c7:43:
3a:73:29:d2:e1:02:c8:d6:84:fc:67:e5:95:74:57:22:23:cd:
cd:5e:c3:6e:df:af:e1:76:bd:ae:f5:86:02:ba:a2:3b:54:b8:
30:7b:bf:42:79:e5:18:d5:e1:e0:a6:49:fb:e9:46:26:ef:26:
71:36:1a:60:d2:12:67:1f:88:7c:38:85:78:8b:dd:92:10:81:
b8:98:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:35 2025 by rpki-client