Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66F83700B3FA11F08C981092DAE4EC9C.roa
File: 66F83700B3FA11F08C981092DAE4EC9C.roa (raw, json)
Hash identifier: vc+thrxFxHZyz87iLauGOqwEeCRkiuplS2/ZKvSL6dQ=
Subject key identifier: 4B:7C:CB:A9:BE:41:C0:2B:4B:D3:85:47:34:AC:0E:28:92:C1:14:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01837C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66F83700B3FA11F08C981092DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 12:34:10 +0000
ROA not before: Tue 28 Oct 2025 12:34:04 +0000
ROA not after: Wed 10 Dec 2025 12:34:04 +0000
asID: 138915
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.2.0/24 maxlen: 24
156.244.3.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.8.0/24 maxlen: 24
156.244.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99196 (0x1837c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 12:34:04 2025 GMT
Not After : Dec 10 12:34:04 2025 GMT
Subject: CN=6900b842-e057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:c3:52:67:05:96:ea:af:eb:41:c4:08:ae:
7c:69:b2:e0:9c:f1:4d:55:00:12:00:45:5d:48:7b:
1c:9a:15:98:9c:7d:9e:5c:47:81:0c:9f:e7:02:96:
f3:ae:9a:2d:15:10:40:b4:03:8c:b4:52:f0:b3:20:
a4:90:02:a3:97:cd:8b:e8:3d:36:ee:0f:dc:15:d0:
1d:54:f2:e7:4d:22:12:51:50:9d:0a:5e:10:18:37:
8f:0f:68:61:06:aa:60:0e:6d:d7:0e:80:ce:7a:b7:
27:ad:0f:61:82:0d:b1:de:3e:2e:95:41:dd:c6:68:
d9:30:cc:c6:66:38:02:fa:a1:30:7f:ad:52:14:37:
41:66:3b:ed:27:63:f9:02:65:12:60:46:e5:79:1b:
83:56:91:46:3a:f4:6f:fe:5f:4b:d5:c8:4f:39:7d:
cd:09:cc:14:99:a9:7c:18:c4:ec:e8:d5:1d:d3:d3:
ad:5d:03:ac:7c:96:92:bb:ca:68:c4:67:a4:4f:ee:
7f:a6:17:60:d5:da:d6:5e:61:d1:af:0e:ce:6f:9b:
e8:3d:6b:b4:20:ff:78:29:81:1f:a4:31:e1:88:6b:
79:3a:17:75:39:5c:0e:c8:27:39:93:a6:7c:71:51:
01:81:c8:ab:ea:8d:87:cf:03:04:90:ca:f2:84:52:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:CB:A9:BE:41:C0:2B:4B:D3:85:47:34:AC:0E:28:92:C1:14:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66F83700B3FA11F08C981092DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0-156.244.9.255
Signature Algorithm: sha256WithRSAEncryption
47:02:67:08:90:ea:ae:00:b2:c2:3e:e7:51:25:df:47:f7:95:
3e:5c:f2:42:4d:85:78:1a:50:2a:5b:6c:85:a2:b0:92:76:ee:
09:95:fa:67:46:1b:fa:cf:78:e4:46:91:8e:eb:36:12:2b:05:
ad:c0:ef:5e:d2:e2:3d:54:f1:50:99:a0:b6:82:4e:17:d9:5e:
79:1f:b0:44:61:13:72:ab:cc:51:08:a1:36:08:54:c9:91:95:
99:db:22:4b:60:27:99:ac:be:9a:93:04:77:7e:85:7c:6c:a9:
27:7e:ff:52:d9:70:83:ba:00:d0:f5:1a:65:66:74:c6:00:8b:
f6:5b:c3:ee:92:75:94:cc:94:9d:40:cd:f6:78:dc:16:30:f3:
1b:98:0d:78:5a:34:e3:3d:71:66:5d:9e:52:66:58:46:ad:c5:
07:a0:83:e2:8d:59:92:b1:ca:4b:d6:e2:cd:87:ce:59:4e:d2:
14:c6:88:f5:f2:c4:96:14:7c:f4:7f:60:1d:ee:7e:a2:9a:54:
d0:67:0c:1c:c2:16:28:36:ee:67:a1:f6:bf:e4:8e:ef:8b:6e:
e1:f6:e5:94:02:e3:db:17:66:bd:27:4e:01:40:cc:cc:0d:03:
7a:03:af:1f:54:d5:d4:2c:91:ce:9b:ee:ff:82:24:ef:f5:08:
a1:70:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:55 2025 by rpki-client