Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75C37666AF3411F094B061F0DAE4EC9C.roa
File: 75C37666AF3411F094B061F0DAE4EC9C.roa (raw, json)
Hash identifier: V6TmGkCiTiCnf7MfBDoTe9SaHXWnBXJqShROvvENOcg=
Subject key identifier: 07:68:4C:AF:18:FA:A8:56:81:20:75:CE:9E:7E:1B:0D:79:F0:36:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018205
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75C37666AF3411F094B061F0DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 10:47:10 +0000
ROA not before: Wed 22 Oct 2025 10:47:05 +0000
ROA not after: Fri 05 Dec 2025 10:47:05 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98821 (0x18205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 22 10:47:05 2025 GMT
Not After : Dec 5 10:47:05 2025 GMT
Subject: CN=68f8b62e-cec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e8:31:2c:ae:cd:d3:bf:1f:7f:5b:d5:e2:b3:
d5:db:9f:05:a5:d5:5d:ae:0d:c9:32:25:f9:bc:f3:
99:3d:ac:2f:64:e8:4a:71:71:27:4b:94:e8:6a:bf:
dc:da:1b:01:23:d2:be:15:e2:dd:8e:b6:17:01:4a:
c4:d8:38:cb:a7:8f:ae:a9:d2:b0:7e:07:1e:d8:88:
2a:64:d3:0f:33:d6:4d:0d:ae:22:0e:9b:d4:b8:22:
c6:c7:ff:28:19:ab:ff:93:77:07:4b:84:50:7b:b6:
8c:2a:3a:49:86:e3:9e:b4:94:7b:c6:09:2e:6e:01:
e6:9c:1d:e8:e9:8e:32:33:80:91:cd:22:cd:b5:61:
a6:54:0c:ba:b2:d8:24:00:70:4b:d5:46:42:76:c5:
26:eb:6e:57:cd:33:70:b3:c8:6c:8b:76:4d:ab:5f:
4b:a7:d8:5a:3d:51:81:1b:4f:79:8e:68:7e:5e:d2:
56:c0:47:83:5d:6f:f8:f6:10:f9:78:9b:5a:32:b3:
6e:b0:00:1b:05:a2:dd:1b:43:57:e0:7a:fc:1d:24:
35:74:1d:fb:20:9f:eb:85:98:4b:c3:ea:f4:d6:23:
d8:c1:01:17:a5:37:18:a4:86:2d:07:34:ec:07:b7:
17:58:bb:22:1e:d2:61:6f:8f:90:e7:95:cb:49:52:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:4C:AF:18:FA:A8:56:81:20:75:CE:9E:7E:1B:0D:79:F0:36:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75C37666AF3411F094B061F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5d:ef:c4:57:ee:bd:14:16:46:46:2d:d5:b0:d9:2f:2f:e3:
77:a6:73:db:61:bc:2f:3f:39:37:7c:89:6f:d2:6c:c2:15:53:
c9:1c:58:8e:f8:30:8d:8f:e4:57:3c:d9:0d:6c:87:71:f3:74:
34:d0:03:c4:43:4c:3c:c0:0b:ca:10:86:d2:64:b2:74:84:36:
ec:46:1c:3a:0d:1a:98:f1:78:db:bf:5f:9f:f5:f6:fa:b6:a0:
48:f1:83:29:cd:f5:ca:80:72:79:bf:97:81:0e:ca:1c:0d:e8:
5b:51:19:e0:75:3b:88:38:c4:e4:c0:c4:69:93:9d:65:6a:29:
14:19:31:e0:5b:5c:42:2b:04:9d:41:84:af:b3:09:3c:fa:45:
b7:30:db:ca:15:32:a5:3e:b8:98:ce:d3:99:f5:88:0b:da:1b:
79:00:1d:6a:ba:e0:0a:e9:3f:c6:f0:4d:0a:b0:18:ad:5e:f0:
7f:20:22:9f:e8:51:7d:99:dd:4b:f6:e4:59:04:0c:6c:77:13:
d4:e2:f4:a1:e9:77:46:27:a7:54:c1:38:1d:11:f8:3b:fe:88:
53:d4:22:f6:22:02:cf:a2:f9:98:09:3b:54:2c:65:0e:1f:1b:
23:80:7d:34:6c:6b:94:24:8d:0d:de:5f:bd:00:db:26:72:b1:
ff:80:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:07 2025 by rpki-client