Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955531AAB32011F0A09ED79ADAE4EC9C.roa
File: 955531AAB32011F0A09ED79ADAE4EC9C.roa (raw, json)
Hash identifier: RvqtPu6JZwpmHGSkPjc6Kd0Dq3Fcq5BypMl5NZAxmr8=
Subject key identifier: 94:1C:B2:0D:47:A6:B3:55:9D:4E:4E:2F:2E:DC:C3:4A:2C:BF:E0:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955531AAB32011F0A09ED79ADAE4EC9C.roa
Signing time: Mon 27 Oct 2025 10:34:58 +0000
ROA not before: Mon 27 Oct 2025 10:34:51 +0000
ROA not after: Mon 01 Dec 2025 10:34:51 +0000
asID: 44559
IP address blocks: 156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
156.248.21.0/24 maxlen: 24
156.248.23.0/24 maxlen: 24
156.249.19.0/24 maxlen: 24
156.249.80.0/24 maxlen: 24
156.249.81.0/24 maxlen: 24
156.249.83.0/24 maxlen: 24
156.249.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99027 (0x182d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:34:51 2025 GMT
Not After : Dec 1 10:34:51 2025 GMT
Subject: CN=68ff4ad2-9f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:3f:0d:e5:21:76:ac:71:e2:b7:b1:eb:88:
70:08:b6:52:6a:fe:05:6c:3c:a3:ce:d8:2e:51:7a:
0c:d9:51:4d:8b:93:0e:05:2f:77:46:62:1a:8f:c6:
39:d4:44:05:84:d6:95:c6:37:c5:5a:a8:d9:af:12:
8c:2e:58:57:14:a5:3f:b8:1e:db:d7:28:7d:98:22:
23:41:8d:4d:31:bb:31:67:73:23:71:f6:d9:f8:68:
27:3a:7c:81:da:36:c6:59:05:4c:7d:bb:81:87:c7:
c1:64:fd:81:23:ba:18:8b:76:ac:d0:0f:ae:35:c3:
24:52:b6:f9:c1:9f:f4:1a:a1:56:88:77:53:fe:cb:
94:25:36:0c:2f:85:f3:80:85:2c:bc:b5:bd:88:d3:
c1:a6:93:f8:a4:51:c5:28:66:da:ea:38:2c:69:bb:
31:b5:7a:5b:e9:8a:fc:c3:4d:9f:60:b6:67:98:ac:
d8:f7:6f:55:bf:17:8b:15:9d:2e:eb:e4:51:a2:18:
77:21:53:b1:44:f1:35:2f:af:9c:17:50:dc:1c:0c:
e8:71:f8:8a:a8:41:e0:ee:11:bb:e5:bd:b0:f2:82:
02:71:0e:2c:f5:2f:c4:b5:0b:33:80:6a:cf:6b:65:
4e:97:7f:ef:5d:a3:65:88:ac:c6:29:17:e3:65:57:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:B2:0D:47:A6:B3:55:9D:4E:4E:2F:2E:DC:C3:4A:2C:BF:E0:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955531AAB32011F0A09ED79ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.6.0/23
156.248.20.0/23
156.248.23.0/24
156.249.19.0/24
156.249.80.0/23
156.249.83.0/24
156.249.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:a9:60:77:4b:2e:57:c4:d1:cb:3a:c9:f7:6b:bb:93:9f:
1f:f7:d6:09:66:49:60:14:cb:a4:75:19:7b:c1:b5:0a:64:87:
9e:f1:ca:07:9a:cf:68:be:5d:15:b7:2f:1f:39:9d:9b:76:b1:
c5:34:b5:e8:6a:66:3e:b7:cd:63:74:d4:5b:ce:ca:0a:b2:15:
10:9c:f7:41:0a:76:c1:35:73:14:03:1f:b5:5d:2f:28:92:f1:
7f:56:a3:a6:9f:c0:4a:98:01:e5:4e:6a:95:35:04:13:9f:b7:
04:78:32:67:be:cb:31:5b:03:5b:58:ce:c3:9f:ff:a2:b7:9c:
b0:78:48:ab:a3:f4:d7:36:29:12:36:51:ec:72:0e:e4:48:fd:
ed:4c:9b:da:ff:0d:f0:d7:4c:9e:4c:91:8d:ba:b6:0b:d6:59:
7c:9f:66:76:27:b2:03:f2:84:cd:c6:50:f7:6c:36:41:b6:a9:
00:ef:22:32:f4:75:b8:4f:e4:1b:51:13:4f:39:5c:3f:de:b7:
28:3c:a6:d2:a5:05:7f:56:7e:8b:b2:07:ba:f9:b5:4c:4f:13:
26:4f:85:fc:27:0c:8e:a3:fd:1f:28:1c:e8:26:a3:bd:db:1e:
52:e7:2e:e0:e9:c9:79:38:6c:2b:50:47:8b:ed:63:9d:41:da:
f8:0f:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:36 2025 by rpki-client