Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4EA11D8AFED11F09FD7FCA4DAE4EC9C.roa
File: B4EA11D8AFED11F09FD7FCA4DAE4EC9C.roa (raw, json)
Hash identifier: 8ROokS4CGpPUPYnk1/ngokmwWbcBOoAtk2LNlKVZF9M=
Subject key identifier: C5:26:91:F3:82:E2:31:5F:EF:77:0F:54:24:94:2B:75:86:A4:5F:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01821F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4EA11D8AFED11F09FD7FCA4DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 08:53:13 +0000
ROA not before: Thu 23 Oct 2025 08:53:04 +0000
ROA not after: Sat 08 Nov 2025 08:53:04 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98847 (0x1821f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 08:53:04 2025 GMT
Not After : Nov 8 08:53:04 2025 GMT
Subject: CN=68f9ecf9-ac0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:b7:71:c5:4f:b8:85:e5:a2:2e:49:ab:96:
2c:70:3f:25:04:59:11:2c:25:cb:bc:62:da:e6:f1:
7a:2d:6b:09:d1:46:86:6f:b7:b6:e3:d7:22:ce:d9:
d9:f7:4a:76:0b:22:ff:0c:67:6a:08:f5:a7:32:17:
60:db:41:05:5c:16:b7:c4:9f:e3:b0:8d:68:cc:62:
ee:06:28:34:b6:ca:49:34:ef:e0:4b:2f:e9:f7:20:
31:14:56:d4:0c:7a:04:8c:2b:b6:b4:92:a7:a3:6b:
19:d3:d0:3e:88:b4:cd:62:a0:52:0a:01:22:8f:10:
f1:11:dc:c2:60:95:5b:72:0b:5b:b8:32:e4:28:7a:
c3:a3:8a:69:6a:19:e5:74:b1:b6:b3:97:17:48:d6:
d7:b6:df:45:41:b2:43:ae:f2:d6:f5:1b:7c:34:6d:
0d:f8:e6:66:d0:4b:f1:c6:4a:91:5f:b7:55:5e:07:
e8:37:02:8e:e8:1f:55:2e:5d:4c:40:3f:b5:dd:29:
e8:88:3c:9b:00:9d:16:bc:81:b3:e2:41:2a:0b:45:
0a:8f:98:aa:28:b4:4a:86:96:9b:b8:12:86:ad:1b:
0d:0e:38:bc:31:ba:78:d5:e4:e8:19:f9:09:c4:13:
d8:15:01:51:78:85:48:3f:88:4f:79:56:52:2c:98:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:91:F3:82:E2:31:5F:EF:77:0F:54:24:94:2B:75:86:A4:5F:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4EA11D8AFED11F09FD7FCA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:13:90:95:0e:b7:b0:1a:89:9e:58:51:3d:f8:f1:be:ab:3c:
3b:f1:83:71:97:d9:84:6e:39:4d:d1:5a:a3:4b:7b:3c:84:2c:
95:2e:d1:45:7b:d0:62:82:c3:83:17:0e:f4:0e:7c:cf:fa:9b:
31:7f:aa:1e:32:dc:e9:a5:13:8a:a3:68:43:48:34:8f:88:8a:
5a:3e:b6:0a:97:8e:70:7e:fb:70:98:91:43:16:57:88:90:bc:
3a:7c:48:ef:25:ff:9a:54:d1:61:23:98:a4:57:3e:36:86:d5:
32:62:68:bb:49:8f:b4:54:ba:fa:6e:32:c7:46:f1:80:43:b8:
af:d1:b8:6a:d4:08:c9:9f:40:11:10:90:2d:d3:00:6f:7b:5f:
9d:56:6b:77:e7:10:81:52:7e:3c:ee:9c:c8:bb:0d:6b:d0:b7:
0f:61:c7:71:ab:5c:4e:70:85:ed:8f:b1:b5:1c:dd:0c:8e:87:
2c:28:f1:54:28:74:e4:fe:93:69:25:df:f6:2a:3b:78:ba:04:
66:3d:07:80:8b:e8:e8:41:34:41:43:56:30:1e:cc:59:e0:a8:
c6:20:a5:5a:6c:73:f1:cf:97:e9:98:dd:f0:ec:4e:f2:64:ad:
aa:c6:38:c9:76:30:17:21:21:41:ab:9e:cd:a1:14:07:6e:6f:
b2:bd:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:31:51 2025 by rpki-client