Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D761FAB34411F097016391DAE4EC9C.roa
File: D7D761FAB34411F097016391DAE4EC9C.roa (raw, json)
Hash identifier: hIv+Y9ZnTd88TMMiLdxj3ORWKyfmIc7aT3iz8/8kNAc=
Subject key identifier: AD:12:E6:2A:B3:5D:CF:ED:E8:8C:BD:27:79:A5:D5:0B:68:C8:97:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01830C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D761FAB34411F097016391DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 14:54:31 +0000
ROA not before: Mon 27 Oct 2025 14:54:27 +0000
ROA not after: Tue 02 Dec 2025 14:54:27 +0000
asID: 9304
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.245.136.0/23 maxlen: 24
156.245.152.0/22 maxlen: 24
156.245.156.0/22 maxlen: 24
156.245.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99084 (0x1830c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 14:54:27 2025 GMT
Not After : Dec 2 14:54:27 2025 GMT
Subject: CN=68ff87a7-602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:f9:c5:c4:7b:40:a6:c6:f1:2a:85:e3:74:
9e:13:5e:6f:49:b6:c5:a9:46:f7:92:ce:ed:cb:07:
98:f9:60:f6:42:24:be:5d:aa:e7:da:1a:45:35:46:
c5:f7:94:45:67:b7:4c:5b:0b:b6:f8:cf:a7:01:d8:
fb:43:83:28:0f:b7:4d:58:8b:78:ca:3d:1f:2f:eb:
a3:d3:c7:22:ef:8d:80:c7:9b:22:ac:26:ff:47:69:
3a:a0:79:22:11:4b:a9:b4:1c:04:73:64:16:57:4c:
3d:3b:25:83:4b:fd:f5:80:23:ff:1c:d4:be:70:0a:
e8:95:dc:37:36:f9:82:27:02:b5:47:3b:a1:11:68:
a3:c2:36:1a:37:73:1c:5a:e3:72:27:c2:91:79:6e:
04:81:58:df:64:4d:49:cf:7a:31:47:da:ac:5b:19:
e2:c9:8f:7b:bf:4f:0e:92:6c:76:d1:51:a8:25:f5:
e9:1a:2b:1f:6e:5d:d4:12:98:93:41:57:cc:72:c5:
0b:78:c3:a7:dd:e6:e2:68:0a:4a:7a:7d:e0:ce:3c:
8e:f3:c1:bb:6c:f9:e0:02:a6:56:c5:4d:79:58:69:
b9:f7:c1:1f:d2:83:35:4d:57:40:e4:97:ac:40:c4:
0f:b0:4b:0d:ed:05:c4:d6:06:b1:be:89:f7:81:b0:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:E6:2A:B3:5D:CF:ED:E8:8C:BD:27:79:A5:D5:0B:68:C8:97:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D761FAB34411F097016391DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.233.66.0/24
156.245.136.0/23
156.245.152.0/21
156.245.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7c:c6:85:72:57:66:ac:db:6d:f7:d8:6e:e3:24:d6:d0:39:
28:35:68:4d:59:9f:68:fa:b1:1c:04:24:c4:48:f2:a4:d0:63:
aa:a2:69:92:bf:e0:39:85:ca:84:a0:e3:db:12:9e:c6:d7:bd:
18:9b:5b:ae:79:d9:62:f9:0a:c8:b3:77:a7:ea:a9:6d:34:9e:
fe:43:e5:74:1f:b2:90:9f:68:d9:07:07:4f:12:80:e3:28:39:
d6:d6:eb:a7:2c:b5:6a:fe:16:4a:bb:b0:27:1f:7e:98:06:b6:
63:10:46:d9:f8:ab:c6:34:8d:f4:e6:9a:02:60:53:1a:63:1f:
0d:96:89:fb:f0:e3:c4:4c:44:be:ff:00:e6:be:06:83:cc:c6:
2c:9b:3e:95:99:98:5f:da:e4:7e:80:93:d3:5d:19:2b:4e:07:
17:a5:7a:46:9b:71:22:0f:b6:cb:ab:9a:c6:bc:6a:d0:8f:30:
4b:9e:c2:7c:6f:ae:99:84:99:cb:0c:d7:b9:ee:0c:13:ba:30:
e3:24:3d:5e:58:9c:71:a3:d8:0b:85:78:e4:57:7e:38:73:b4:
bf:5c:db:41:0d:44:59:f3:a6:8c:c1:7e:2a:c5:34:44:e3:26:
9f:8b:1f:ed:98:37:fc:e9:cb:06:5e:46:a8:02:4f:fb:ad:33:
5e:7d:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:49 2025 by rpki-client