Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA55C91AB00211F08904C0AADAE4EC9C.roa
File: EA55C91AB00211F08904C0AADAE4EC9C.roa (raw, json)
Hash identifier: VuMdqjjtoeutZpk+HVk+sShg0wM/k661WmptO6M/w8o=
Subject key identifier: 70:46:41:88:AF:C6:2D:8A:64:73:EC:30:4B:DE:99:C6:AA:CE:C2:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018247
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA55C91AB00211F08904C0AADAE4EC9C.roa
Signing time: Thu 23 Oct 2025 11:25:02 +0000
ROA not before: Thu 23 Oct 2025 11:24:53 +0000
ROA not after: Fri 28 Nov 2025 11:24:53 +0000
asID: 44559
IP address blocks: 156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98887 (0x18247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 11:24:53 2025 GMT
Not After : Nov 28 11:24:53 2025 GMT
Subject: CN=68fa108e-c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:d2:71:b9:ff:0b:06:e3:a5:98:1e:46:d9:
ec:50:51:9e:08:b1:0a:bc:8a:a5:a0:7f:27:b2:69:
65:3b:20:7c:df:04:d5:38:ec:33:80:0d:49:d9:1e:
31:5e:63:6f:96:1f:fa:3f:ec:ce:99:54:1a:34:b7:
90:19:8b:cb:22:4a:43:74:e9:6f:e5:b8:e4:62:f3:
b7:dd:76:21:1f:f4:68:e5:b6:99:86:0a:12:5b:75:
de:63:8b:ed:13:b8:25:8d:f7:d8:ba:5c:a7:a7:55:
df:c4:4d:e3:ba:e7:ac:d0:ff:5b:a1:90:00:d2:69:
58:e8:fb:55:b6:f6:4a:bd:a0:f2:33:6c:04:59:0a:
aa:b9:92:b9:ef:e4:8c:53:05:3a:7d:f7:23:53:f3:
4d:4f:4d:ab:a3:bb:a8:db:04:14:39:32:55:6d:ef:
52:49:46:6e:79:9f:40:5e:ce:9d:16:2b:d4:75:41:
39:0c:21:48:a1:5c:ed:38:78:28:1f:ab:3b:90:2b:
d3:42:9a:c6:b5:02:18:00:fa:86:73:a1:15:41:be:
dd:9e:83:a6:bc:ad:e1:16:be:9a:e2:85:61:7d:dc:
4d:5a:b7:94:5f:5f:d9:14:9c:fb:fc:61:4f:95:e0:
57:52:59:b0:1d:3f:00:46:8c:2c:70:09:14:1a:27:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:46:41:88:AF:C6:2D:8A:64:73:EC:30:4B:DE:99:C6:AA:CE:C2:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA55C91AB00211F08904C0AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.239.0-156.246.248.255
Signature Algorithm: sha256WithRSAEncryption
b4:a5:bb:4c:e7:a1:d4:55:75:66:1c:3a:a9:4f:c7:b3:1c:62:
32:0b:51:5f:ff:6b:f0:20:1e:07:9e:02:44:c4:44:fa:59:4e:
82:8e:de:0a:69:c0:69:bc:99:24:03:f0:86:c9:64:3b:5a:42:
a8:f6:a9:eb:8d:1d:7a:63:75:39:9d:a0:b0:2a:ad:db:40:03:
89:8d:f8:79:09:f0:e0:d2:91:a0:0e:a8:c0:44:05:80:5b:f4:
84:07:60:71:a7:6b:b9:57:89:23:f9:85:2d:e3:c2:e7:a9:d7:
08:ed:54:62:db:fb:32:e0:ac:31:98:ac:8a:e2:1c:55:6a:d2:
94:ef:78:c0:30:56:ea:3f:07:98:7e:0c:5d:57:8b:23:66:1a:
98:0a:16:a2:cb:4a:e1:74:52:47:17:22:11:87:b6:7a:9b:a4:
7f:c8:d0:6d:80:75:4a:b5:c6:3a:d6:90:86:12:75:c8:c7:1e:
11:a2:07:c7:ba:1d:3a:13:17:de:14:76:b6:bf:1a:4a:57:a3:
de:26:73:67:5a:90:71:14:5e:74:3b:97:10:9a:ec:91:d6:8b:
39:27:7e:f6:68:7a:d3:8b:b1:fa:a3:0c:f6:2b:ae:3e:04:57:
ac:ff:92:4a:58:ae:c5:c3:a5:0b:de:2b:85:a0:fc:9c:9a:26:
21:6e:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:38 2025 by rpki-client