Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19970200A43911F0B19B1E97DAE4EC9C.roa
File: 19970200A43911F0B19B1E97DAE4EC9C.roa (raw, json)
Hash identifier: /j1AUyaufZtM3zBiP67G1Ril97tJ+/zxdNJ2qRb4fJg=
Subject key identifier: CD:78:C0:EF:BC:67:9B:03:87:B4:E1:AA:E2:3B:E8:B3:8A:30:5C:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19970200A43911F0B19B1E97DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 11:22:40 +0000
ROA not before: Wed 08 Oct 2025 11:22:35 +0000
ROA not after: Fri 14 Nov 2025 11:22:35 +0000
asID: 269070
IP address blocks: 156.249.64.0/24 maxlen: 24
156.249.65.0/24 maxlen: 24
156.249.66.0/24 maxlen: 24
156.249.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98166 (0x17f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 11:22:35 2025 GMT
Not After : Nov 14 11:22:35 2025 GMT
Subject: CN=68e64980-65f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:9d:08:06:71:88:d1:a1:e7:93:00:a4:ef:
8c:4a:b4:70:d3:62:79:79:f2:0a:47:f4:a5:ed:d7:
65:e9:53:4b:08:80:42:f1:84:23:bd:65:5d:76:9c:
5c:8e:f7:fa:e4:ce:ef:a9:97:ae:df:9c:a2:01:be:
fa:5e:b8:dd:d0:7b:b9:da:29:4d:c7:45:20:62:fa:
a7:6b:10:f3:ef:29:33:db:c8:6d:02:79:09:dd:fa:
1e:a8:34:59:db:89:1b:cf:e7:d1:b3:f7:48:23:ca:
74:e5:19:46:04:4f:da:aa:9b:91:bb:7c:2b:67:85:
91:d4:dd:fd:93:2e:12:30:90:b4:35:15:1d:bb:e0:
36:69:90:00:fc:a6:1b:5d:69:a0:4d:44:ca:05:c3:
e6:16:1c:f9:43:5d:e7:0e:b0:dd:1a:23:19:0a:09:
7b:10:dc:c2:0c:75:f4:5b:8b:58:ef:c4:f8:ec:a2:
05:c8:e8:e7:a2:89:99:b9:77:a4:ca:97:76:a9:92:
f0:09:1e:8c:de:f3:62:5d:21:86:ed:06:03:14:4a:
fe:0b:5d:fc:e9:5e:1c:25:8c:12:fb:99:2e:ee:56:
be:27:33:61:7e:76:e8:e0:29:2a:2f:d9:ba:10:50:
e4:a2:cc:9c:22:8e:88:b7:cb:ea:88:57:b4:fd:0e:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:C0:EF:BC:67:9B:03:87:B4:E1:AA:E2:3B:E8:B3:8A:30:5C:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19970200A43911F0B19B1E97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
81:f0:a4:54:7e:5a:b9:42:10:ab:34:6d:e8:f3:0b:5d:e8:0d:
eb:e1:fe:35:0a:61:17:ae:11:98:84:64:8f:af:02:48:48:55:
51:0b:56:89:0d:b9:b3:e1:4c:71:f7:d2:96:97:bf:92:4c:47:
51:5a:8b:8c:dd:fb:fd:25:1b:11:65:be:63:a3:c8:7c:36:de:
cd:ab:e3:16:cf:11:c7:94:fa:ba:91:37:c0:fd:43:52:67:65:
3a:70:4a:a6:e9:de:d3:eb:a9:a6:da:20:bb:7d:95:b0:ef:a2:
e0:53:ed:27:b4:82:11:49:37:8e:c0:14:3f:92:e2:ef:58:ce:
74:b1:4b:50:28:08:44:24:a2:a4:1a:6f:e6:a3:3e:fa:33:32:
b7:78:78:53:04:d6:eb:55:6f:0c:5a:3c:a3:28:13:10:23:55:
48:8c:c9:a4:a8:3b:eb:ba:e1:6d:00:99:e7:52:c2:da:80:d8:
b2:34:ed:ae:bc:8b:35:a8:ec:a5:c5:cd:e4:c5:ad:c0:f6:19:
e1:8a:2e:1d:b7:f0:e8:cd:6f:69:32:d3:0a:0c:e8:f5:62:fb:
fe:0c:ae:c7:85:41:f8:a4:9d:a2:08:4a:81:69:06:31:df:7b:
b5:fc:93:28:6a:2e:f3:e8:a2:28:d9:be:bc:24:46:73:4f:99:
a4:38:b7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:50 2025 by rpki-client