Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6266CAA76211F085EA6991DAE4EC9C.roa
File: 1B6266CAA76211F085EA6991DAE4EC9C.roa (raw, json)
Hash identifier: hQQiS2dEcAl8dCmDv9bwE3QCH/3VhzjMpE+x/8/84v4=
Subject key identifier: E6:EF:8A:93:C4:05:41:B4:1E:DA:26:3D:79:73:86:DC:28:54:DC:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01801A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6266CAA76211F085EA6991DAE4EC9C.roa
Signing time: Sun 12 Oct 2025 11:53:46 +0000
ROA not before: Sun 12 Oct 2025 11:53:41 +0000
ROA not after: Tue 11 Aug 2026 11:53:41 +0000
asID: 216047
IP address blocks: 156.246.64.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98330 (0x1801a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 11:53:41 2025 GMT
Not After : Aug 11 11:53:41 2026 GMT
Subject: CN=68eb96ca-6ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:2b:20:3e:bd:a9:61:d0:55:fb:67:c8:ee:
c6:67:29:ef:65:8c:b6:a6:67:40:f8:9f:e7:0e:09:
21:05:8e:75:a7:11:2f:d4:18:7b:e2:b6:49:4a:14:
96:12:6d:d2:b4:e6:46:e0:d7:06:78:ed:72:8f:1c:
5b:c4:ca:68:c7:73:d8:9b:46:dd:43:8b:75:12:01:
87:86:e3:d7:0d:ac:67:9c:9f:c8:dc:65:e0:6d:b3:
13:e6:f3:50:96:9e:23:a3:87:a1:7f:c4:85:d3:6a:
14:68:66:09:20:36:3f:e5:71:0d:1a:26:98:fa:97:
f7:c8:c4:37:87:9c:a3:e5:b2:13:a9:12:b2:b9:46:
e2:f5:6a:22:d3:8b:52:7b:fc:1e:73:9d:d7:57:fd:
1a:7f:a4:c8:5c:a6:ab:73:36:cc:09:58:61:73:1c:
1e:90:65:27:05:8e:34:b3:9f:f6:31:48:89:8a:36:
12:80:ad:94:e8:95:de:ae:93:aa:bf:82:a9:64:7b:
c4:e5:97:ec:dd:43:d4:3b:e8:ed:91:34:22:5d:22:
61:d1:9e:62:3a:27:3f:f7:7e:0a:8e:9e:15:06:ce:
67:17:c2:44:af:7a:61:81:ab:62:f7:cf:b0:82:f5:
97:28:b5:84:f7:a3:95:d4:55:a1:05:15:e1:3f:dc:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EF:8A:93:C4:05:41:B4:1E:DA:26:3D:79:73:86:DC:28:54:DC:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6266CAA76211F085EA6991DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
66:d0:aa:96:05:55:d0:02:4b:16:fb:ce:4f:a7:b2:eb:11:00:
89:8b:e2:b5:4a:2d:c4:25:96:4a:8e:2d:0b:b8:e2:9a:13:db:
65:b6:4d:91:31:bf:91:43:b1:bb:b7:26:4a:1a:d8:c5:bd:93:
49:67:98:96:ed:42:25:b6:fe:ff:71:1f:f2:56:d3:b0:d1:11:
69:56:20:c2:b1:5d:32:ad:19:0c:0d:fe:7d:a5:32:0a:29:f6:
82:e5:bd:5a:cf:3d:03:20:2f:ba:4e:3d:2f:d1:8a:d8:a4:bb:
98:d3:4c:79:9b:2a:3e:76:18:1c:f7:4e:37:6b:28:73:02:aa:
51:1a:cb:c5:1e:f4:6d:b7:97:92:9b:6f:c3:f6:e1:e8:67:d0:
a4:19:cb:f5:8b:ae:c0:c8:c0:16:16:31:92:ba:d6:4d:70:3f:
d2:3a:44:f3:c9:00:b7:a2:fe:80:30:f7:21:49:32:87:8e:58:
ab:bf:7b:bc:06:c1:65:07:ba:a9:0e:60:12:b6:f9:9b:ef:fb:
b2:20:1f:a2:d1:7d:16:5f:55:a9:ba:b0:8c:09:da:4d:e0:57:
00:3e:e6:5d:e5:3b:d1:54:20:11:23:2e:17:39:23:ab:b4:e4:
4f:4c:7f:66:76:94:19:b1:b0:53:d3:be:5b:6a:fd:3a:7b:73:
6a:07:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:32 2025 by rpki-client