Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CEE899E9D6511F0A94186C6DAE4EC9C.roa
File: 6CEE899E9D6511F0A94186C6DAE4EC9C.roa (raw, json)
Hash identifier: rfZvQeYeutenBIM0cj42K+VewhQQ4uQ83DrndxLtjLU=
Subject key identifier: 24:74:1E:E8:F4:1E:52:80:CF:33:CF:A1:F3:24:DC:8B:2A:AD:76:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CEE899E9D6511F0A94186C6DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 18:52:20 +0000
ROA not before: Mon 29 Sep 2025 18:52:15 +0000
ROA not after: Sun 29 Mar 2026 18:52:15 +0000
asID: 328608
IP address blocks: 156.244.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97753 (0x17dd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 18:52:15 2025 GMT
Not After : Mar 29 18:52:15 2026 GMT
Subject: CN=68dad564-d69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:11:1b:5b:b3:78:7e:a4:9e:3e:5e:81:6d:
25:b3:6b:d7:e9:2c:a1:f3:07:77:26:9d:b4:37:de:
8b:62:00:19:f2:9a:59:79:e0:23:5d:2f:71:e5:ba:
05:4c:15:25:ac:78:18:e2:38:a8:c0:f7:b3:6f:bb:
3c:23:05:4a:38:f3:56:88:bf:e6:70:54:e5:71:ab:
82:6e:a9:f4:61:9d:03:0c:ec:e4:30:24:a3:cd:7d:
70:08:06:f3:3e:a9:d6:9f:8d:e1:1d:51:82:68:4c:
e5:6b:b7:b5:6b:c7:13:a3:14:65:c8:48:a2:cc:bd:
a9:56:7a:df:ee:7d:48:ec:d4:ee:77:76:b7:30:13:
02:3a:ec:1a:ce:f0:36:1d:62:00:e7:f6:c1:ec:c8:
08:47:5a:6b:8e:d5:8f:9c:2c:ac:46:49:ba:3c:44:
f3:1f:c2:62:2d:3f:a8:8f:87:5a:26:31:e2:e4:b6:
78:4b:3c:54:e8:7b:04:d5:dd:48:ba:f5:ac:e9:b5:
d9:32:e1:04:9a:03:60:37:69:25:fb:b0:37:31:db:
d4:7d:c8:ee:8f:fb:e9:4c:3e:2a:8d:6d:10:bc:9d:
10:42:b8:62:44:fb:a3:a7:a3:88:51:5d:b4:00:44:
3f:db:27:25:2b:1f:c2:01:3a:c3:68:d6:10:ec:f0:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:1E:E8:F4:1E:52:80:CF:33:CF:A1:F3:24:DC:8B:2A:AD:76:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CEE899E9D6511F0A94186C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.204.0/22
Signature Algorithm: sha256WithRSAEncryption
57:42:99:78:bc:6d:f9:98:01:69:a7:5d:7d:49:b7:65:c8:18:
ed:95:9a:be:20:b2:64:48:f2:9d:df:6b:ba:ed:7b:30:a7:e7:
dd:c5:05:ab:b5:8a:2f:f6:03:58:da:1d:d5:62:c9:aa:f1:67:
68:8b:4b:84:5d:87:13:66:b1:59:5a:7b:2f:fd:c5:fe:46:1c:
d6:ad:4b:7e:f6:c3:cf:27:12:a9:2e:e2:f0:ad:37:e5:b5:f3:
5c:ca:70:1f:29:66:3c:5a:e7:59:43:43:6d:28:e5:d1:79:63:
f3:37:6b:1c:74:d5:4e:3e:40:0e:23:ff:72:b8:f5:15:f2:55:
24:43:1d:c5:79:ac:f5:e1:28:58:f5:19:b2:bb:f3:c8:52:db:
79:91:22:a4:18:ee:ac:81:4d:92:5a:ec:6c:93:27:16:58:6e:
f4:11:e8:e9:67:91:0e:a5:18:e3:17:39:f1:5a:78:6f:25:ba:
5d:44:c3:40:4e:6c:c1:b1:91:a3:0f:31:c1:e2:af:2a:23:22:
35:99:4d:54:99:d2:21:3d:b3:f6:b6:5c:b7:a7:c3:87:d8:97:
12:ff:07:f2:f2:e5:f4:b8:87:9a:a0:cf:27:0d:12:37:d6:24:
f9:e6:7f:c0:07:a3:4b:ce:4f:8f:ca:49:31:97:6f:10:ab:e5:
33:1d:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:23 2025 by rpki-client