Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5B8A13E945D11F0B1C92CDBDAE4EC9C.roa
File: B5B8A13E945D11F0B1C92CDBDAE4EC9C.roa (raw, json)
Hash identifier: RqhXvuG6y6YtTSgJKt5ZFRoRU3+UPWeTcB5K1axOIN4=
Subject key identifier: D4:54:3A:BC:65:01:35:CC:E8:5D:0B:73:B3:20:4C:6F:B4:92:7E:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5B8A13E945D11F0B1C92CDBDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 07:04:25 +0000
ROA not before: Thu 18 Sep 2025 07:04:21 +0000
ROA not after: Thu 30 Oct 2025 07:04:21 +0000
asID: 137547
IP address blocks: 156.245.242.0/24 maxlen: 24
156.245.243.0/24 maxlen: 24
156.245.248.0/24 maxlen: 24
156.245.249.0/24 maxlen: 24
156.245.250.0/24 maxlen: 24
156.245.251.0/24 maxlen: 24
156.245.252.0/24 maxlen: 24
156.245.253.0/24 maxlen: 24
156.245.254.0/24 maxlen: 24
156.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97227 (0x17bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 07:04:21 2025 GMT
Not After : Oct 30 07:04:21 2025 GMT
Subject: CN=68cbaef9-0efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:40:8c:8d:71:14:c6:37:13:1b:e0:51:31:
37:1d:44:91:eb:4d:5c:53:9e:01:24:41:c5:bd:a4:
a8:23:77:e8:f8:18:e1:15:3b:0c:09:ed:a1:8d:ec:
e8:13:ff:f9:0c:27:7c:19:18:f8:3f:d6:d9:af:62:
18:f4:2c:cb:e6:07:e0:43:6b:9c:56:79:14:71:99:
9d:61:54:dd:15:62:65:cc:12:43:12:6e:df:22:bb:
74:e1:8d:65:f1:bf:c4:8f:83:82:e1:0a:c5:88:90:
db:d8:cf:3f:2b:cb:7d:f8:6e:24:47:f6:01:c7:41:
ff:28:c9:a1:5b:de:2a:a6:fa:b2:28:39:5e:9d:4b:
6e:ba:27:41:e3:13:eb:91:d9:77:58:28:29:ac:29:
87:ea:a3:9c:30:79:9a:96:09:95:15:50:47:67:56:
0e:2b:33:43:75:5c:07:66:98:70:cf:20:4f:cb:89:
ad:e1:0b:00:7c:01:26:01:41:4b:85:35:f1:18:f1:
1b:29:ff:e3:df:28:d0:73:e7:f2:b2:80:ac:eb:05:
fd:e5:de:e5:4f:bb:4c:56:cc:78:c9:67:b5:59:b0:
8c:c5:22:7d:3f:e3:b4:03:28:ac:ac:b5:4b:28:de:
6c:ed:f7:71:c3:17:31:14:61:a5:e9:83:00:53:e3:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:3A:BC:65:01:35:CC:E8:5D:0B:73:B3:20:4C:6F:B4:92:7E:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5B8A13E945D11F0B1C92CDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
89:da:09:61:a7:d2:20:c1:4f:ec:81:3e:a6:b4:72:44:17:85:
7a:b7:cd:b7:fa:2a:80:ae:fe:f9:98:3f:87:22:0d:b1:5f:68:
2b:72:66:90:48:cd:bb:9e:0e:51:26:6e:0d:04:6e:7c:c7:30:
1d:54:36:a3:83:f9:5a:02:eb:34:6e:97:d8:0e:13:01:f6:91:
39:e7:aa:c3:5f:fd:c9:37:ca:17:d6:66:49:c0:f0:02:b7:4e:
96:7e:e9:95:2f:14:41:da:34:1f:ae:9a:29:66:f7:d8:ec:8a:
13:50:be:13:16:7d:2f:1d:8c:30:6d:04:16:e7:ac:8c:c7:76:
61:10:19:f9:db:eb:39:5d:ee:60:22:15:7f:2b:79:2f:ed:15:
a9:bd:f1:7a:f1:93:fa:89:a0:e6:44:08:0b:e9:fd:bd:a5:a1:
04:9e:ef:23:ea:2e:ed:cf:a1:fe:6b:7f:cd:ef:cc:03:cf:a3:
3b:90:41:8c:be:2f:2c:27:15:3d:7c:e8:34:2d:37:5f:1a:1f:
50:41:af:fc:15:df:5f:51:b9:12:60:37:b7:9a:ee:90:ae:86:
34:97:27:13:ca:47:0b:ca:5c:f1:bf:c7:f7:dc:c0:8c:9e:da:
27:cb:79:83:a2:5c:25:84:30:0d:ef:26:94:02:0e:fb:2c:3d:
b5:0c:fb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:39 2025 by rpki-client