Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11E7A8CAB34311F0A4669187DAE4EC9C.roa
File: 11E7A8CAB34311F0A4669187DAE4EC9C.roa (raw, json)
Hash identifier: 36xe5AmZ1wZTC2+ypLhkdYh+TjbfJq6QKbGU0qA8rsY=
Subject key identifier: F1:44:38:C0:BD:69:53:CB:19:84:E6:F5:68:09:16:5E:31:FF:5F:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018308
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11E7A8CAB34311F0A4669187DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 14:41:50 +0000
ROA not before: Mon 27 Oct 2025 14:41:42 +0000
ROA not after: Sun 30 Nov 2025 14:41:42 +0000
asID: 9304
IP address blocks: 156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99080 (0x18308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 14:41:42 2025 GMT
Not After : Nov 30 14:41:42 2025 GMT
Subject: CN=68ff84ae-22f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:d4:0f:74:01:af:8f:3f:19:b8:30:63:f1:
d6:a9:1c:ca:69:ae:37:43:98:64:a0:f3:d3:83:f2:
a0:0b:13:4d:ec:44:f3:76:c6:86:44:8f:96:78:f6:
94:47:cf:5a:ed:5c:15:f7:fa:fa:00:13:2f:59:a0:
0f:e1:d2:ed:7b:bd:ea:30:10:fc:cf:01:0a:eb:40:
1c:57:22:b5:c3:f3:3d:e9:94:c2:59:80:19:97:30:
fe:3e:77:fd:2d:f9:54:12:ec:90:a1:a0:3a:0d:37:
7c:7a:62:2d:93:64:6f:e9:6b:cb:10:f0:4c:6f:38:
9e:5f:24:06:0c:81:bf:47:92:5e:04:cb:10:ea:28:
78:98:27:db:68:da:c2:01:fe:79:f2:f0:d6:13:2d:
db:2c:4c:ed:46:8b:51:ea:d9:65:a7:c1:43:5e:f6:
d1:ce:c0:c2:d5:37:b0:44:27:fc:d7:98:f8:fb:c0:
95:f3:68:39:76:23:77:fe:66:b3:70:37:59:5a:37:
cc:8f:36:72:17:b0:1d:85:79:f4:c8:4a:17:90:80:
df:67:5d:27:5f:da:13:11:d1:5c:38:02:d4:16:25:
0d:ae:75:fc:c6:a7:d6:15:41:b8:5a:b2:67:ac:27:
63:2a:44:da:c7:e6:c8:fa:bb:46:4c:80:62:08:1b:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:38:C0:BD:69:53:CB:19:84:E6:F5:68:09:16:5E:31:FF:5F:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11E7A8CAB34311F0A4669187DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.249.183.0/24
156.249.185.0/24
156.249.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d9:45:5f:1d:77:e1:b6:68:24:27:c4:e7:8a:02:06:7e:91:
ca:6b:9d:b1:ca:6e:92:4b:7e:cd:09:61:b6:63:40:67:b9:4c:
eb:4a:1a:ef:dd:1c:e6:6d:16:25:55:8c:87:2d:e5:4b:d1:18:
8d:12:50:10:31:73:c4:21:37:13:cc:0d:4f:f4:da:47:9d:d6:
5f:d9:cb:4c:c0:9c:22:d0:b6:f0:a2:91:b7:7b:a0:d5:95:27:
56:d1:93:4f:97:a4:b5:fb:c3:24:cb:9d:23:fc:7a:f2:4e:33:
2a:03:4c:5e:3c:a4:71:c2:a6:51:e4:fb:5b:58:b3:39:37:49:
c1:6d:b5:f6:6e:e5:9f:35:23:2e:e6:67:2f:6f:d5:02:28:02:
d1:85:8c:38:9c:5d:b1:c6:1d:af:e7:06:69:8f:f0:42:e6:99:
8d:23:70:72:b3:8b:ca:88:f9:70:40:b3:6b:4b:02:09:6d:27:
42:f0:e6:60:fe:f3:b7:0d:04:3c:18:2e:fc:87:82:ed:4c:34:
2b:67:86:a6:e9:7c:47:65:15:e2:00:bc:6f:55:c2:16:1b:9c:
1f:b0:b1:ae:ff:86:0a:31:92:d7:ce:c4:9b:30:2d:44:34:64:
06:4a:cb:99:a9:3d:c7:0d:fb:1b:67:23:66:16:14:d6:32:e9:
c7:4a:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:40 2025 by rpki-client