Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D01A26AB34211F08040DE80DAE4EC9C.roa
File: 2D01A26AB34211F08040DE80DAE4EC9C.roa (raw, json)
Hash identifier: S2/BVmKsLHXP5yNo0HjNgcOrz5TR9SME2HOdh0jZgjk=
Subject key identifier: CE:94:C2:04:AB:F6:7F:C3:97:B7:98:A9:80:AC:17:21:8A:45:70:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018306
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D01A26AB34211F08040DE80DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 14:35:26 +0000
ROA not before: Mon 27 Oct 2025 14:35:21 +0000
ROA not after: Sun 30 Nov 2025 14:35:21 +0000
asID: 9304
IP address blocks: 156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99078 (0x18306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 14:35:21 2025 GMT
Not After : Nov 30 14:35:21 2025 GMT
Subject: CN=68ff832d-7009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:0e:dd:4e:18:15:b5:9a:ee:fa:a0:67:14:
83:a5:f6:73:8a:0f:ec:c7:04:d9:25:9f:d7:68:37:
33:5c:f7:11:e5:d9:ae:e3:b3:40:ab:13:2d:83:0d:
12:40:60:f7:2d:3e:7c:dd:d9:05:e9:fe:93:88:f8:
a8:48:46:25:12:6b:8b:6c:25:58:bb:ea:4c:68:d1:
dd:18:66:3d:09:47:55:40:6c:38:dd:9a:3c:00:d5:
64:60:6e:77:a5:6a:63:18:ab:c8:95:78:3b:ea:e6:
10:ea:19:1c:fa:77:e9:85:97:44:48:47:7d:80:b8:
34:69:6d:13:e0:4d:ed:a5:ff:e0:7f:36:ea:9c:53:
b2:e8:7c:ac:82:6d:75:b5:9a:01:4c:1b:cf:5c:f0:
f2:c2:48:09:9b:9b:f3:df:6e:41:1e:2c:4f:d4:08:
b4:90:3e:cd:05:18:f1:1f:79:94:9c:97:31:35:02:
83:98:94:00:dc:93:1b:fc:48:05:6e:1b:ee:79:17:
7d:dc:ba:7d:bc:a7:4d:7a:49:79:21:ed:e7:7c:b7:
6e:0d:a1:31:d6:ee:91:0c:69:36:20:1b:96:a4:3e:
2a:cc:37:51:d7:11:7e:b2:a1:0c:d9:b6:49:dc:fa:
37:3f:4f:5d:ed:d9:4a:6c:d3:7a:15:13:d8:bc:c6:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:C2:04:AB:F6:7F:C3:97:B7:98:A9:80:AC:17:21:8A:45:70:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D01A26AB34211F08040DE80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.180.0/24
156.249.187.0/24
156.249.190.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c1:d6:c9:40:77:db:b8:05:48:bd:53:55:df:95:c6:a8:ad:
0b:bb:15:ed:1f:a1:50:39:d7:ab:82:e9:54:76:6c:81:15:81:
47:63:fb:c9:f2:e9:55:d7:0f:63:70:ca:9d:cc:79:bc:2c:ab:
23:5c:a0:1b:1f:4d:76:1e:18:06:ec:00:97:18:fb:88:55:19:
52:84:26:ba:60:40:c1:45:c1:1e:ba:66:38:10:83:06:c0:87:
a2:44:e7:55:69:2c:1e:0b:be:b0:9f:2a:91:e4:2d:27:ba:76:
5d:83:f4:7b:3c:76:58:85:de:45:10:72:e0:fa:ec:83:b7:14:
a9:95:df:ab:ad:42:4d:a9:3e:39:a0:96:c7:51:74:e9:c4:e4:
bc:ae:35:3a:d8:4a:95:64:d6:67:bb:b1:71:5a:7b:21:3e:2a:
e9:e7:bf:4c:3b:cc:54:d7:93:ba:ac:b7:34:ca:a2:04:43:34:
3e:44:dc:2f:a5:55:50:65:7a:02:ab:a7:1a:56:44:5f:63:ca:
41:b0:0c:c9:8c:a6:4e:d1:f7:96:4b:83:b9:b1:6d:a6:2b:8f:
d4:c0:d1:60:41:a0:ce:09:1e:29:fb:b8:95:a1:b7:d2:b7:07:
32:8f:77:d8:93:02:8a:c8:d6:4e:ca:71:a3:25:d7:9d:ad:37:
d7:64:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:39 2025 by rpki-client