Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CA885EB31F11F081574F96DAE4EC9C.roa
File: B1CA885EB31F11F081574F96DAE4EC9C.roa (raw, json)
Hash identifier: Wl+PXHM4wnS01dIl9d9+Kwd438dX+uBBGCyIvYnsxhk=
Subject key identifier: C0:D1:5A:93:45:42:F6:69:44:F4:37:43:52:C8:8F:FD:F7:AF:14:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CA885EB31F11F081574F96DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 10:28:37 +0000
ROA not before: Mon 27 Oct 2025 10:28:30 +0000
ROA not after: Mon 01 Dec 2025 10:28:30 +0000
asID: 44559
IP address blocks: 156.243.232.0/24 maxlen: 24
156.243.242.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.243.255.0/24 maxlen: 24
156.244.209.0/24 maxlen: 24
156.244.210.0/24 maxlen: 24
156.244.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99025 (0x182d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:28:30 2025 GMT
Not After : Dec 1 10:28:30 2025 GMT
Subject: CN=68ff4955-bf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:37:66:ee:50:9a:bb:20:34:30:ff:d6:88:
f0:28:16:a6:31:bd:09:6c:57:50:6c:3a:03:c6:42:
5e:d8:a2:fb:78:c6:66:04:59:fa:1c:fe:9a:76:cd:
a1:88:85:4e:16:96:f5:7f:21:f2:fb:a5:ab:f3:8b:
ef:69:c7:a1:23:ef:c7:1b:18:d2:65:8b:c8:c8:a2:
cb:eb:e0:08:14:18:05:70:f9:03:68:16:5e:a5:29:
7d:51:7d:b1:7d:09:1d:c6:d2:35:b2:87:24:8b:84:
e7:1a:72:36:92:f7:cc:dd:21:03:91:19:b6:59:54:
45:ed:7a:81:10:3f:0b:17:69:30:1d:06:7d:38:e2:
4c:c1:8f:4b:5c:fe:e0:59:d1:c9:7d:de:67:19:7e:
9a:97:c0:24:c5:5a:25:db:17:78:d3:15:82:f6:b2:
03:64:bb:82:86:4b:64:e7:1a:5d:a7:b8:4a:ce:50:
5a:e8:9e:9e:71:d9:f0:34:16:da:44:93:15:2a:4c:
00:ba:74:10:4c:3d:59:df:20:5c:e9:2e:1e:ed:2c:
c1:ac:9e:dd:85:7b:09:4b:0c:35:9c:dd:e9:6f:84:
16:ae:35:a2:00:4d:84:3b:1c:67:23:92:70:af:7f:
24:61:b9:e1:f0:fd:fe:30:53:88:a2:b5:bb:00:ae:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:5A:93:45:42:F6:69:44:F4:37:43:52:C8:8F:FD:F7:AF:14:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1CA885EB31F11F081574F96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.232.0/24
156.243.242.0/23
156.243.248.0/23
156.243.254.0/23
156.244.209.0-156.244.211.255
Signature Algorithm: sha256WithRSAEncryption
a1:e0:bc:aa:34:02:77:f1:88:fe:7a:0d:dd:d6:b2:08:fa:7a:
01:7c:59:aa:c2:84:14:c1:a6:5e:db:4f:1a:68:87:98:d8:66:
ea:3d:6d:80:5f:d4:a2:60:a1:74:15:37:4a:86:07:bd:13:71:
28:09:d4:1e:1a:01:ff:93:b9:72:15:07:3d:8a:1d:ac:32:59:
f3:22:7b:ab:84:cd:7b:64:b3:0b:af:7d:c1:61:16:45:d0:fc:
38:64:30:00:a9:93:b6:3e:70:03:3b:57:36:9b:2c:34:c6:57:
81:8c:ef:47:2d:be:df:08:17:15:a0:e0:32:6d:f9:a3:44:9b:
84:6c:3b:94:85:1a:2e:54:ca:b4:2d:05:9e:90:e5:0b:60:5c:
a6:08:1c:09:23:63:35:c5:2e:e0:8c:1c:77:9a:78:e1:e6:fb:
02:98:2e:07:e5:74:79:42:84:c0:e5:b1:78:6c:52:a3:9d:e4:
c0:a7:bc:b8:ae:2f:b7:b4:37:43:9e:f9:5f:08:27:34:8b:b4:
e6:79:30:3f:3b:f6:e2:68:0e:b1:b7:74:db:9a:79:3a:71:37:
74:44:33:b7:9f:28:eb:e2:ba:43:87:b1:7f:56:d5:28:22:40:
65:49:eb:2b:5d:7c:30:2d:b2:d8:14:5a:07:2f:f9:c3:ca:57:
97:b2:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:34:57 2025 by rpki-client