Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAA875A4B37711F0AA3CF9CFDAE4EC9C.roa
File: CAA875A4B37711F0AA3CF9CFDAE4EC9C.roa (raw, json)
Hash identifier: otGueFYzd3JJbEQXLe8pkxA4HIQm7218dZcteCb6yhM=
Subject key identifier: 1D:46:68:5C:20:C2:EF:4E:0F:C3:2C:0D:76:D5:C0:5B:A2:A7:C4:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018332
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAA875A4B37711F0AA3CF9CFDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 20:59:13 +0000
ROA not before: Mon 27 Oct 2025 20:59:08 +0000
ROA not after: Tue 02 Dec 2025 20:59:08 +0000
asID: 395793
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99122 (0x18332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 20:59:08 2025 GMT
Not After : Dec 2 20:59:08 2025 GMT
Subject: CN=68ffdd21-8966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:17:3a:14:12:37:04:1a:27:67:a8:22:6e:
83:0b:8e:0a:1e:e2:50:9c:e2:ba:6a:2d:ca:44:79:
ac:19:00:8e:7b:0a:8e:bf:d2:73:1e:5d:fe:83:ed:
5f:24:8a:1d:20:21:e7:02:25:07:bc:55:26:1c:d7:
0a:10:60:1d:83:70:b0:ad:09:d0:6a:bf:1c:49:12:
be:41:c7:93:57:b7:cf:23:65:f3:55:b6:fb:84:1f:
97:e6:d9:58:15:d9:28:06:e1:55:54:42:80:d3:85:
7a:24:49:51:be:42:8e:80:6e:64:4a:0b:ce:a4:5d:
28:da:45:7c:b7:4f:70:77:45:16:4f:c5:22:ee:2d:
84:f6:44:87:c0:cc:df:0e:c4:eb:7f:e1:10:c9:60:
dc:33:59:cd:df:da:77:74:2e:87:53:77:c3:07:9a:
e2:3d:71:90:f3:7b:1c:7f:b8:55:1a:2e:8b:dc:12:
ca:99:47:44:52:05:8e:88:a1:18:8d:b0:67:78:0a:
e9:b6:91:bf:36:ea:d5:a2:e4:66:f6:79:fd:4f:79:
4d:99:33:b5:a5:af:58:48:a2:8b:05:d4:75:45:6d:
3d:56:8b:44:41:d9:ec:76:51:22:13:a4:75:9f:04:
c9:17:14:c4:b7:99:2d:c7:8a:a8:17:2e:c3:fb:24:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:68:5C:20:C2:EF:4E:0F:C3:2C:0D:76:D5:C0:5B:A2:A7:C4:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAA875A4B37711F0AA3CF9CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
Signature Algorithm: sha256WithRSAEncryption
36:8b:10:fb:fa:5d:bb:95:9d:74:b1:5a:29:53:dc:e1:52:26:
e6:83:7c:90:38:b4:0c:a9:77:8c:d3:fa:0d:f5:31:37:4a:66:
db:9d:e7:be:73:0b:11:21:ed:da:d9:4b:16:c8:14:f8:d6:d2:
6f:9d:fd:a2:f2:de:b1:56:8e:a4:b6:ff:b3:b4:ef:46:05:45:
c1:aa:34:91:3a:a8:a6:02:e3:cb:9b:b7:17:4c:c6:c1:8c:59:
db:69:e6:94:31:d7:ba:e3:d4:ba:b3:1b:13:59:51:84:57:b1:
88:71:c0:e0:5e:c7:5a:fa:c8:df:9f:f6:7d:c5:b6:90:0d:6e:
56:6f:14:a4:66:65:d2:da:ac:88:45:d9:4b:1a:80:96:51:d7:
16:c8:c3:08:14:b5:c4:71:83:07:d5:b5:59:2e:4f:89:86:68:
25:58:4b:a6:32:1a:a8:e4:84:dd:82:2a:e2:9a:e7:c4:6a:32:
47:42:17:86:62:72:ac:b8:cc:29:b3:ce:ba:f5:8f:49:ea:b2:
22:e6:13:95:6f:2a:54:08:68:da:23:07:28:c0:f2:72:b1:6c:
1b:65:59:98:5c:16:2e:44:1d:9a:98:4c:ce:b9:c3:33:1d:30:
99:d1:1a:78:c0:0b:42:30:93:03:94:b9:d4:d7:5a:24:1e:5f:
04:64:73:4c
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAYMyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI3MjA1OTA4WhcNMjUxMjAyMjA1OTA4WjAYMRYw
FAYDVQQDEw02OGZmZGQyMS04OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArqwXOhQSNwQaJ2eoIm6DC44KHuJQnOK6ai3KRHmsGQCOewqOv9JzHl3+
g+1fJIodICHnAiUHvFUmHNcKEGAdg3CwrQnQar8cSRK+QceTV7fPI2XzVbb7hB+X
5tlYFdkoBuFVVEKA04V6JElRvkKOgG5kSgvOpF0o2kV8t09wd0UWT8Ui7i2E9kSH
wMzfDsTrf+EQyWDcM1nN39p3dC6HU3fDB5riPXGQ83scf7hVGi6L3BLKmUdEUgWO
iKEYjbBneArptpG/NurVouRm9nn9T3lNmTO1pa9YSKKLBdR1RW09VotEQdnsdlEi
E6R1nwTJFxTEt5ktx4qoFy7D+yTxzwIDAQABo4ICujCCArYwHQYDVR0OBBYEFB1G
aFwgwu9OD8MsDXbVwFuip8Q9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQUE4NzVBNEIzNzcxMUYwQUEzQ0Y5Q0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCnOYQAwQCnOY0AwQBnOaGAwQB
nOgCAwQDnOgwMA0GCSqGSIb3DQEBCwUAA4IBAQA2ixD7+l27lZ10sVopU9zhUibm
g3yQOLQMqXeM0/oN9TE3Smbbnee+cwsRIe3a2UsWyBT41tJvnf2i8t6xVo6ktv+z
tO9GBUXBqjSROqimAuPLm7cXTMbBjFnbaeaUMde649S6sxsTWVGEV7GIccDgXsda
+sjfn/Z9xbaQDW5WbxSkZmXS2qyIRdlLGoCWUdcWyMMIFLXEcYMH1bVZLk+Jhmgl
WEumMhqo5ITdgirimufEajJHQheGYnKsuMwps8669Y9J6rIi5hOVbypUCGjaIwco
wPJysWwbZVmYXBYuRB2amEzOucMzHTCZ0Rp4wAtCMJMDlLnU11okHl8EZHNM
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:21 2025 by rpki-client