Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBAF5B6AB31E11F0AEE61592DAE4EC9C.roa
File: CBAF5B6AB31E11F0AEE61592DAE4EC9C.roa (raw, json)
Hash identifier: cN80Pkd+/7vTd0x6Rz4UeIRbsisfI7g2uGMaNrcJQno=
Subject key identifier: 07:6F:1D:1C:3F:D5:39:56:E5:3D:63:6B:3D:96:89:93:1E:18:9F:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBAF5B6AB31E11F0AEE61592DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 10:22:10 +0000
ROA not before: Mon 27 Oct 2025 10:22:05 +0000
ROA not after: Mon 01 Dec 2025 10:22:05 +0000
asID: 44559
IP address blocks: 156.243.220.0/24 maxlen: 24
156.243.221.0/24 maxlen: 24
156.243.222.0/24 maxlen: 24
156.243.224.0/24 maxlen: 24
156.243.226.0/24 maxlen: 24
156.243.227.0/24 maxlen: 24
156.243.231.0/24 maxlen: 24
156.243.233.0/24 maxlen: 24
156.243.234.0/24 maxlen: 24
156.243.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99023 (0x182cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:22:05 2025 GMT
Not After : Dec 1 10:22:05 2025 GMT
Subject: CN=68ff47d2-b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:eb:8e:00:44:7b:03:12:ba:76:32:1a:11:
b6:fc:35:76:2f:bf:10:8f:b8:08:9b:36:f3:51:87:
57:3a:e6:22:3c:10:d8:8e:74:63:83:be:32:01:74:
f5:7c:ef:dc:66:3f:0a:a6:58:34:54:77:dd:f4:a8:
fe:3e:88:96:f1:71:09:18:61:02:d8:6a:5f:6d:89:
29:c5:5b:fd:26:35:12:6c:9f:f0:4e:83:5e:a7:84:
41:99:da:88:c4:50:a4:48:a1:46:01:af:bf:c7:56:
67:5e:f2:23:69:fe:b3:8b:05:5e:8f:f6:4a:7f:31:
fa:2a:73:16:b4:10:17:11:68:87:04:98:c4:24:16:
01:9f:49:15:c2:87:3b:9b:16:d9:83:8d:64:52:f0:
02:70:95:f6:c5:6a:de:f0:61:eb:3e:fa:48:be:9d:
e3:57:d3:96:af:d7:4b:f1:72:37:20:ce:b2:d9:c6:
6d:9a:1b:95:e4:97:be:7b:d5:c4:27:f0:c8:57:5f:
37:a1:20:e4:ff:ce:85:f6:8f:fe:37:3e:23:5d:3c:
4a:c0:2a:21:89:e8:4e:e5:0c:31:a5:69:91:af:ad:
40:5e:26:59:23:d9:78:75:c2:67:c4:80:07:9f:c8:
7c:81:aa:18:20:f8:e6:21:52:bd:f8:43:99:9d:76:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:1D:1C:3F:D5:39:56:E5:3D:63:6B:3D:96:89:93:1E:18:9F:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBAF5B6AB31E11F0AEE61592DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.220.0-156.243.222.255
156.243.224.0/24
156.243.226.0/23
156.243.231.0/24
156.243.233.0-156.243.234.255
156.243.240.0/24
Signature Algorithm: sha256WithRSAEncryption
59:57:5f:af:8a:dd:7d:0f:f4:75:35:67:e3:03:84:53:09:c1:
c4:09:48:a0:f1:8a:d6:f5:8a:b5:7d:d1:05:81:f0:0f:7a:d7:
07:2b:25:b5:8b:b4:6f:f0:4c:a8:8c:00:d9:0f:37:29:c1:7c:
ec:07:7f:3a:93:2e:9a:a5:be:96:60:1a:c9:c7:d4:d3:77:86:
37:ff:32:d8:78:67:a9:d6:8a:ab:ea:17:ed:2a:86:d8:bb:b7:
16:dc:90:8d:db:9a:95:63:5e:c2:1a:cd:34:9f:22:71:36:09:
20:6f:65:d5:cc:f4:fa:0a:0d:8d:5c:78:d7:38:43:c4:50:83:
27:58:1c:c5:5f:d4:b7:cc:35:42:c5:f9:69:77:cc:0e:0f:d4:
76:cf:a8:e7:3e:7a:67:46:eb:ce:17:b2:15:ca:5d:89:19:24:
c7:27:b3:97:a6:24:32:bb:1c:96:4b:ea:4d:e1:60:8d:b9:83:
81:d0:2f:b8:66:ec:2c:19:4b:5c:53:e3:7f:34:c5:45:83:03:
94:5b:89:63:e9:eb:fd:c1:e9:02:08:71:90:b7:e6:32:01:45:
04:5a:84:c8:d1:77:dc:b1:d1:fd:48:e9:40:07:4c:43:95:ed:
46:b4:d4:7a:d7:9d:7d:f8:87:e4:7d:f2:12:1b:9e:d9:94:77:
be:7d:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:00 2025 by rpki-client