Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD8C9862B00311F0BF150BB3DAE4EC9C.roa
File: CD8C9862B00311F0BF150BB3DAE4EC9C.roa (raw, json)
Hash identifier: +nl4tMROI8399mK/eeB4wUS51GASb9lT2z7WgM+KVK4=
Subject key identifier: 94:D0:CF:24:74:D7:A9:AC:5E:AF:D2:87:A5:64:A6:D3:A3:6A:12:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018249
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD8C9862B00311F0BF150BB3DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 11:31:23 +0000
ROA not before: Thu 23 Oct 2025 11:31:18 +0000
ROA not after: Fri 28 Nov 2025 11:31:18 +0000
asID: 44559
IP address blocks: 156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98889 (0x18249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 11:31:18 2025 GMT
Not After : Nov 28 11:31:18 2025 GMT
Subject: CN=68fa120b-f699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:3a:0a:98:43:d3:0a:19:be:8d:f1:d0:8f:
bd:fb:1d:46:4e:1d:13:9d:fc:50:e0:13:b6:4c:00:
61:90:83:a1:16:8c:65:b6:89:ff:c1:d8:6d:5e:80:
24:25:bc:02:b8:0e:63:cc:24:d9:da:85:96:4f:f8:
6e:b6:75:8d:fb:1e:a0:90:8b:49:93:ed:af:fb:79:
14:9f:e2:fe:9b:b8:11:81:2c:31:52:fe:6b:c8:e4:
66:70:ce:06:98:40:1b:46:1b:b4:f8:1e:e4:3b:7d:
df:b4:98:c3:bb:0c:88:70:ca:4f:e5:eb:f2:55:f6:
da:14:fe:3e:82:be:cb:32:4c:ec:e2:5c:d7:67:08:
18:90:82:77:1c:77:6f:ad:4b:61:81:16:05:a1:72:
d9:4c:18:ae:0c:e3:f6:71:8e:a7:58:22:25:1e:1d:
e6:6d:7b:28:3f:bf:16:67:58:12:08:12:81:1e:fe:
c3:27:81:69:43:4b:d5:fe:d0:7d:82:21:5a:95:f3:
77:92:69:64:0c:03:e7:9a:dd:f3:f6:8f:75:9a:0d:
49:8a:70:79:e0:43:55:61:3b:dc:34:92:4d:74:62:
fb:43:ed:78:4d:1b:3a:5b:17:5b:a5:2f:5f:18:b8:
5e:68:17:c7:a0:aa:8d:f1:9d:be:da:10:67:8e:e9:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:CF:24:74:D7:A9:AC:5E:AF:D2:87:A5:64:A6:D3:A3:6A:12:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD8C9862B00311F0BF150BB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.249.0-156.246.255.255
Signature Algorithm: sha256WithRSAEncryption
3e:5a:5c:e0:7c:b6:5a:cd:60:4e:c0:88:36:40:33:e2:8d:a0:
18:99:e8:7f:64:82:da:58:2f:0d:a4:78:b0:fa:02:13:e1:31:
8b:ec:93:a0:12:e6:08:52:68:34:57:fb:00:73:9a:49:f8:51:
12:24:18:90:fc:2e:36:60:79:35:8f:90:23:ad:35:c2:dd:89:
bb:cf:90:0a:51:d7:ce:22:c3:d4:a3:38:23:2a:35:fc:6b:a3:
c4:46:66:98:7e:e4:e5:02:7b:49:bf:b3:3c:07:3d:e6:48:91:
ea:52:d1:d6:c5:31:f0:24:2c:67:80:b2:de:c3:a1:db:27:e6:
e6:b3:1d:b9:bd:9d:f3:26:04:d3:9b:27:ae:66:00:84:31:c2:
46:82:eb:39:54:84:89:1e:42:03:f6:93:97:a5:e4:96:04:fd:
18:af:67:99:cc:04:ee:b8:65:38:d9:5b:f1:5e:84:b4:38:4d:
2b:a6:b0:2e:83:81:2e:d6:bc:ce:39:92:32:25:19:71:ad:ed:
4c:23:f1:ef:eb:7e:d5:f9:a6:c2:89:00:74:08:bf:b9:ba:ea:
91:02:8d:53:42:c5:33:10:ae:d6:25:1c:41:f5:9e:5e:42:60:
cc:a6:06:d5:8c:2c:7e:7e:38:bf:1c:d4:65:57:cc:e3:56:99:
e9:25:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:36 2025 by rpki-client