Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6EAE9CB3D111F0A31F4A97DAE4EC9C.roa
File: CE6EAE9CB3D111F0A31F4A97DAE4EC9C.roa (raw, json)
Hash identifier: 4sf+ZjE2lsiF3TMJE81ZtZvTshT/cFG3sTugiugZ914=
Subject key identifier: 0C:DC:76:A2:DB:F0:38:CB:37:3D:6C:75:2E:75:51:32:60:EF:FA:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018347
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6EAE9CB3D111F0A31F4A97DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 07:43:34 +0000
ROA not before: Tue 28 Oct 2025 07:43:30 +0000
ROA not after: Sun 30 Nov 2025 07:43:30 +0000
asID: 401783
IP address blocks: 156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99143 (0x18347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 07:43:30 2025 GMT
Not After : Nov 30 07:43:30 2025 GMT
Subject: CN=69007426-a299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:89:f0:93:0f:17:80:19:7a:52:31:19:56:
0d:af:9b:5d:8e:73:1f:2c:25:c7:33:61:53:ca:a6:
80:07:d4:9d:94:36:f9:08:8c:bf:2d:8a:a9:09:9a:
bf:e3:38:90:0e:57:b9:08:35:c6:f8:af:f5:3b:83:
6d:e9:24:a9:6d:62:f7:a3:8c:ba:6d:24:de:ab:b6:
52:a2:f2:d5:96:cc:95:00:31:0c:45:eb:3d:64:9e:
75:53:6b:32:8b:e9:8e:27:23:38:e7:67:16:76:98:
d6:25:b1:86:e8:98:62:3b:50:c2:85:24:bc:e0:5a:
46:40:f8:fe:6a:69:87:06:c8:a4:c5:24:89:56:62:
28:7a:a8:81:29:48:22:02:2e:0b:30:0c:a4:52:40:
88:d6:41:4f:bb:d9:a2:44:29:3a:68:a0:dc:84:17:
95:04:5d:32:58:3a:c4:d2:0c:15:77:b5:e8:db:7a:
ed:11:3a:79:f7:33:86:8e:44:99:50:57:cf:47:58:
eb:0e:e4:ed:d3:36:86:97:2d:0f:b3:d8:ae:d8:7a:
10:3f:ba:1b:0b:27:c3:ff:b2:73:d5:1b:30:4c:4a:
fa:27:62:92:4e:12:ee:c7:ea:4f:e9:7c:f2:d4:1b:
78:7d:4c:5a:41:dd:de:a6:ed:99:7e:7e:47:b0:e2:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DC:76:A2:DB:F0:38:CB:37:3D:6C:75:2E:75:51:32:60:EF:FA:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6EAE9CB3D111F0A31F4A97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.6.0/24
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.249.183.0/24
156.249.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:89:7a:6d:62:62:11:9b:7c:e8:64:9b:ca:0d:61:0f:2b:e7:
0d:5e:90:9f:13:b1:97:04:9b:9c:bb:3e:8e:8b:57:9a:7b:de:
30:91:7c:3c:7e:69:32:a0:41:2a:35:89:a0:37:8b:6d:36:68:
22:1f:01:0c:46:8d:b6:2d:41:e9:50:0c:e4:60:38:e7:5f:91:
3b:6a:20:ab:52:ca:0e:04:b4:ff:54:34:57:04:e7:40:81:88:
b7:73:db:06:18:0b:dd:1e:98:eb:82:9f:2f:99:04:a3:22:ee:
df:b3:d7:54:29:6f:69:98:b4:3e:12:1a:6e:9b:51:cb:f8:97:
66:3c:a0:4b:d9:03:d1:6f:4b:42:8b:6d:18:63:96:8f:84:fb:
1a:55:67:d3:eb:60:91:43:d8:e2:1f:34:32:05:eb:43:ee:1e:
e0:40:0f:45:96:a5:0d:e7:e6:30:23:35:8f:e5:d0:4c:35:a7:
cb:4e:10:71:9b:b0:36:89:5a:3b:1e:13:9e:c4:db:29:35:30:
26:eb:02:5c:3b:2b:0a:69:e9:c2:a9:86:72:4e:ff:11:24:82:
24:e8:8c:bd:1f:27:f5:e0:78:43:33:33:a1:79:d2:79:52:56:
e5:2d:50:b1:c4:27:e6:b7:64:6f:6b:ff:88:21:63:e8:4d:b9:
5c:a0:f2:a4
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAYNHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MDc0MzMwWhcNMjUxMTMwMDc0MzMwWjAYMRYw
FAYDVQQDEw02OTAwNzQyNi1hMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvYuJ8JMPF4AZelIxGVYNr5tdjnMfLCXHM2FTyqaAB9SdlDb5CIy/LYqp
CZq/4ziQDle5CDXG+K/1O4Nt6SSpbWL3o4y6bSTeq7ZSovLVlsyVADEMRes9ZJ51
U2syi+mOJyM452cWdpjWJbGG6JhiO1DChSS84FpGQPj+ammHBsikxSSJVmIoeqiB
KUgiAi4LMAykUkCI1kFPu9miRCk6aKDchBeVBF0yWDrE0gwVd7Xo23rtETp59zOG
jkSZUFfPR1jrDuTt0zaGly0Ps9iu2HoQP7obCyfD/7Jz1RswTEr6J2KSThLux+pP
6Xzy1Bt4fUxaQd3epu2Zfn5HsOIjiQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFAzc
dqLb8DjLNz1sdS51UTJg7/pOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRTZFQUU5Q0IzRDExMUYwQTMxRjRBOTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAnOcGAwQBnOcIAwQAnOc/AwQA
nOdqAwQBnOeAAwQAnOeFAwQAnPm3AwQAnPm5MA0GCSqGSIb3DQEBCwUAA4IBAQCz
iXptYmIRm3zoZJvKDWEPK+cNXpCfE7GXBJucuz6Oi1eae94wkXw8fmkyoEEqNYmg
N4ttNmgiHwEMRo22LUHpUAzkYDjnX5E7aiCrUsoOBLT/VDRXBOdAgYi3c9sGGAvd
Hpjrgp8vmQSjIu7fs9dUKW9pmLQ+Ehpum1HL+JdmPKBL2QPRb0tCi20YY5aPhPsa
VWfT62CRQ9jiHzQyBetD7h7gQA9FlqUN5+YwIzWP5dBMNafLThBxm7A2iVo7HhOe
xNspNTAm6wJcOysKaenCqYZyTv8RJIIk6Iy9Hyf14HhDMzOhedJ5UlblLVCxxCfm
t2Rva/+IIWPoTblcoPKk
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:02 2025 by rpki-client