
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBFF89A85E5211F09CE7C5ADDAE4EC9C.roa
File: CBFF89A85E5211F09CE7C5ADDAE4EC9C.roa (raw, json)
Hash identifier: AQhB9Z9RMvL3+4wnrkIsQ2CW4NV2/+1MTky2sd51D7k=
Subject key identifier: C9:D0:A8:32:1A:C0:9A:A0:18:D1:A5:69:ED:09:9D:60:FD:0E:D7:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0164A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBFF89A85E5211F09CE7C5ADDAE4EC9C.roa
Signing time: Fri 11 Jul 2025 12:30:15 +0000
ROA not before: Fri 11 Jul 2025 12:30:10 +0000
ROA not after: Thu 14 Aug 2025 12:30:10 +0000
asID: 64267
IP address blocks: 156.227.11.0/24 maxlen: 24
156.227.12.0/24 maxlen: 24
156.239.60.0/24 maxlen: 24
156.248.100.0/23 maxlen: 24
156.248.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91298 (0x164a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 12:30:10 2025 GMT
Not After : Aug 14 12:30:10 2025 GMT
Subject: CN=687103d7-42ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:8e:03:49:81:0f:1a:8a:4a:b5:e2:f5:02:
3e:f6:ad:1a:98:7f:95:82:fd:73:43:31:dc:3c:b8:
f8:c7:99:7a:9b:7b:cf:70:7d:df:5c:4f:40:c9:66:
cb:e4:dd:e8:d1:d4:c7:3a:05:10:af:5a:60:9a:83:
95:ee:e9:88:c2:7e:5c:3d:5a:71:fb:10:1a:ac:b5:
ec:cf:40:0a:49:6f:f8:df:8e:3e:17:f6:4d:f9:cc:
60:34:b2:69:2d:d0:5d:79:96:74:55:58:68:27:10:
7d:58:4b:99:5f:d1:c6:58:0b:86:20:af:2d:a4:5b:
59:b8:2a:3b:da:cc:5d:89:78:62:1e:d5:37:59:59:
c9:fe:f0:5c:69:be:1d:fc:56:80:7a:f0:af:b5:d6:
9f:83:30:19:1e:4f:d3:21:f4:bd:20:1e:4e:89:ff:
fb:be:4b:56:61:7b:40:aa:5d:26:72:4f:2d:29:e6:
58:e1:02:17:37:e1:ba:46:c5:28:b3:f3:0b:10:5b:
a3:39:50:08:77:6c:6b:e7:7b:8d:5d:1b:d3:7b:e0:
bb:09:80:37:79:6d:e1:47:99:d0:16:d5:23:96:4f:
0a:53:06:f0:07:ac:a3:e1:ca:61:0d:d0:f0:47:5f:
f2:19:4b:03:9e:f7:92:60:a4:95:9d:38:51:eb:f0:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:A8:32:1A:C0:9A:A0:18:D1:A5:69:ED:09:9D:60:FD:0E:D7:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBFF89A85E5211F09CE7C5ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.11.0-156.227.12.255
156.239.60.0/24
156.248.100.0/22
Signature Algorithm: sha256WithRSAEncryption
89:8f:bb:09:60:dc:61:ab:f0:78:e4:da:15:b2:58:0f:3d:25:
27:43:83:8c:7b:a1:7a:af:4a:a7:c1:1b:19:22:d6:83:78:47:
ee:15:9c:f6:f2:02:2c:b8:3e:0e:67:48:e3:05:15:f4:8d:ff:
8f:b8:37:eb:bf:f2:57:38:3d:57:cf:3a:85:c0:8c:bc:2f:73:
35:f2:b1:41:e7:ce:f7:34:38:ea:99:1c:3c:a6:e0:8b:60:ac:
10:cc:35:4f:11:ab:e2:70:97:87:64:e0:2b:9c:16:b6:78:c1:
54:91:1c:54:e0:d1:8f:1b:f6:9b:cb:77:30:08:04:29:26:23:
f0:70:cf:37:15:15:f1:97:2a:16:f7:31:b4:ee:d9:49:f5:2a:
f4:60:4a:87:23:92:85:b7:06:57:3d:31:bc:92:15:04:f5:51:
d4:5c:12:87:bf:a0:a7:56:27:0f:59:70:2b:92:90:73:88:3a:
c4:c2:cf:d2:2b:e6:6b:4e:4e:8a:b8:45:d8:f7:e6:59:fe:1b:
99:3d:82:76:97:7f:f8:df:05:37:2b:a2:61:05:99:e8:b1:32:
1a:fe:14:4f:5f:8b:17:e2:f8:92:d4:fa:48:f8:a7:c8:38:2a:
5d:11:08:bb:e8:56:ff:af:11:da:5c:7e:34:f1:d8:d2:6f:ab:
6d:1f:c8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:28:35 2025 by rpki-client