Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38411A08AA7C11F0BD846DE8DAE4EC9C.roa
File: 38411A08AA7C11F0BD846DE8DAE4EC9C.roa (raw, json)
Hash identifier: 83y6Yv9JWkqrZuTx+IxvOO6aYnZ+R5QEZKq6Jj/uvm8=
Subject key identifier: BF:15:D2:64:64:C0:13:77:67:95:15:0B:49:4D:43:95:08:CA:01:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018124
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38411A08AA7C11F0BD846DE8DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 10:38:15 +0000
ROA not before: Thu 16 Oct 2025 10:38:08 +0000
ROA not after: Tue 25 Nov 2025 10:38:08 +0000
asID: 203020
IP address blocks: 156.233.36.0/22 maxlen: 24
156.233.76.0/22 maxlen: 24
156.233.112.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.244.132.0/22 maxlen: 24
156.244.136.0/21 maxlen: 24
156.248.16.0/22 maxlen: 24
156.248.96.0/22 maxlen: 24
156.249.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98596 (0x18124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 10:38:08 2025 GMT
Not After : Nov 25 10:38:08 2025 GMT
Subject: CN=68f0cb17-a10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:89:18:22:b8:17:7a:d8:27:08:4c:2c:3f:
b7:8f:db:ae:a5:c3:2f:12:0e:e7:5f:ea:cf:4d:87:
9e:77:1a:7d:8e:6f:5f:f6:7f:02:20:1a:d8:f3:8c:
7a:06:58:21:4d:57:17:a0:c9:e4:29:56:26:d6:29:
91:d0:eb:18:fa:13:c2:4e:c0:4e:e5:2d:fd:8a:74:
b1:ce:69:e3:13:bf:ba:18:50:36:a0:b9:9f:c5:e5:
d2:e5:ae:13:43:a5:9c:b2:79:cf:bc:32:52:29:03:
9d:fb:a6:2d:00:86:75:0c:ea:09:5b:3e:d3:06:93:
0d:19:e6:3c:8d:13:4f:e9:c4:ff:47:4f:cf:28:ff:
b1:46:22:a4:c6:b1:7a:70:09:54:2b:06:3d:58:bb:
71:c2:3b:ad:a4:c1:20:a1:14:a2:3d:43:89:0c:98:
c4:2c:a4:f1:3c:2b:e5:4c:51:6f:14:e3:8c:96:43:
97:8e:6b:92:38:92:2f:b7:f3:45:4c:39:0b:22:63:
73:1a:dc:70:b0:e4:78:1a:88:03:7d:62:8d:ba:19:
b5:48:65:c5:0d:1e:4f:c6:ab:6a:ae:1e:02:7b:a3:
2d:62:bc:7e:3c:44:8d:2b:17:13:c4:e0:11:90:d4:
5f:de:e7:30:ca:47:73:bb:25:7b:90:50:43:84:a0:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:15:D2:64:64:C0:13:77:67:95:15:0B:49:4D:43:95:08:CA:01:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38411A08AA7C11F0BD846DE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.36.0/22
156.233.76.0/22
156.233.112.0/22
156.239.136.0/22
156.243.140.0/22
156.244.132.0-156.244.143.255
156.248.16.0/22
156.248.96.0/22
156.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:06:53:b2:c1:34:63:0b:ad:50:c2:92:f4:42:04:8d:d1:cc:
1b:7a:51:50:26:9c:d3:86:77:88:39:fe:aa:7a:1b:c1:be:eb:
21:35:e9:f5:68:49:ef:8c:2c:fe:ac:9d:fb:9d:ee:7d:ce:07:
7b:de:40:61:5e:d5:df:b5:34:7b:b5:ee:20:15:1f:d4:cb:83:
dd:48:a4:07:8d:d8:ea:9c:33:5a:16:d7:52:92:fb:e7:8f:1a:
2b:1c:4f:25:99:23:44:1f:03:1e:09:ac:cd:ef:49:e2:4b:6e:
da:d1:83:a1:5a:bb:48:08:a4:78:76:74:50:3f:ef:6a:fa:31:
36:de:8d:e2:01:87:0f:5f:27:3c:f6:4b:f5:ab:44:23:e9:80:
15:73:de:98:e5:b6:68:a0:75:53:53:92:18:30:31:16:53:33:
45:b3:ab:1d:52:20:40:cd:31:ae:9e:a8:ed:35:fa:18:fb:3c:
48:df:9a:fd:78:9f:72:98:43:cb:2b:3b:8b:e4:12:17:a8:14:
5e:d6:c5:33:84:8b:92:16:6e:42:66:da:5d:a7:6d:b9:c7:45:
d8:b8:9a:c7:af:71:60:c3:db:9f:0f:2b:f7:8e:6a:58:65:95:
16:33:bf:d2:19:99:5f:4f:80:59:15:a3:c1:91:a8:ca:85:5a:
0a:20:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:53 2025 by rpki-client