Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0043BA80EC11F0ADFBAAB2DAE4EC9C.roa
File: CA0043BA80EC11F0ADFBAAB2DAE4EC9C.roa (raw, json)
Hash identifier: xdr9Jmaoy5iLoS1s2SdmjKF4mji1Yb6aOCqPxLQxKr8=
Subject key identifier: 40:18:2F:6E:38:A7:CA:D3:5A:85:11:38:7E:F5:1E:3D:52:D4:97:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016F51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0043BA80EC11F0ADFBAAB2DAE4EC9C.roa
Signing time: Sun 24 Aug 2025 13:18:14 +0000
ROA not before: Sun 24 Aug 2025 13:18:06 +0000
ROA not after: Wed 24 Sep 2025 13:18:06 +0000
asID: 203020
IP address blocks: 156.230.144.0/21 maxlen: 24
156.231.184.0/21 maxlen: 24
156.247.24.0/21 maxlen: 24
156.252.72.0/21 maxlen: 24
156.252.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94033 (0x16f51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 24 13:18:06 2025 GMT
Not After : Sep 24 13:18:06 2025 GMT
Subject: CN=68ab1116-69f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:d6:77:c7:08:ac:1f:01:7e:c3:57:89:22:
d0:2c:4e:61:5d:d0:76:6e:59:c7:f0:be:67:de:b9:
87:95:a3:4b:f5:dc:ac:88:5b:b2:19:c9:94:6a:60:
1b:53:0d:53:aa:d9:cf:bb:0c:2d:3c:af:7d:8d:74:
da:6c:c6:25:48:20:cb:27:75:4c:64:7f:3d:9c:57:
db:6b:c0:40:7a:89:5e:a6:07:2a:7a:c0:29:5b:57:
9b:97:ae:b3:c6:ff:05:12:9d:fb:01:2e:ec:9a:59:
14:45:31:d4:76:22:90:e7:1a:80:55:c6:9b:9d:ad:
65:87:11:bf:2d:9b:28:81:d5:d5:58:ec:76:67:65:
1f:79:b5:8c:5a:02:96:69:33:5d:32:39:bf:a8:7d:
19:9e:44:c9:a3:60:20:16:95:08:2c:6d:9d:7d:60:
6b:61:1c:3c:3d:93:95:b6:ca:f6:a4:2b:4b:4a:59:
4f:38:57:ea:69:a9:f0:a8:c5:b7:9e:e5:a8:d7:86:
59:2b:47:b3:0c:dc:9e:f7:99:8c:e3:91:b6:af:e6:
3f:1e:09:4e:18:30:79:ee:a2:4c:ff:63:98:49:dc:
94:7a:9c:e7:16:ae:cc:b1:d2:af:d5:89:f9:5b:35:
a1:53:ff:55:dd:16:65:2c:66:2b:a6:87:31:1e:46:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:2F:6E:38:A7:CA:D3:5A:85:11:38:7E:F5:1E:3D:52:D4:97:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA0043BA80EC11F0ADFBAAB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.144.0/21
156.231.184.0/21
156.247.24.0/21
156.252.72.0/21
156.252.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:20:11:f8:ea:0b:33:1e:17:6b:82:e1:c4:af:8c:61:00:ae:
4f:1c:53:b4:22:9b:66:88:48:04:ea:01:74:f8:a2:bb:7c:b5:
af:4b:a7:a7:a2:92:20:42:e3:97:97:96:70:13:3d:89:2e:27:
06:73:0a:10:c3:94:af:6a:c0:b5:c8:90:37:c3:bb:eb:9c:96:
d9:8c:97:b7:22:08:d1:67:90:9a:e8:13:3b:77:f4:99:9f:d3:
53:15:7d:55:c6:aa:4a:ab:b2:77:e8:74:94:ce:3b:dc:ab:b5:
14:5e:6c:76:68:8c:4d:6a:b4:24:24:2f:10:5c:92:de:b2:b2:
23:b7:15:1f:55:dd:61:34:25:c4:32:e7:81:ac:a5:7b:28:f5:
22:71:3e:59:e0:b6:46:c6:2f:2e:e7:3f:80:d8:90:0b:77:69:
3f:42:86:a8:bb:99:87:b9:e9:df:e7:02:65:06:4a:a8:e2:ec:
34:9b:97:0b:b7:07:f7:88:76:be:85:cc:55:48:04:c8:92:ac:
f7:4c:c1:4e:d3:d6:94:31:48:89:68:b3:a4:9f:d3:8c:9e:77:
4d:4d:fa:ad:e0:44:80:9f:2c:8f:04:87:9b:c0:be:2b:e8:08:
84:33:c2:f7:fe:e0:f5:67:81:38:fd:b5:0b:4d:11:c1:7c:36:
be:ba:10:bf
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAW9RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI0MTMxODA2WhcNMjUwOTI0MTMxODA2WjAYMRYw
FAYDVQQDEw02OGFiMTExNi02OWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqBjWd8cIrB8BfsNXiSLQLE5hXdB2blnH8L5n3rmHlaNL9dysiFuyGcmU
amAbUw1TqtnPuwwtPK99jXTabMYlSCDLJ3VMZH89nFfba8BAeolepgcqesApW1eb
l66zxv8FEp37AS7smlkURTHUdiKQ5xqAVcabna1lhxG/LZsogdXVWOx2Z2UfebWM
WgKWaTNdMjm/qH0ZnkTJo2AgFpUILG2dfWBrYRw8PZOVtsr2pCtLSllPOFfqaanw
qMW3nuWo14ZZK0ezDNye95mM45G2r+Y/HglOGDB57qJM/2OYSdyUepznFq7MsdKv
1Yn5WzWhU/9V3RZlLGYrpocxHkYEwwIDAQABo4ICujCCArYwHQYDVR0OBBYEFEAY
L244p8rTWoUROH71Hj1S1JcwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQTAwNDNCQTgwRUMxMUYwQURGQkFBQjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDnOaQAwQDnOe4AwQDnPcYAwQD
nPxIAwQDnPyIMA0GCSqGSIb3DQEBCwUAA4IBAQBPIBH46gszHhdrguHEr4xhAK5P
HFO0IptmiEgE6gF0+KK7fLWvS6enopIgQuOXl5ZwEz2JLicGcwoQw5SvasC1yJA3
w7vrnJbZjJe3IgjRZ5Ca6BM7d/SZn9NTFX1VxqpKq7J36HSUzjvcq7UUXmx2aIxN
arQkJC8QXJLesrIjtxUfVd1hNCXEMueBrKV7KPUicT5Z4LZGxi8u5z+A2JALd2k/
Qoaou5mHuenf5wJlBkqo4uw0m5cLtwf3iHa+hcxVSATIkqz3TMFO09aUMUiJaLOk
n9OMnndNTfqt4ESAnyyPBIebwL4r6AiEM8L3/uD1Z4E4/bULTRHBfDa+uhC/
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:06 2025 by rpki-client