Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC8E3198947211F095F670E2DAE4EC9C.roa
File: CC8E3198947211F095F670E2DAE4EC9C.roa (raw, json)
Hash identifier: f1l0jf6kv9oEPhUyLTSX0ygONIxtqyA3t1u8NKWIZ5I=
Subject key identifier: 30:BD:73:A9:72:6D:F6:38:18:25:45:6B:40:F0:66:80:0A:6D:72:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC8E3198947211F095F670E2DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 09:35:23 +0000
ROA not before: Thu 18 Sep 2025 09:35:17 +0000
ROA not after: Thu 30 Oct 2025 09:35:17 +0000
asID: 18013
IP address blocks: 156.245.200.0/22 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
156.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97265 (0x17bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 09:35:17 2025 GMT
Not After : Oct 30 09:35:17 2025 GMT
Subject: CN=68cbd25b-8e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:55:c5:83:4d:1c:be:bb:de:4b:d4:96:40:
63:64:0b:fb:62:0e:f7:8d:c0:22:d1:c0:80:83:55:
94:3d:ec:a3:b1:f0:be:f8:cb:45:5b:43:6b:fa:a7:
63:6f:49:a7:3d:2e:ca:33:31:e4:72:0b:2e:b3:e1:
84:74:6f:94:f5:2f:8a:97:19:6f:dd:80:53:9f:61:
d2:1d:5c:10:4b:72:a3:24:44:ba:84:24:3f:74:e5:
2b:54:a4:63:31:1e:1a:71:54:9b:b9:4b:f8:e7:a3:
ae:29:9f:e7:0e:2f:69:03:33:22:a0:5b:a3:2a:dc:
f1:c2:d9:f1:9d:12:36:c2:84:36:d4:0b:e6:df:e2:
58:6a:22:3f:78:dd:ef:91:e9:88:e6:a2:8e:5b:05:
15:ce:49:b3:72:b6:7f:ae:4d:6c:83:cd:71:fb:41:
c0:7b:c2:a4:96:1a:a7:b1:e5:4d:5c:04:36:e5:da:
59:9c:c8:9a:f7:dc:92:4a:e8:46:39:0d:52:39:09:
c2:fb:51:52:fc:7c:26:a6:d8:57:3c:f2:9c:89:b7:
12:5d:7a:9f:14:ea:60:7b:ec:3f:1c:f7:77:6c:63:
e9:3b:fb:64:87:ab:07:7a:b2:89:f1:37:15:9d:11:
21:f1:97:95:4f:c4:9b:77:0c:a5:58:0b:27:1d:96:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BD:73:A9:72:6D:F6:38:18:25:45:6B:40:F0:66:80:0A:6D:72:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC8E3198947211F095F670E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
37:af:c6:8a:61:71:f8:b0:54:99:99:08:8b:6e:3c:7c:c9:d1:
1e:31:d3:85:48:b2:25:27:2c:29:f2:55:45:13:01:8d:4b:5b:
02:60:d8:8a:95:aa:70:30:f3:dc:f0:61:a5:c7:e1:bb:7c:0f:
d4:67:47:6f:92:7a:dc:93:60:1c:b8:6a:8b:7b:65:83:7f:1a:
9b:ea:ff:53:7e:57:c0:d6:95:9b:f8:4d:e1:70:92:c0:36:c8:
1a:5c:52:91:02:a3:d4:96:cd:09:85:14:e0:98:ed:97:ab:2b:
f5:58:cf:f3:9d:5f:63:91:da:9f:2e:14:5c:6a:14:16:16:02:
e7:d3:43:44:45:3f:11:12:cf:49:6c:29:7d:d0:cf:d6:b2:53:
3a:9e:4a:92:0b:c7:db:b6:68:6e:89:dc:11:af:cd:cb:54:88:
50:f6:b4:2e:c2:ab:fc:ce:df:e8:0b:64:f5:37:87:57:b5:2c:
52:4b:96:98:7a:ed:6e:f5:63:ab:1d:4e:81:59:8d:d5:b0:f9:
30:de:a9:65:d7:4f:53:cd:07:67:e9:a0:41:d2:c1:45:ec:f9:
96:bb:9b:6f:f1:1b:08:f0:f5:a9:8f:35:77:0a:c1:cd:90:52:
b2:24:c9:af:2d:db:3d:91:e5:1b:2b:70:e1:62:b8:2e:c6:cd:
5c:f6:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:45 2025 by rpki-client