Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCE6D42A82111F09F9441EADAE4EC9C.roa
File: CFCE6D42A82111F09F9441EADAE4EC9C.roa (raw, json)
Hash identifier: PGD4AvXMh8xWmFYVuFfMatU0SeTWigpKllGaja/hU7Y=
Subject key identifier: 2F:4B:72:4C:AD:23:E2:98:66:4F:D6:98:AF:3B:72:7F:D5:5F:90:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018065
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCE6D42A82111F09F9441EADAE4EC9C.roa
Signing time: Mon 13 Oct 2025 10:46:03 +0000
ROA not before: Mon 13 Oct 2025 10:45:57 +0000
ROA not after: Mon 05 Jan 2026 10:45:57 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98405 (0x18065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 13 10:45:57 2025 GMT
Not After : Jan 5 10:45:57 2026 GMT
Subject: CN=68ecd86a-5429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:22:6f:7a:62:d5:75:8c:73:10:64:7c:e1:
b7:b3:a1:b2:98:ea:4a:ce:02:1b:c5:2c:9d:a7:f8:
f8:58:37:d2:71:a5:6a:d3:77:6f:c4:fe:1e:03:9a:
29:de:aa:f1:8e:1a:a5:1b:e1:52:42:72:f4:7a:96:
83:33:8d:0b:b2:1e:2f:f4:24:fe:20:a1:ca:a9:be:
db:32:57:50:4c:eb:b2:86:09:c9:34:14:09:f3:3f:
0d:b0:84:53:d3:6f:e1:e9:12:3c:74:e8:a4:bd:03:
f2:7a:25:84:84:a4:35:16:e4:ee:3d:f1:6e:6d:f6:
ed:b4:d7:cb:3c:cc:64:97:db:fa:54:8e:93:ec:b3:
45:b1:5d:51:7c:9c:84:3b:8d:d3:a7:da:fd:1f:e8:
01:81:35:8a:33:4d:af:e6:71:19:f1:5b:2f:ca:d8:
6d:9e:09:61:47:10:24:1a:f3:7f:64:4c:c9:56:97:
c6:1d:08:95:ef:ed:bd:0c:d9:bd:14:04:01:b2:25:
1a:03:6d:74:ad:20:ab:9b:65:4a:c9:97:a3:e4:4c:
27:34:0b:fd:b0:37:e3:2a:84:76:98:c9:63:3c:4f:
6f:96:d5:ce:af:7e:45:36:0a:7b:31:b1:7e:e4:18:
99:31:e7:52:1d:29:a6:58:d9:37:90:30:53:b9:6d:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:72:4C:AD:23:E2:98:66:4F:D6:98:AF:3B:72:7F:D5:5F:90:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFCE6D42A82111F09F9441EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d2:93:1c:ee:2e:3e:11:36:ad:20:bb:54:91:6f:b8:75:91:
f5:98:6e:69:7d:e8:5f:58:bd:bd:55:01:69:6c:9d:5a:a8:fb:
a9:f7:1e:81:b5:f8:c1:bf:ef:e5:4d:42:09:b3:04:c9:15:9a:
ac:d7:d8:c0:41:35:0c:c6:a0:78:43:01:ed:46:11:33:d4:48:
c4:dc:bc:3d:e2:eb:ad:6c:72:2e:77:af:1b:b3:79:0d:7e:dd:
73:65:60:75:6b:6f:91:10:48:a1:88:38:cd:4b:85:ed:85:2a:
be:1d:9f:dd:1b:c0:e9:27:06:d6:24:75:18:65:75:ae:77:29:
7f:b5:91:0f:f2:0c:b3:a1:55:41:81:42:6b:48:ab:e1:f5:c3:
68:b0:10:28:23:b2:36:f7:96:09:fc:25:86:fc:03:33:08:e3:
03:6a:eb:af:65:00:e8:6f:94:e7:0a:e5:bf:7c:50:f7:f8:48:
f1:a6:a9:1b:32:f7:9d:cc:71:f9:aa:44:21:2d:ee:1a:a4:66:
cd:c8:a9:e3:6b:55:10:60:a3:01:cd:e7:d2:cd:a8:3f:0c:a6:
1b:ab:3e:89:03:32:91:90:57:36:2d:68:9c:8a:64:b9:20:4f:
b1:04:11:98:82:41:60:70:39:f7:a5:82:bc:a2:07:9f:25:f0:
cb:03:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:30 2025 by rpki-client