Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFEE9E40AA4311F0A19D3079DAE4EC9C.roa
File: CFEE9E40AA4311F0A19D3079DAE4EC9C.roa (raw, json)
Hash identifier: I5agBvhE5aAgiWk8QUblP1V65KQpmiGxzKZlwlChrHI=
Subject key identifier: 53:25:DA:A6:2B:20:D0:CE:E5:BF:C6:4C:90:65:84:5C:54:FD:59:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0180D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFEE9E40AA4311F0A19D3079DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 03:54:28 +0000
ROA not before: Thu 16 Oct 2025 03:54:21 +0000
ROA not after: Sat 22 Nov 2025 03:54:21 +0000
asID: 19318
IP address blocks: 156.233.84.0/23 maxlen: 24
156.233.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98519 (0x180d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 03:54:21 2025 GMT
Not After : Nov 22 03:54:21 2025 GMT
Subject: CN=68f06c74-1c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:05:7a:5d:c9:ec:68:a6:d4:f4:c8:ab:84:
57:df:8d:7c:d3:bb:50:e3:14:ac:e1:94:72:c6:90:
46:b2:41:05:7b:e5:c1:6a:0b:98:c2:3c:14:19:8a:
8b:60:d9:b6:be:70:43:f5:86:66:38:ae:d6:71:ef:
08:ad:d2:dd:80:9a:74:c5:89:f1:e4:be:c8:f9:70:
cd:d5:0e:38:7a:f4:e1:86:59:91:87:56:d6:e5:27:
c4:94:73:48:a6:e0:93:a5:5d:d1:e2:2c:a9:a1:92:
56:9c:59:b1:92:59:84:54:16:1d:32:ca:85:4b:24:
3e:1c:a3:3f:b1:63:70:46:64:2d:5a:ac:b2:9c:97:
30:76:45:67:e6:06:aa:8d:12:40:d9:fe:7a:b5:97:
2c:75:05:48:b1:35:38:85:4f:a6:00:4f:b3:ea:d0:
4b:6b:55:9d:2d:49:0c:c8:9f:a4:c9:b2:3c:e5:82:
46:36:4f:d2:54:03:1b:9f:6d:f1:96:e1:de:d0:a7:
f8:ba:26:f0:63:a6:9b:57:74:9c:24:c9:d9:ff:23:
f2:ff:10:d7:2f:a6:2f:c9:f9:fc:41:44:d6:40:ba:
de:45:42:f5:2c:7b:a3:0f:c1:6f:ee:84:6a:f8:b1:
dd:33:55:48:2f:96:ce:98:73:a3:66:b5:8f:25:88:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:DA:A6:2B:20:D0:CE:E5:BF:C6:4C:90:65:84:5C:54:FD:59:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFEE9E40AA4311F0A19D3079DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
18:af:5a:7d:22:b5:3d:db:01:54:16:24:f5:0d:3c:1d:11:1f:
bb:38:1a:85:79:71:70:09:bc:80:be:61:b7:db:65:82:cd:5e:
41:a3:3f:98:13:55:ca:47:51:b6:87:e4:e6:88:31:2c:d5:95:
af:2b:db:16:b7:cf:ba:69:a1:2f:d4:c1:c9:1f:ff:a7:b1:b0:
c2:ee:d0:c5:62:11:16:7e:3c:87:15:34:be:67:d9:74:13:de:
6d:73:b4:cb:8d:19:a5:1d:23:c8:1c:47:1d:6e:9c:88:95:cf:
6c:e2:bc:f2:08:14:31:de:4f:52:0b:db:ba:67:f1:e7:d3:fd:
4c:2c:c7:70:db:d3:d3:2a:3d:22:26:1f:60:e8:b7:a8:43:29:
fb:74:f2:46:c1:2f:e6:1b:f2:81:21:0e:a9:e4:a7:e7:bc:c5:
65:5c:98:c9:e0:73:ba:c7:be:98:9d:7e:a4:c8:41:b1:ab:b4:
40:69:fd:d1:9f:ea:7b:6a:ce:20:81:14:8a:21:9c:a5:0f:1f:
55:04:f3:b0:ee:0f:85:93:fd:12:e0:6f:4e:cb:96:ee:3c:00:
de:11:e3:51:15:30:d5:4f:a8:2a:83:80:3e:3e:ef:b8:65:1a:
c3:21:1b:17:a1:de:af:7f:69:99:81:f6:14:70:1f:6d:81:3e:
74:ec:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:04 2025 by rpki-client