Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD3D96CAA9811F0958AC19BDAE4EC9C.roa
File: 4CD3D96CAA9811F0958AC19BDAE4EC9C.roa (raw, json)
Hash identifier: zDNcHlZ+rWze4IW+hy9mS5RCEmtUjnVYwr/LxypqlMg=
Subject key identifier: C8:6D:3C:AD:63:98:9A:41:51:35:DA:DB:F2:83:CD:B2:91:DB:41:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01814C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD3D96CAA9811F0958AC19BDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 13:59:15 +0000
ROA not before: Thu 16 Oct 2025 13:59:10 +0000
ROA not after: Wed 25 Mar 2026 13:59:10 +0000
asID: 328608
IP address blocks: 156.227.204.0/22 maxlen: 24
156.229.66.0/23 maxlen: 24
156.229.68.0/22 maxlen: 24
156.229.80.0/20 maxlen: 24
156.229.116.0/23 maxlen: 24
156.229.174.0/24 maxlen: 24
156.243.145.0/24 maxlen: 24
156.243.146.0/23 maxlen: 24
156.243.148.0/23 maxlen: 24
156.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98636 (0x1814c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 13:59:10 2025 GMT
Not After : Mar 25 13:59:10 2026 GMT
Subject: CN=68f0fa33-7a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:c5:b5:52:15:e6:18:be:37:bf:70:2c:c8:
f7:a9:bb:ca:48:f1:8f:fd:37:99:9b:17:1c:99:0f:
c6:57:e6:a2:8b:83:8a:f0:04:9c:35:e9:ac:2c:7b:
8a:2d:02:1e:09:9d:b3:3a:bf:5d:a6:f7:29:fe:fe:
51:e1:d0:b6:4e:9f:79:22:7b:9a:0c:04:86:94:7e:
72:42:c9:2d:db:e9:b7:ba:98:4b:b7:36:96:fc:3d:
db:05:b9:4b:e7:1d:be:ec:c6:96:ce:c2:14:91:25:
ab:24:b1:00:5e:2c:59:8e:9e:19:94:d4:4c:8d:ba:
fe:a2:d6:8f:ba:9e:08:f2:64:8c:9e:86:3d:85:22:
41:18:8a:26:ea:bb:57:eb:20:50:c7:48:b3:61:f5:
d3:90:9a:47:17:f6:b0:ae:e5:96:c0:65:2c:b9:84:
08:8f:04:74:29:48:db:81:b8:b1:8f:ce:68:70:6e:
31:d2:38:83:60:4e:16:55:74:38:bc:d1:70:5f:b8:
f8:df:f5:ae:fc:cd:ee:92:51:b6:7a:c6:e5:75:5a:
a6:d0:35:89:5f:60:6b:43:4a:bc:95:13:dd:7d:0d:
6c:72:99:89:d8:82:80:b1:20:cb:cc:42:2c:72:1f:
d7:06:e9:d1:4c:ab:73:94:43:1e:ad:b5:3f:7e:1d:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:3C:AD:63:98:9A:41:51:35:DA:DB:F2:83:CD:B2:91:DB:41:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD3D96CAA9811F0958AC19BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.204.0/22
156.229.66.0-156.229.71.255
156.229.80.0/20
156.229.116.0/23
156.229.174.0/24
156.243.145.0-156.243.149.255
156.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f7:fd:d9:a4:69:76:22:f3:9f:3a:b6:3f:48:2e:18:5b:32:
86:73:54:31:07:d1:a7:29:83:04:e0:c0:01:61:27:df:ab:59:
0a:4a:36:23:e2:28:17:87:c6:00:f3:72:fc:9c:2c:af:de:5e:
83:03:f5:cb:c2:ac:37:14:c5:3a:4a:bd:96:98:81:ce:22:d7:
03:87:8b:42:19:61:10:53:f4:67:6c:ad:2a:fd:8c:ad:9e:a5:
07:fc:87:4e:9e:e0:10:8e:57:f0:f7:30:7c:b5:71:c5:8f:20:
2e:fc:53:52:51:42:c1:02:8c:4e:fd:bf:35:02:52:61:41:13:
3d:11:3c:c4:cb:e2:5e:4a:ca:be:a0:43:8e:09:f6:63:ae:30:
fb:bc:dd:f9:82:af:1c:32:6f:20:06:fa:3c:81:0d:d3:a6:0e:
16:9c:c8:cc:3e:e6:0a:2a:b4:20:c0:84:22:c7:0d:8c:75:d9:
96:45:00:44:c6:82:57:06:7e:76:18:f8:db:a1:fb:ef:e5:96:
ef:89:33:66:68:d7:d6:a0:72:76:e4:fc:0a:e7:f8:6e:29:63:
40:76:a4:bc:ac:87:a7:a2:05:71:5a:55:f3:ab:27:ef:56:69:
56:cc:f5:93:a5:0b:b7:aa:36:eb:91:71:02:db:10:ea:c9:d2:
f0:c4:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:22 2025 by rpki-client