Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFAB594A43F11F0B7C9BFBFDAE4EC9C.roa
File: 6CFAB594A43F11F0B7C9BFBFDAE4EC9C.roa (raw, json)
Hash identifier: iE4KdD/+m+xj+fLNDGoDbzSQ3uyE3lMc9cJ1taP1+LM=
Subject key identifier: 3A:CF:F6:11:62:7A:53:AA:30:ED:66:6F:E0:D1:95:46:03:79:6B:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFAB594A43F11F0B7C9BFBFDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 12:07:57 +0000
ROA not before: Wed 08 Oct 2025 12:07:52 +0000
ROA not after: Sat 15 Nov 2025 12:07:52 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98180 (0x17f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 12:07:52 2025 GMT
Not After : Nov 15 12:07:52 2025 GMT
Subject: CN=68e6541d-ae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:ca:bc:54:e4:9c:cd:44:1a:9d:1d:86:17:
e2:aa:27:fd:ec:2f:99:c4:0e:cf:38:4c:83:23:63:
c1:8d:20:a5:78:49:56:c2:e3:c0:8f:8a:41:1e:1e:
ac:0b:5a:b8:0e:55:1e:30:60:de:2a:b0:3e:cc:0a:
48:6a:30:36:ab:99:05:db:9d:26:e3:4e:61:4e:7b:
e2:91:91:95:77:2f:5b:71:d7:02:2f:17:81:ba:a9:
51:1a:94:9b:e1:8d:84:f1:bb:be:2b:a8:1d:93:db:
ca:a1:d5:e2:66:86:0e:19:79:8f:60:44:eb:a0:25:
35:1d:00:5f:f4:d1:69:32:90:e6:b0:e0:76:2f:b1:
a8:c4:51:fc:70:23:89:bc:f8:23:95:4c:fe:27:d1:
31:e2:3a:da:03:2c:fb:48:c0:15:0b:e1:44:95:d3:
ad:3c:43:1a:1c:1c:e5:6d:ce:55:d3:06:8b:69:0c:
b5:06:1a:55:a2:2a:02:d4:4f:dd:b7:8a:f5:e1:3a:
63:24:00:1d:3e:46:c9:77:aa:e4:b4:01:11:1f:13:
87:c4:cb:8c:bf:95:c0:a5:c4:ac:5e:00:7f:d2:29:
4b:14:fb:c7:5f:11:10:95:e7:18:01:91:01:42:cc:
fd:28:bd:e1:8b:2e:a8:fc:bb:8e:36:0c:86:c4:3c:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:F6:11:62:7A:53:AA:30:ED:66:6F:E0:D1:95:46:03:79:6B:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFAB594A43F11F0B7C9BFBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ab:a9:c7:ce:db:f0:47:76:c8:21:4f:63:79:cf:ee:3e:02:
f7:6e:46:1b:39:94:f8:40:9c:c5:2e:3b:55:1c:b1:ff:c4:41:
bb:30:89:72:01:ea:7b:16:74:87:72:92:cf:22:66:bb:0e:ed:
75:68:a7:53:1b:8e:d7:62:ca:8d:27:72:f8:90:ab:d3:b9:c8:
86:10:91:61:b2:b9:10:53:47:c9:f2:18:20:75:a7:5a:63:5f:
ed:56:02:f4:60:69:e9:db:e2:ca:db:d8:1c:60:17:ad:d6:58:
27:0c:5d:6f:ad:9c:ff:ab:9a:44:f4:79:8d:35:d2:fa:8a:bf:
ad:48:3c:cf:3a:f9:52:42:00:d2:10:94:ac:5d:78:2d:23:e9:
c3:86:46:12:c3:9f:e2:a2:78:15:e1:9e:83:af:2d:37:e3:73:
8b:52:2b:bf:eb:91:9f:72:29:85:ea:7e:d7:75:a6:a7:90:d1:
40:5c:f8:f8:ac:3f:8b:e4:ef:9e:a8:7a:cf:32:30:04:20:5f:
a2:02:f2:e1:9f:fe:10:3b:94:34:5b:93:8d:66:e5:21:b7:7d:
59:3f:2a:7e:64:16:31:82:d1:bc:f5:e1:2b:57:a2:93:0d:39:
f8:2d:a1:fd:f8:bc:9d:31:d2:4f:c6:a6:a2:c9:00:ba:96:03:
41:37:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:33 2025 by rpki-client