Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA6913EA5AB11F085DB9C7FDAE4EC9C.roa
File: CDA6913EA5AB11F085DB9C7FDAE4EC9C.roa (raw, json)
Hash identifier: cD0eU3udUtlJgl1INqmCGDtS2Pwa72jrdjytGHR1c3c=
Subject key identifier: 11:3F:B4:39:B3:6D:E0:E3:18:CC:45:D7:A6:E1:83:C5:88:98:73:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA6913EA5AB11F085DB9C7FDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:36:16 +0000
ROA not before: Fri 10 Oct 2025 07:36:11 +0000
ROA not after: Thu 30 Oct 2025 07:36:11 +0000
asID: 137547
IP address blocks: 156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98264 (0x17fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 07:36:11 2025 GMT
Not After : Oct 30 07:36:11 2025 GMT
Subject: CN=68e8b770-d4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:ff:4d:46:ba:20:69:32:bf:1b:23:19:65:
c0:46:37:c9:27:ac:e2:80:f3:4a:d7:21:3e:50:e7:
f4:69:fc:81:f5:27:3f:8a:62:13:ba:f5:a0:c1:f7:
3d:a2:a8:6f:2e:ad:59:a4:4c:d9:fd:71:db:a9:f8:
66:8c:37:b0:53:b5:ff:20:c4:9d:3e:61:61:74:98:
cf:02:dc:f0:b9:81:bf:e5:ce:d1:9c:a7:ad:43:06:
e3:bd:bc:ee:47:f1:8e:15:7c:c1:a3:a9:60:61:b4:
26:8c:3d:fc:36:fe:56:d0:98:34:0a:9f:19:bf:92:
d9:bd:54:fb:01:0f:06:2f:d2:0c:52:19:7b:39:99:
11:4d:8a:10:be:6d:5d:14:72:9f:96:e9:93:7a:34:
03:a9:2f:bd:61:02:31:9f:10:fa:a8:71:4a:f4:5a:
78:be:8d:0b:a9:9e:7d:85:89:3b:01:d3:11:99:5e:
12:f3:af:7c:3d:ed:8d:e2:9a:44:48:c9:27:4f:2a:
8f:8e:e5:1e:9c:cc:8d:81:03:06:25:e8:88:cc:b6:
41:4e:54:12:74:b4:7a:b8:54:82:f4:88:74:d9:a0:
8d:6e:a7:c5:0b:ee:ab:75:ca:6e:7f:dc:7d:96:2d:
3b:16:6e:b2:65:c1:30:53:d9:c8:91:c9:16:cb:70:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3F:B4:39:B3:6D:E0:E3:18:CC:45:D7:A6:E1:83:C5:88:98:73:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA6913EA5AB11F085DB9C7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:20:db:45:4b:ba:aa:8e:a4:9d:16:95:fb:18:30:a5:22:d9:
29:36:ea:e0:f6:61:48:f0:63:1d:d5:22:69:30:38:3b:55:96:
7d:b4:3f:55:99:47:11:eb:0c:d3:e3:c2:4c:4f:34:53:5a:7e:
4c:f9:53:fc:fe:5f:99:bc:b8:b1:34:a6:b3:48:7e:d3:83:b9:
b0:16:2f:3b:c4:59:7c:ad:a4:6e:66:6a:3a:08:98:21:ef:c3:
2a:ba:e4:39:98:80:07:7b:c9:08:34:30:d9:26:a2:9d:a5:fe:
9e:1d:df:2e:67:6a:da:dd:4b:ba:a4:4e:aa:f8:1e:73:df:c8:
08:f4:16:05:de:31:73:a7:f4:61:19:7e:1b:48:db:06:50:92:
01:17:55:14:77:88:2a:4a:4f:7d:49:4f:bd:06:a9:26:4a:9a:
2f:28:fc:16:07:5c:5c:4d:fd:b1:1f:47:88:73:43:01:dc:fe:
ac:c7:a7:ec:eb:59:03:f9:9d:24:5c:98:3d:db:fd:34:2c:44:
c0:3b:70:21:88:73:54:20:b2:d4:22:af:e8:ca:c2:94:ae:fe:
8f:bf:27:9a:05:0c:e5:51:84:d2:c1:ad:f8:bd:e8:a9:c4:42:
75:d2:58:54:ba:85:08:6e:15:2e:09:21:66:35:e0:18:9b:a9:
c6:58:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:40 2025 by rpki-client