Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F83C889D3811F09C14F6A6DAE4EC9C.roa
File: 11F83C889D3811F09C14F6A6DAE4EC9C.roa (raw, json)
Hash identifier: 3BiPqQDJtIrRwiSHX/Urv0Mld/9H+eeHSRytPmrmiqA=
Subject key identifier: 20:9F:0E:3C:82:DE:50:21:4B:A7:FC:8B:F9:84:85:10:47:BD:87:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F83C889D3811F09C14F6A6DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 13:27:40 +0000
ROA not before: Mon 29 Sep 2025 13:27:31 +0000
ROA not after: Tue 28 Oct 2025 13:27:31 +0000
asID: 44559
IP address blocks: 156.233.8.0/24 maxlen: 24
156.233.9.0/24 maxlen: 24
156.233.32.0/24 maxlen: 24
156.233.33.0/24 maxlen: 24
156.233.35.0/24 maxlen: 24
156.233.40.0/24 maxlen: 24
156.233.43.0/24 maxlen: 24
156.233.46.0/24 maxlen: 24
156.233.49.0/24 maxlen: 24
156.233.50.0/24 maxlen: 24
156.233.52.0/24 maxlen: 24
156.233.53.0/24 maxlen: 24
156.233.55.0/24 maxlen: 24
156.233.57.0/24 maxlen: 24
156.233.59.0/24 maxlen: 24
156.233.62.0/24 maxlen: 24
156.246.150.0/24 maxlen: 24
156.246.151.0/24 maxlen: 24
156.246.152.0/24 maxlen: 24
156.246.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97717 (0x17db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 13:27:31 2025 GMT
Not After : Oct 28 13:27:31 2025 GMT
Subject: CN=68da894c-33c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:bc:19:3d:a4:87:32:1e:38:9f:a2:0f:ae:
8c:0f:37:6e:cf:2f:69:54:e1:81:94:23:c0:b3:77:
c5:cf:b4:4e:5b:2f:cb:64:89:5a:c4:0d:ad:53:2f:
11:ab:b7:d3:3c:6e:e1:db:f5:30:4d:70:f6:84:c7:
9f:6d:76:95:18:d0:39:f8:88:65:07:44:4c:7c:49:
ab:6a:84:69:69:de:0f:f3:28:61:83:4f:74:de:1f:
af:92:b5:9b:d5:59:81:5b:8e:0f:1e:9b:18:e5:bc:
38:a4:02:56:77:bf:40:8c:7c:7b:e1:c9:05:ad:41:
58:0e:58:42:e2:9d:a0:77:ba:fb:80:a7:29:59:2f:
bb:89:59:8a:47:c7:aa:20:70:cf:a8:90:c3:f6:ae:
16:37:78:6c:ce:27:be:7d:96:e6:d7:ce:59:08:3f:
1c:bd:51:ca:f6:9c:c7:99:bf:d9:85:bc:02:0e:f9:
04:68:fe:27:2f:81:35:0a:cd:78:f8:bf:f8:75:23:
28:54:b0:d2:40:ac:36:05:aa:cd:08:fb:f7:65:42:
92:6f:07:0e:e8:66:dd:aa:9e:0c:b2:55:79:fe:e9:
c5:b9:25:bc:68:9d:64:bc:f8:b0:38:98:99:40:f2:
ab:f5:c0:64:37:93:19:01:e3:6c:05:2d:da:81:3e:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:0E:3C:82:DE:50:21:4B:A7:FC:8B:F9:84:85:10:47:BD:87:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F83C889D3811F09C14F6A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/23
156.233.32.0/23
156.233.35.0/24
156.233.40.0/24
156.233.43.0/24
156.233.46.0/24
156.233.49.0-156.233.50.255
156.233.52.0/23
156.233.55.0/24
156.233.57.0/24
156.233.59.0/24
156.233.62.0/24
156.246.150.0-156.246.153.255
Signature Algorithm: sha256WithRSAEncryption
64:3f:4f:93:f0:f4:50:87:d7:a7:98:5c:09:14:4f:f7:c3:10:
c8:52:a8:55:ff:2a:cf:92:1c:24:a6:18:bf:b5:59:02:2a:db:
ec:eb:97:34:eb:70:97:23:90:73:fe:bf:92:b1:ae:42:bc:d4:
4f:44:14:4b:99:f8:a8:ed:a5:39:94:18:ed:93:1b:ec:8a:a2:
15:65:f9:a4:f4:93:6c:20:d2:77:6c:1e:67:ac:f2:19:2d:f9:
eb:cf:8a:40:f8:8e:71:e0:40:05:2a:6a:1f:7d:66:ea:f7:68:
6a:57:fc:58:5f:87:d9:3a:c5:52:6f:16:3d:df:78:51:47:35:
ca:9a:33:f2:fe:23:50:92:cd:2c:40:a9:63:aa:fc:8f:91:65:
8b:c5:bc:59:50:09:60:e6:1d:4c:a8:a4:03:d9:0d:2f:ed:9d:
68:9c:7d:85:b5:89:da:a2:88:21:5a:a9:f3:cf:34:d3:90:75:
a3:3e:5d:a4:1d:27:9f:9e:24:01:8a:c8:28:31:e5:ae:80:a2:
e1:94:18:a4:ac:ae:fe:13:ed:b4:80:bb:a9:76:61:1c:a8:3d:
ea:3a:61:24:e4:77:b2:a6:2e:f3:c1:93:a9:dc:2f:8c:f9:c3:
21:81:b4:83:da:f5:2a:76:51:7e:04:d1:52:57:f6:e0:d3:7b:
72:c2:e7:cc
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIDAX21MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI5MTMyNzMxWhcNMjUxMDI4MTMyNzMxWjAYMRYw
FAYDVQQDEw02OGRhODk0Yy0zM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyAq8GT2khzIeOJ+iD66MDzduzy9pVOGBlCPAs3fFz7ROWy/LZIlaxA2t
Uy8Rq7fTPG7h2/UwTXD2hMefbXaVGNA5+IhlB0RMfEmraoRpad4P8yhhg0903h+v
krWb1VmBW44PHpsY5bw4pAJWd79AjHx74ckFrUFYDlhC4p2gd7r7gKcpWS+7iVmK
R8eqIHDPqJDD9q4WN3hszie+fZbm185ZCD8cvVHK9pzHmb/ZhbwCDvkEaP4nL4E1
Cs14+L/4dSMoVLDSQKw2BarNCPv3ZUKSbwcO6Gbdqp4MslV5/unFuSW8aJ1kvPiw
OJiZQPKr9cBkN5MZAeNsBS3agT48NQIDAQABo4IC+jCCAvYwHQYDVR0OBBYEFCCf
DjyC3lAhS6f8i/mEhRBHvYcBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMUY4M0M4ODlEMzgxMUYwOUMxNEY2QTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQBnOkIAwQBnOkgAwQAnOkjAwQA
nOkoAwQAnOkrAwQAnOkuMAwDBACc6TEDBACc6TIDBAGc6TQDBACc6TcDBACc6TkD
BACc6TsDBACc6T4wDAMEAZz2lgMEAZz2mDANBgkqhkiG9w0BAQsFAAOCAQEAZD9P
k/D0UIfXp5hcCRRP98MQyFKoVf8qz5IcJKYYv7VZAirb7OuXNOtwlyOQc/6/krGu
QrzUT0QUS5n4qO2lOZQY7ZMb7IqiFWX5pPSTbCDSd2weZ6zyGS3568+KQPiOceBA
BSpqH31m6vdoalf8WF+H2TrFUm8WPd94UUc1ypoz8v4jUJLNLECpY6r8j5Fli8W8
WVAJYOYdTKikA9kNL+2daJx9hbWJ2qKIIVqp888005B1oz5dpB0nn54kAYrIKDHl
roCi4ZQYpKyu/hPttIC7qXZhHKg96jphJOR3sqYu88GTqdwvjPnDIYG0g9r1KnZR
fgTRUlf24NN7csLnzA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:47 2025 by rpki-client