Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F9998DE8D5F11F097AA55DBDAE4EC9C.roa
File: 1F9998DE8D5F11F097AA55DBDAE4EC9C.roa (raw, json)
Hash identifier: q0Ot5U8p3aW+EVUPvKSc0QAglwTtyadWrFvuUXohXKc=
Subject key identifier: 44:41:56:67:C3:48:82:AC:F6:37:7F:87:CF:65:3C:09:72:61:4F:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F9998DE8D5F11F097AA55DBDAE4EC9C.roa
Signing time: Tue 09 Sep 2025 09:26:54 +0000
ROA not before: Tue 09 Sep 2025 09:26:49 +0000
ROA not after: Thu 16 Oct 2025 09:26:49 +0000
asID: 22773
IP address blocks: 156.238.143.0/24 maxlen: 24
156.238.145.0/24 maxlen: 24
156.238.146.0/24 maxlen: 24
156.238.147.0/24 maxlen: 24
156.238.148.0/24 maxlen: 24
156.238.149.0/24 maxlen: 24
156.238.150.0/24 maxlen: 24
156.238.151.0/24 maxlen: 24
156.238.152.0/24 maxlen: 24
156.238.153.0/24 maxlen: 24
156.238.161.0/24 maxlen: 24
156.238.163.0/24 maxlen: 24
156.238.164.0/24 maxlen: 24
156.238.165.0/24 maxlen: 24
156.238.166.0/24 maxlen: 24
156.238.167.0/24 maxlen: 24
156.238.168.0/24 maxlen: 24
156.238.169.0/24 maxlen: 24
156.238.170.0/24 maxlen: 24
156.242.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96783 (0x17a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 09:26:49 2025 GMT
Not After : Oct 16 09:26:49 2025 GMT
Subject: CN=68bff2de-1b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:be:fd:de:65:8b:ae:bc:65:02:90:0b:13:
d7:2b:5e:2f:28:23:44:71:41:a5:ab:8e:81:79:74:
d1:e0:ce:d0:98:a5:9f:4c:de:0f:90:33:67:8b:b8:
15:e9:2d:4d:fb:ad:69:60:08:59:16:91:82:46:3e:
bc:15:0a:99:38:f3:4d:3e:6f:71:3e:e3:8d:e8:5a:
4b:fc:e8:6e:69:b2:67:01:87:d0:84:6e:cc:46:62:
08:7a:81:5a:c5:3e:7a:2f:89:07:48:04:6d:40:ba:
52:ba:8d:a8:f7:58:c1:7b:a5:fa:8d:40:4a:46:d9:
92:f3:0c:8e:f3:03:43:f8:96:58:ef:4c:db:d0:e2:
5e:c2:d9:a3:2d:f6:09:28:20:ae:0b:a4:d1:3f:35:
fd:7b:c3:df:ad:17:45:2b:0a:5a:30:f4:d4:d7:e1:
99:0c:24:20:59:53:23:23:96:8c:5b:61:10:89:df:
61:83:b5:b3:07:e4:3e:8f:2e:e3:5e:77:a7:a2:88:
25:71:c5:8d:15:ad:16:8a:f8:5c:d5:97:e8:6f:63:
e9:ed:4a:02:c7:a8:7b:4c:d2:89:54:63:84:f4:43:
fc:e5:dc:0c:eb:0c:46:1a:22:3f:4c:71:81:0c:5f:
2e:e7:83:2a:62:31:c8:bb:40:3c:07:7f:ef:e7:0e:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:56:67:C3:48:82:AC:F6:37:7F:87:CF:65:3C:09:72:61:4F:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F9998DE8D5F11F097AA55DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.143.0/24
156.238.145.0-156.238.153.255
156.238.161.0/24
156.238.163.0-156.238.170.255
156.242.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f4:77:0e:e1:a4:9a:1a:f3:f3:96:94:0a:8a:08:38:23:c9:
31:dd:f2:98:89:e0:03:c9:62:5c:7a:86:ea:41:dd:dc:95:3f:
7a:67:c3:7a:4a:94:74:53:c2:aa:ad:97:a1:73:5d:2b:06:17:
32:64:02:06:57:f3:af:bf:95:39:b9:4b:bd:27:e6:b9:65:b2:
c7:22:9a:61:6c:ed:98:34:e4:9e:bd:c2:8e:35:f2:8a:cf:4d:
74:68:8b:bc:86:bd:e2:4d:4f:ea:24:6f:b9:85:34:00:7b:55:
6c:fc:f8:52:e2:27:32:dc:03:37:11:e9:91:0e:45:e8:a1:fd:
8c:df:8e:01:c3:04:fe:e8:f0:ed:96:00:cd:b2:e5:f9:e8:a1:
7a:cc:55:cc:2f:1f:8e:c6:fd:7a:c3:8a:f3:e0:05:30:8a:0c:
11:aa:0b:d4:06:ff:e6:12:2e:26:ce:00:7c:e1:a5:4e:26:1a:
cf:91:21:68:f0:f5:38:35:c7:ec:33:1d:5d:ae:83:ef:93:bc:
c1:e5:aa:9a:cb:78:31:9a:00:5f:ef:44:1f:cb:d9:b3:38:78:
f8:71:3d:21:52:08:39:b7:2e:8e:9b:2b:60:79:a3:45:7d:eb:
5e:2c:3e:19:eb:15:ab:30:5b:60:9a:2d:a3:d4:0f:63:7d:63:
2f:5d:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:58:55 2025 by rpki-client