Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/398803FE9DD411F0938437A2DAE4EC9C.roa
File: 398803FE9DD411F0938437A2DAE4EC9C.roa (raw, json)
Hash identifier: 597CvJnxUiWMbc9XE4I57GkbrAoFAPSmKxtLtTUcQ3s=
Subject key identifier: DC:E7:FD:FD:95:84:66:E7:A9:15:F6:D6:7B:EE:79:4A:1C:E4:4F:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/398803FE9DD411F0938437A2DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 08:05:28 +0000
ROA not before: Tue 30 Sep 2025 08:05:21 +0000
ROA not after: Sat 01 Nov 2025 08:05:21 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.227.143.0/24 maxlen: 24
156.227.145.0/24 maxlen: 24
156.231.98.0/24 maxlen: 24
156.231.101.0/24 maxlen: 24
156.232.33.0/24 maxlen: 24
156.242.66.0/24 maxlen: 24
156.242.67.0/24 maxlen: 24
156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
156.249.177.0/24 maxlen: 24
156.249.179.0/24 maxlen: 24
156.249.196.0/24 maxlen: 24
156.252.8.0/24 maxlen: 24
156.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97821 (0x17e1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 08:05:21 2025 GMT
Not After : Nov 1 08:05:21 2025 GMT
Subject: CN=68db8f47-d7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:02:fe:3d:b3:da:25:57:40:84:48:46:c1:
8f:f9:b6:b7:84:a5:5a:53:d3:c0:da:09:72:7b:b0:
88:59:6d:13:78:ee:fb:c4:82:df:d3:00:15:3e:86:
22:8d:cf:36:51:00:a6:14:74:57:69:3d:48:2f:8a:
f9:45:64:66:e0:7b:b7:9d:c4:10:b3:4b:ed:8c:56:
d6:f7:3b:ef:6c:ba:13:5c:79:b5:11:ea:64:6f:b8:
96:f6:a3:b0:e0:43:19:74:d9:64:2e:2d:b8:d8:d2:
86:0f:e9:a4:74:63:ad:6c:ca:b0:90:38:42:25:a9:
6b:c0:93:5a:33:6f:5a:42:27:85:0e:22:e7:aa:85:
fe:26:a0:87:58:43:00:78:27:fc:e0:74:22:b3:f3:
66:f9:4d:7b:6e:ef:f2:82:8c:93:a9:37:55:a8:98:
8f:d1:b1:55:13:99:93:05:bb:83:6c:8d:c3:6a:09:
a1:55:74:3c:7d:31:81:63:93:b8:1a:4f:2c:89:44:
10:27:de:df:d4:91:8d:71:cb:fb:a0:0e:5a:b6:fe:
ba:c5:64:4f:99:71:a0:8e:15:99:38:16:e6:d8:cb:
9a:13:aa:04:82:9b:d0:16:f2:e8:08:94:ec:0d:21:
36:26:58:e1:b2:24:21:7e:57:20:e2:92:6d:ba:c2:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:FD:FD:95:84:66:E7:A9:15:F6:D6:7B:EE:79:4A:1C:E4:4F:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/398803FE9DD411F0938437A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.227.143.0/24
156.227.145.0/24
156.231.98.0/24
156.231.101.0/24
156.232.33.0/24
156.242.66.0-156.242.68.255
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.249.175.0/24
156.249.177.0/24
156.249.179.0/24
156.249.196.0/24
156.252.8.0/24
156.253.134.0/24
Signature Algorithm: sha256WithRSAEncryption
20:aa:6e:f3:47:15:9f:df:59:30:e0:5d:86:4f:9b:d9:b1:ee:
d7:20:32:10:f6:eb:82:eb:dd:48:76:7a:8b:b5:fd:e0:c0:87:
07:a2:ee:26:45:96:09:5a:13:ac:d9:8c:88:85:fb:49:bf:bc:
6f:dc:9c:3d:f4:87:8f:46:08:50:a3:cb:fb:0f:92:f6:3f:01:
6f:b6:8d:c0:5f:d7:c7:29:4c:41:68:62:44:ba:98:e5:1f:2e:
f4:6e:51:eb:cc:d3:e0:2d:1b:8e:1f:5f:df:69:6e:43:52:72:
f4:9f:c3:15:f1:f5:d9:4d:09:20:4b:20:0b:07:9f:09:ef:14:
cf:6a:47:34:4c:46:fe:3f:1f:a5:3a:d2:b8:71:f2:34:e3:62:
8c:6e:f9:19:82:ca:3e:25:fd:2f:89:6b:e8:ef:4a:91:bc:4e:
2a:aa:b5:27:06:f9:0d:5e:89:5a:7b:2c:c6:a5:be:c0:77:d2:
91:4d:14:16:87:af:bd:83:c8:33:04:23:9c:82:fc:e4:15:c3:
05:c5:e8:fa:1d:bf:eb:54:d9:30:af:7e:44:8d:90:42:df:10:
e0:8d:b8:26:38:cc:fb:91:17:41:a2:c0:61:f9:46:17:51:ea:
e6:0f:6c:37:7b:4d:36:e6:1c:94:71:77:30:a5:92:6b:59:67:
29:e8:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:07 2025 by rpki-client