Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44FD5696997711F0BE1129CDDAE4EC9C.roa
File: 44FD5696997711F0BE1129CDDAE4EC9C.roa (raw, json)
Hash identifier: WjyWdVlBWfb82RAF0UYzrnXzhR+GIj3wiaNLHOt//XI=
Subject key identifier: DF:46:49:D7:FE:4B:D5:E6:6B:6F:39:3C:CE:D7:73:EE:86:47:F7:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44FD5696997711F0BE1129CDDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 18:49:59 +0000
ROA not before: Wed 24 Sep 2025 18:49:54 +0000
ROA not after: Thu 30 Oct 2025 18:49:54 +0000
asID: 9304
IP address blocks: 156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97541 (0x17d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 18:49:54 2025 GMT
Not After : Oct 30 18:49:54 2025 GMT
Subject: CN=68d43d57-2b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:98:82:d6:9d:9b:54:15:12:0a:ef:22:a3:
5b:aa:7b:93:20:fd:8d:f3:42:94:de:fd:40:18:f6:
3e:c5:4e:45:53:5d:a3:d8:9e:43:fc:2a:f1:28:3a:
59:97:d8:f3:46:91:75:1e:e1:cb:4b:af:70:b9:f2:
2e:40:31:55:f1:c5:0e:9b:50:17:21:10:5b:bd:f2:
9f:74:93:a2:99:b1:4a:ee:70:bc:b6:89:f1:11:70:
9c:08:f7:39:b9:76:18:24:9d:12:23:63:a6:4c:0d:
45:11:aa:db:e7:68:68:cd:9e:c7:24:7e:69:23:07:
3d:f5:d2:b6:f3:79:2a:36:7b:1a:cd:37:05:c7:8a:
1d:ee:f0:84:59:57:aa:d3:3d:d3:3a:aa:90:fb:ff:
cc:68:e3:0a:ea:13:26:ee:b4:2c:32:c7:b5:49:a3:
63:a2:95:44:4c:1c:98:f7:ba:fe:12:28:da:ec:9d:
bf:88:5f:d7:6e:52:20:ba:c4:2d:d1:d4:db:39:75:
f4:4e:43:3b:7e:ce:06:1f:f5:bd:08:a3:8d:84:46:
73:98:a8:46:5c:8e:2b:c1:f7:b7:64:b4:0e:b9:a9:
e9:41:f3:88:78:be:0f:d4:e4:48:61:63:d3:52:6b:
c6:44:ec:01:ca:8c:8b:b7:c5:04:27:9f:0a:b7:5c:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:49:D7:FE:4B:D5:E6:6B:6F:39:3C:CE:D7:73:EE:86:47:F7:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44FD5696997711F0BE1129CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.180.0/24
156.249.183.0/24
156.249.185.0/24
156.249.187.0/24
156.249.190.0/23
Signature Algorithm: sha256WithRSAEncryption
17:28:ba:b0:3e:6f:ad:18:03:c0:28:4a:32:32:9e:a8:84:8c:
88:a4:31:d0:eb:a8:21:07:3e:9b:fe:75:6d:78:51:31:7e:bf:
db:bf:1e:bf:b8:be:9b:51:f4:df:14:3a:c7:70:77:7e:52:84:
dc:0e:9d:c1:34:86:11:59:8b:2a:6b:04:c8:8d:47:c6:e6:2b:
db:b5:81:af:bc:3d:75:c5:fe:9a:93:6b:7f:85:70:f4:b6:05:
02:d6:f1:b8:24:a7:2f:f7:6c:84:3f:ed:a2:fc:d6:0c:88:2a:
2e:46:1d:8b:9e:f5:fd:cb:f3:ac:e4:e5:b1:cb:f0:a7:3d:77:
03:63:d5:20:1d:ab:e7:c3:49:90:7a:19:89:ab:85:7b:cc:68:
39:c4:04:61:e2:35:7d:a7:98:25:19:00:36:09:ac:19:80:ad:
0d:70:fd:92:34:f1:b5:33:59:91:3f:aa:60:04:6d:a9:47:f9:
01:15:87:69:20:9d:d2:84:e3:85:dd:b5:ae:18:f2:a3:62:b3:
c5:ed:10:f2:2c:02:59:05:97:53:8b:cd:26:a8:2e:4c:16:83:
59:1c:47:d1:f9:57:52:07:e5:9b:fb:db:68:6f:4c:78:33:f1:
d5:10:b7:5d:bf:c7:f2:ae:e7:4f:b9:63:9f:d2:70:ac:1e:32:
e3:b7:45:db
-----BEGIN CERTIFICATE-----
MIIF3TCCBMWgAwIBAgIDAX0FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTI0MTg0OTU0WhcNMjUxMDMwMTg0OTU0WjAYMRYw
FAYDVQQDEw02OGQ0M2Q1Ny0yYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAshiYgtadm1QVEgrvIqNbqnuTIP2N80KU3v1AGPY+xU5FU12j2J5D/Crx
KDpZl9jzRpF1HuHLS69wufIuQDFV8cUOm1AXIRBbvfKfdJOimbFK7nC8tonxEXCc
CPc5uXYYJJ0SI2OmTA1FEarb52hozZ7HJH5pIwc99dK283kqNnsazTcFx4od7vCE
WVeq0z3TOqqQ+//MaOMK6hMm7rQsMse1SaNjopVETByY97r+Eija7J2/iF/XblIg
usQt0dTbOXX0TkM7fs4GH/W9CKONhEZzmKhGXI4rwfe3ZLQOuanpQfOIeL4P1ORI
YWPTUmvGROwByoyLt8UEJ58Kt1y1qwIDAQABo4IC/jCCAvowHQYDVR0OBBYEFN9G
Sdf+S9Xma285PM7Xc+6GR/cYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NEZENTY5Njk5NzcxMUYwQkUxMTI5Q0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQBnOcIAwQAnOc/AwQAnOdqAwQB
nOeAAwQAnOeFAwQAnPmFMAwDBACc+ZkDBACc+ZoDBACc+aIDBAGc+aYDBACc+aoD
BACc+bQDBACc+bcDBACc+bkDBACc+bsDBAGc+b4wDQYJKoZIhvcNAQELBQADggEB
ABcourA+b60YA8AoSjIynqiEjIikMdDrqCEHPpv+dW14UTF+v9u/Hr+4vptR9N8U
Osdwd35ShNwOncE0hhFZiyprBMiNR8bmK9u1ga+8PXXF/pqTa3+FcPS2BQLW8bgk
py/3bIQ/7aL81gyIKi5GHYue9f3L86zk5bHL8Kc9dwNj1SAdq+fDSZB6GYmrhXvM
aDnEBGHiNX2nmCUZADYJrBmArQ1w/ZI08bUzWZE/qmAEbalH+QEVh2kgndKE44Xd
ta4Y8qNis8XtEPIsAlkFl1OLzSaoLkwWg1kcR9H5V1IH5Zv722hvTHgz8dUQt12/
x/Ku50+5Y5/ScKweMuO3Rds=
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:13 2025 by rpki-client