Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C96FA109E7D11F09D999AE7DAE4EC9C.roa
File: 8C96FA109E7D11F09D999AE7DAE4EC9C.roa (raw, json)
Hash identifier: RCC6UoRHPvfbhNZF35PLqjV4kOo7FZLgE7CDv6MXOqE=
Subject key identifier: 5C:F9:57:D6:B6:D0:8D:90:2D:3F:20:FA:C5:FC:13:9E:C8:69:D1:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C96FA109E7D11F09D999AE7DAE4EC9C.roa
Signing time: Wed 01 Oct 2025 04:17:32 +0000
ROA not before: Wed 01 Oct 2025 04:17:27 +0000
ROA not after: Sat 01 Nov 2025 04:17:27 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.227.143.0/24 maxlen: 24
156.227.145.0/24 maxlen: 24
156.231.98.0/24 maxlen: 24
156.231.101.0/24 maxlen: 24
156.232.32.0/24 maxlen: 24
156.232.33.0/24 maxlen: 24
156.233.109.0/24 maxlen: 24
156.242.66.0/24 maxlen: 24
156.242.67.0/24 maxlen: 24
156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.172.0/24 maxlen: 24
156.249.173.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
156.249.177.0/24 maxlen: 24
156.249.179.0/24 maxlen: 24
156.249.196.0/24 maxlen: 24
156.252.8.0/24 maxlen: 24
156.252.11.0/24 maxlen: 24
156.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97846 (0x17e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:17:27 2025 GMT
Not After : Nov 1 04:17:27 2025 GMT
Subject: CN=68dcab5c-6098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:19:4a:5d:e9:7d:5e:13:83:3c:e6:2c:aa:
7b:5f:83:43:10:17:96:5f:ee:79:84:a3:9b:d0:3e:
6f:88:77:b1:b0:bc:29:e9:c7:77:87:cf:b4:b7:90:
fe:2f:a6:d3:7c:af:1e:30:9c:20:27:42:1e:71:1c:
58:dc:f5:b3:33:b8:80:8a:e9:ed:99:09:a4:f9:de:
be:8f:59:77:d6:60:ae:7c:dd:d7:d1:a0:7c:fe:9b:
b3:f9:65:28:e5:31:df:24:41:c8:93:7b:2c:e2:19:
e7:e7:0e:bb:22:7b:8e:a3:8a:7b:f6:ad:bf:78:d1:
58:03:6d:b7:64:1b:b7:97:d5:ca:7d:5e:45:f1:0f:
08:5d:7c:c4:a8:ca:f8:5c:b3:7a:8e:b8:2b:71:dd:
3f:d1:07:ff:cb:be:09:23:40:5f:97:03:1d:4f:93:
b1:c3:bd:13:89:86:67:94:8e:81:1d:55:fb:3c:55:
94:b1:94:50:33:4b:bf:03:aa:2a:06:04:2d:30:20:
72:ff:e3:ad:34:2c:78:09:69:fa:45:f8:08:8d:21:
c7:0c:6f:44:7c:3b:f1:8f:1b:91:73:0a:cd:8b:a7:
76:71:3d:54:cf:0a:01:c6:5e:32:b9:d7:7d:9f:d5:
9b:8a:d8:1a:60:35:72:49:4c:b4:d5:14:19:3e:4d:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:57:D6:B6:D0:8D:90:2D:3F:20:FA:C5:FC:13:9E:C8:69:D1:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C96FA109E7D11F09D999AE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.227.143.0/24
156.227.145.0/24
156.231.98.0/24
156.231.101.0/24
156.232.32.0/23
156.233.109.0/24
156.242.66.0-156.242.68.255
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.172.0/23
156.249.175.0/24
156.249.177.0/24
156.249.179.0/24
156.249.196.0/24
156.252.8.0/24
156.252.11.0/24
156.253.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:03:72:54:bb:2d:ad:c1:98:8b:32:95:1d:6b:48:e6:e8:89:
7c:2a:cb:da:5e:73:bb:25:f0:35:d7:fb:1f:85:60:b1:55:97:
13:55:16:9d:66:48:24:72:fa:15:21:0c:f6:53:6b:dc:18:a4:
e4:4d:b6:2c:14:d2:23:7d:72:3e:0d:82:a6:e5:1c:9d:3e:5e:
ad:45:9c:bf:1a:eb:4e:26:d2:ae:11:51:e5:1d:58:61:34:44:
65:42:46:43:cb:56:9f:3f:93:2d:ac:d4:a1:cd:59:a2:ad:7b:
36:a0:81:a7:43:aa:cf:54:ea:7d:7e:f4:41:a6:3c:c3:2b:01:
99:3f:f2:09:66:31:d1:b6:d1:cf:8a:1c:23:06:59:41:b9:1e:
74:b5:19:8e:b8:cf:4e:c9:c4:d5:cf:50:5c:db:ef:99:8a:ff:
ee:06:bc:3b:d6:23:4e:47:b5:b1:05:d8:22:2f:c7:60:00:37:
41:07:f2:46:3f:b4:91:5d:7d:75:43:02:d8:a8:48:b6:7e:8a:
ff:32:9e:54:2d:10:bc:64:1b:c3:fb:f6:53:ff:19:42:01:59:
ba:44:3a:1e:b8:ab:f3:b2:e2:ec:a8:8b:41:12:71:9b:60:1c:
0c:de:f8:01:62:f3:03:ad:ff:7f:70:ff:06:f1:c2:cf:98:15:
c8:c5:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:12 2025 by rpki-client