Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D58100D899AD11F0B992C7ACDAE4EC9C.roa
File: D58100D899AD11F0B992C7ACDAE4EC9C.roa (raw, json)
Hash identifier: rgXJi4XeOFLE1dgtyI+hdjKINNlvCzkWotvGvJDcgIU=
Subject key identifier: 4E:E9:1F:FB:F7:03:66:DF:06:65:83:D6:8C:E7:B8:BA:F8:3C:80:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D58100D899AD11F0B992C7ACDAE4EC9C.roa
Signing time: Thu 25 Sep 2025 01:20:34 +0000
ROA not before: Thu 25 Sep 2025 01:20:29 +0000
ROA not after: Fri 31 Oct 2025 01:20:29 +0000
asID: 203020
IP address blocks: 156.226.8.0/21 maxlen: 24
156.226.184.0/21 maxlen: 24
156.226.192.0/21 maxlen: 24
156.227.48.0/21 maxlen: 24
156.227.56.0/21 maxlen: 24
156.230.144.0/21 maxlen: 24
156.231.184.0/21 maxlen: 24
156.238.40.0/21 maxlen: 24
156.238.48.0/21 maxlen: 24
156.247.24.0/21 maxlen: 24
156.251.120.0/21 maxlen: 24
156.252.72.0/21 maxlen: 24
156.252.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97588 (0x17d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 25 01:20:29 2025 GMT
Not After : Oct 31 01:20:29 2025 GMT
Subject: CN=68d498e2-0c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:de:26:16:04:e1:e1:b8:95:4c:a3:7e:22:
d9:b4:41:23:07:40:aa:ac:06:c9:a9:59:e7:f6:b3:
24:af:53:97:5c:dc:b0:50:b3:21:c7:96:ec:74:3f:
0d:03:c1:c6:ed:c3:0a:ec:c2:6e:64:32:1d:ec:25:
7c:a4:02:26:96:68:ab:bb:5c:1c:aa:b5:3c:a1:ed:
0e:bc:74:de:c8:c7:3b:20:fd:64:68:c2:91:5c:ce:
36:37:8d:21:0b:fb:fa:39:b9:db:39:89:0b:a8:1d:
db:35:d5:82:d4:2b:88:41:1a:cb:c0:aa:96:be:49:
26:34:d6:6b:6a:a8:7b:a1:7d:e1:68:26:3f:d8:54:
3d:07:58:65:67:d8:dd:6c:84:b7:53:ab:25:ee:03:
39:46:3b:a4:b6:8f:d1:fb:98:0f:3c:c7:04:4a:34:
72:b9:89:5e:d9:91:29:a7:04:04:f7:05:90:51:e9:
77:70:c3:38:cf:db:da:47:f0:81:a8:18:94:a3:26:
6c:5b:86:74:92:5a:fd:62:26:88:52:28:a0:3d:73:
bd:6a:7d:e6:23:1b:5c:bb:3d:61:3c:2e:ed:c9:0a:
ec:54:96:77:88:48:54:84:3b:75:fb:80:3d:7e:79:
37:74:c6:fb:34:7d:88:f4:70:c1:d6:07:96:08:f0:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E9:1F:FB:F7:03:66:DF:06:65:83:D6:8C:E7:B8:BA:F8:3C:80:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D58100D899AD11F0B992C7ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.8.0/21
156.226.184.0-156.226.199.255
156.227.48.0/20
156.230.144.0/21
156.231.184.0/21
156.238.40.0-156.238.55.255
156.247.24.0/21
156.251.120.0/21
156.252.72.0/21
156.252.136.0/21
Signature Algorithm: sha256WithRSAEncryption
07:47:8b:b3:6a:ae:c4:e7:eb:6c:d7:59:4e:35:22:41:12:7d:
99:b4:84:94:1d:12:26:73:60:78:a3:56:f5:ad:c1:fc:d2:24:
a2:0e:89:1c:8a:23:00:bf:79:2f:39:1a:3b:b6:fb:9c:e2:8e:
94:12:7b:d4:65:48:45:d4:9c:a5:6d:21:d7:8f:98:d7:5e:04:
97:eb:1e:30:22:9c:2e:05:b0:0c:4c:af:e4:4d:97:6b:a9:4d:
93:1d:73:eb:23:fc:93:5f:be:5e:fa:1b:b5:c0:8a:cb:75:95:
9e:bc:57:00:01:2d:d8:1d:3b:3d:b1:e6:b2:94:ce:a9:6f:6f:
91:55:e5:74:42:70:f8:09:aa:16:28:51:e8:10:5f:d0:f5:96:
fd:28:c4:8f:96:5c:b6:e2:2c:70:48:8d:23:34:31:db:aa:6d:
ac:ba:7b:4f:58:65:48:3f:75:c6:ed:4a:9c:94:83:84:2e:80:
58:2c:58:05:c2:6c:83:07:a0:13:ea:d6:fc:2b:6e:17:26:9d:
45:56:77:3a:24:10:70:e2:0b:e1:9b:ec:71:a0:f2:27:05:5b:
69:0f:6b:32:32:6b:40:e1:b0:93:a4:75:61:8a:08:a6:c5:92:
b5:93:4d:5e:32:f8:84:4d:4a:7c:d8:dd:5f:80:70:da:dc:8a:
a7:ea:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:32 2025 by rpki-client