Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BFA5F0955211F0980D5886DAE4EC9C.roa
File: D9BFA5F0955211F0980D5886DAE4EC9C.roa (raw, json)
Hash identifier: 77+NQNlbiIf0BVq7PDnnJedTcihcZ6hNluwohkdXbig=
Subject key identifier: 65:C1:DF:83:2F:D2:4B:32:6C:BF:4B:1F:26:47:45:45:7D:D8:60:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017C7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BFA5F0955211F0980D5886DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 12:19:12 +0000
ROA not before: Fri 19 Sep 2025 12:19:07 +0000
ROA not after: Mon 26 Oct 2026 12:19:07 +0000
asID: 214483
IP address blocks: 156.229.172.0/23 maxlen: 24
156.233.120.0/22 maxlen: 24
156.238.183.0/24 maxlen: 24
156.242.26.0/23 maxlen: 24
156.242.69.0/24 maxlen: 24
156.242.70.0/23 maxlen: 24
156.242.72.0/21 maxlen: 24
156.242.81.0/24 maxlen: 24
156.242.82.0/23 maxlen: 24
156.242.84.0/22 maxlen: 24
156.242.88.0/24 maxlen: 24
156.242.91.0/24 maxlen: 24
156.242.94.0/24 maxlen: 24
156.242.96.0/22 maxlen: 24
156.242.108.0/22 maxlen: 24
156.242.112.0/21 maxlen: 24
156.242.123.0/24 maxlen: 24
156.243.0.0/24 maxlen: 24
156.243.134.0/23 maxlen: 24
156.243.136.0/23 maxlen: 24
156.243.138.0/24 maxlen: 24
156.243.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97403 (0x17c7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 12:19:07 2025 GMT
Not After : Oct 26 12:19:07 2026 GMT
Subject: CN=68cd4a40-0eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:11:be:ac:d8:9c:be:f1:5d:3d:a7:6c:0c:
e3:85:1e:b1:a2:90:03:09:f3:e0:19:d2:03:93:ef:
8b:50:8d:f1:60:ab:4f:1d:eb:02:5d:c1:b3:98:8e:
a9:80:b6:c6:17:92:3b:2d:39:73:0b:bf:d5:16:92:
33:2d:6a:70:5a:6c:8b:5d:94:cf:14:45:df:24:33:
f0:58:af:f9:0d:1f:18:cf:11:78:d1:21:ef:60:a6:
ec:15:0a:3e:06:63:bf:71:4a:be:2a:b1:70:ca:39:
34:9d:68:72:d0:8d:d8:eb:bb:1e:63:0f:4a:94:71:
cc:04:fa:31:2f:f9:d2:af:97:5f:c5:15:e3:2e:ce:
73:81:cf:1e:5b:ac:8f:ed:59:9d:4e:c2:67:cd:88:
57:c7:d4:40:79:f6:cb:e3:78:75:1a:21:f5:70:a9:
10:a1:27:54:ee:cd:77:16:be:d0:c8:89:a1:6d:fd:
c7:c0:fb:84:14:4a:8b:da:e8:6a:6f:69:ec:42:04:
58:43:1d:cd:e2:8e:8f:65:b0:dc:83:25:8f:67:d4:
f4:97:18:10:fc:d6:e7:5a:c6:31:04:8e:4e:da:96:
6c:c8:c0:77:ce:a7:a1:c7:82:56:98:3f:86:1b:1d:
b8:ac:0e:90:18:1c:2a:8d:20:40:08:3f:75:5e:62:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:DF:83:2F:D2:4B:32:6C:BF:4B:1F:26:47:45:45:7D:D8:60:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9BFA5F0955211F0980D5886DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.172.0/23
156.233.120.0/22
156.238.183.0/24
156.242.26.0/23
156.242.69.0-156.242.79.255
156.242.81.0-156.242.88.255
156.242.91.0/24
156.242.94.0/24
156.242.96.0/22
156.242.108.0-156.242.119.255
156.242.123.0/24
156.243.0.0/24
156.243.134.0-156.243.138.255
156.243.145.0/24
Signature Algorithm: sha256WithRSAEncryption
25:55:30:b7:ed:92:0e:d3:9e:72:e8:89:36:10:af:02:d7:01:
41:5b:08:32:b9:3b:10:88:93:06:36:b1:43:bf:97:15:eb:e8:
22:e4:bc:76:b5:b5:1f:21:40:a8:a8:a7:36:32:80:50:64:38:
1c:39:ef:d5:1c:4f:14:92:e3:e6:19:94:7a:43:fe:a8:42:a7:
ca:8c:ee:47:c6:a5:47:c2:19:fe:cb:f3:d7:61:63:b1:ee:c5:
10:59:08:ca:6c:2c:c6:ec:3c:72:40:8a:cf:a8:f2:88:2e:be:
7b:e7:c3:0a:69:3a:93:9a:f0:dd:5a:83:50:f0:21:ed:0f:38:
5d:4d:92:59:08:77:b0:40:eb:7e:bc:32:5f:18:83:15:39:13:
94:03:be:54:0f:41:c9:fb:2d:63:d2:63:ad:92:29:8d:fb:08:
1a:79:51:9d:58:95:6c:59:09:5c:79:6b:68:da:21:79:13:f3:
f4:bd:0b:b8:1d:fc:ad:22:08:59:94:9f:9f:91:6a:65:3c:ef:
98:6f:dd:19:68:dd:28:29:8e:a1:92:47:e5:42:5f:88:43:90:
8d:e6:cf:d7:2b:11:4f:23:01:6a:e1:d9:a5:4f:6b:43:70:af:
7f:27:e7:8b:a6:22:71:36:7b:b2:25:ca:01:f2:7f:a1:2c:84:
b5:2e:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:15 2025 by rpki-client