Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0CD5B1C9AC511F0B43CB2D0DAE4EC9C.roa
File: E0CD5B1C9AC511F0B43CB2D0DAE4EC9C.roa (raw, json)
Hash identifier: 9x5/OkMS8icCu49cRZuB/stTBXu2m7KLP62PHcyyW48=
Subject key identifier: CD:53:93:FD:B9:07:F0:BF:FE:52:33:7D:FF:D5:31:F7:38:19:59:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0CD5B1C9AC511F0B43CB2D0DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 10:45:12 +0000
ROA not before: Fri 26 Sep 2025 10:45:07 +0000
ROA not after: Sun 09 Nov 2025 10:45:07 +0000
asID: 138915
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.2.0/24 maxlen: 24
156.244.3.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.8.0/24 maxlen: 24
156.244.9.0/24 maxlen: 24
156.244.10.0/24 maxlen: 24
156.244.11.0/24 maxlen: 24
156.244.12.0/24 maxlen: 24
156.244.13.0/24 maxlen: 24
156.244.14.0/24 maxlen: 24
156.244.15.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.55.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97655 (0x17d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 10:45:07 2025 GMT
Not After : Nov 9 10:45:07 2025 GMT
Subject: CN=68d66eb8-22c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:a4:16:76:e7:ec:e9:64:51:23:2c:2c:7b:
42:9b:04:ab:a6:1e:0c:b4:de:ef:60:b7:34:f3:53:
ef:06:41:7f:db:ec:78:76:27:82:00:6d:fa:d5:a0:
ec:47:6b:9d:e6:48:56:62:42:fc:c8:d5:19:7d:28:
75:60:c9:5a:5f:19:b1:83:4b:e5:17:c4:52:b1:cc:
f9:19:ba:5f:f0:d9:c2:16:72:4d:60:9d:a3:1d:0e:
d6:33:9d:02:e6:23:92:d1:37:d2:17:72:98:38:f8:
2c:81:6f:d6:10:2a:28:e2:ed:a1:f6:11:d0:48:1f:
ff:8f:f5:93:6d:18:49:24:c5:87:da:9c:50:fa:15:
19:47:4e:06:04:2b:c1:4c:2b:2c:5c:5b:f9:da:b7:
38:c3:4b:01:52:1a:73:29:27:04:38:77:72:2d:74:
f1:3f:7b:53:20:a8:36:cf:39:e0:2e:3d:0b:f3:e8:
25:c5:c8:e8:5a:e0:92:1f:c7:12:12:6d:d1:bb:3c:
3b:43:75:95:78:39:e6:b7:97:bd:03:ed:c1:75:b1:
9a:3a:c3:15:82:b5:cf:8b:d3:64:db:72:59:fb:72:
18:db:21:7f:12:65:c7:2e:42:02:2a:a4:28:03:f5:
46:a2:c4:12:3f:0d:2a:53:0b:d5:76:1d:ec:1a:fd:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:93:FD:B9:07:F0:BF:FE:52:33:7D:FF:D5:31:F7:38:19:59:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0CD5B1C9AC511F0B43CB2D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0/20
156.244.37.0-156.244.38.255
156.244.55.0/24
156.244.62.0/23
Signature Algorithm: sha256WithRSAEncryption
94:e7:fa:b6:65:a5:f8:da:cf:bf:14:f3:10:62:7e:18:5b:c0:
56:24:ac:8a:38:52:19:7e:dc:53:28:28:0e:53:3c:03:1d:cf:
43:09:c9:e4:0b:05:e6:36:eb:d5:62:bb:87:4e:20:c1:a0:61:
f5:89:88:93:49:76:aa:f7:f1:a5:39:23:d1:1e:85:c6:f1:98:
ee:f8:96:18:c6:e3:e0:52:ed:49:5b:0f:02:98:af:71:55:24:
e1:05:fe:3b:6f:eb:76:9c:2b:58:bc:a0:cd:7d:33:bc:2e:8e:
0f:d0:e4:32:a2:6f:cf:16:ef:db:09:99:b5:8a:28:e2:fd:f0:
23:e2:f2:c4:cb:4c:eb:c6:02:50:ab:19:b0:07:96:75:ed:48:
76:ff:74:3b:0c:d3:c1:94:b6:94:2e:f2:95:1b:0b:1c:c9:5f:
12:1e:00:00:01:66:75:2f:77:e6:31:3a:58:4e:67:84:3f:15:
32:a7:15:85:9a:ad:b9:37:af:27:5d:d1:0f:7a:87:11:ab:fd:
dc:38:b3:2e:e6:9a:db:47:b4:df:5f:3d:37:2f:c0:cd:f3:11:
db:f7:2b:ea:fb:8d:50:04:ad:36:5e:a1:17:80:d5:51:1a:d4:
54:e9:01:a7:c9:5c:dd:f3:ef:57:2e:a2:d1:be:21:b4:90:7b:
fd:8a:3e:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:58 2025 by rpki-client