Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33A03AEA4F711F084182AECDAE4EC9C.roa
File: F33A03AEA4F711F084182AECDAE4EC9C.roa (raw, json)
Hash identifier: JhHqOkRmdKlSTdiQTkmcg2zkUSXjbcob17es5OqS5ic=
Subject key identifier: EC:2C:65:60:24:8C:61:27:13:08:4B:7E:F8:02:33:AD:79:D9:BF:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33A03AEA4F711F084182AECDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 10:08:50 +0000
ROA not before: Thu 09 Oct 2025 10:08:44 +0000
ROA not after: Sun 16 Nov 2025 10:08:44 +0000
asID: 22773
IP address blocks: 156.233.253.0/24 maxlen: 24
156.233.254.0/24 maxlen: 24
156.233.255.0/24 maxlen: 24
156.238.136.0/24 maxlen: 24
156.238.137.0/24 maxlen: 24
156.238.138.0/24 maxlen: 24
156.238.139.0/24 maxlen: 24
156.238.140.0/24 maxlen: 24
156.238.141.0/24 maxlen: 24
156.238.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98233 (0x17fb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 10:08:44 2025 GMT
Not After : Nov 16 10:08:44 2025 GMT
Subject: CN=68e789b1-c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:82:61:1d:db:ae:a7:fb:84:a8:e8:5a:c8:
c7:b5:b4:c2:10:8f:15:df:5f:ee:7a:69:f1:35:d8:
47:95:0c:5f:62:28:e0:d2:57:27:37:6f:e2:2e:d0:
1a:14:e9:83:e3:d9:93:e8:ab:1f:9a:94:d6:c7:2f:
9e:6f:41:14:0a:e5:e7:6e:11:76:c4:df:b3:c2:40:
66:56:64:91:db:d1:1c:a1:f3:3e:e6:94:f3:2d:6c:
2c:9a:98:20:99:47:17:97:4d:4e:44:fd:f9:66:7b:
64:fa:76:88:68:c5:29:77:24:b7:e1:ed:ec:c9:b9:
90:cc:8a:2a:3a:70:0c:04:eb:44:1d:e0:38:00:89:
9b:1d:4b:d7:d8:62:5e:27:30:98:38:68:c1:ed:c8:
cc:cf:ad:3e:f7:e3:0e:d2:52:91:f4:da:26:c6:28:
a3:73:bd:2e:72:e9:0e:6e:3f:a3:a8:3f:b4:67:52:
6d:0c:c3:75:7d:16:34:ca:f3:ad:3f:a1:36:53:a6:
d8:2a:24:0f:33:5e:dc:6f:9d:66:c3:61:2c:70:16:
5d:af:6d:35:84:c5:39:e9:ef:3b:dd:3e:34:64:c1:
bd:64:c0:c4:61:98:37:d3:c2:60:bb:43:bb:b9:d4:
a9:58:90:cf:b9:0e:a4:49:22:fc:86:d2:0a:c5:9f:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:65:60:24:8C:61:27:13:08:4B:7E:F8:02:33:AD:79:D9:BF:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33A03AEA4F711F084182AECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.253.0-156.233.255.255
156.238.136.0-156.238.142.255
Signature Algorithm: sha256WithRSAEncryption
95:0b:98:8e:bb:48:d0:95:ab:b5:6f:de:75:99:f9:9e:98:d1:
d8:b1:9b:fd:de:1d:6b:93:39:35:27:47:d4:00:10:2a:22:d5:
f8:e1:32:8b:80:de:13:ca:29:62:65:30:66:88:53:7f:49:69:
24:68:70:35:8b:d1:25:8c:07:ff:30:80:68:b1:f8:7f:37:93:
c3:a4:87:7c:fd:54:bc:bb:2f:e1:ca:96:43:9c:ba:38:c6:4c:
34:83:2d:a2:eb:1c:69:46:8f:ec:d8:1a:f0:a1:11:3b:30:3a:
dc:66:d0:5d:95:6c:b2:60:ae:92:13:c3:2c:84:e1:66:ac:81:
ed:af:5d:87:68:87:e4:2c:cc:00:c9:85:ef:8e:5d:c0:d8:71:
59:4a:87:62:8b:76:a4:67:54:6c:dc:4d:e0:7a:8c:0d:92:44:
34:78:c4:0a:93:fb:04:70:e7:38:dc:52:46:1d:06:58:1c:62:
02:6d:ac:42:bd:c4:75:1c:1b:36:e5:55:43:80:db:64:c4:08:
38:87:80:04:8c:f5:99:b6:9f:bf:a3:47:b3:96:bb:fb:16:d2:
0a:05:6a:84:19:5c:b7:aa:4f:e4:31:6f:96:6e:ea:bd:1e:0c:
42:fa:57:b7:0c:49:43:b0:fa:8c:d0:98:60:e9:ba:0e:d6:94:
c3:70:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:04 2025 by rpki-client