Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075EBCBA9F7811F092247FBEDAE4EC9C.roa
File: 075EBCBA9F7811F092247FBEDAE4EC9C.roa (raw, json)
Hash identifier: uKB56MWLRwNSfPuSXA8VAIXld7pJs4UWxZie5aQ3tWw=
Subject key identifier: 5F:8D:55:B2:BE:AA:7E:31:FA:7F:BA:60:C6:8D:E0:2A:78:7F:45:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075EBCBA9F7811F092247FBEDAE4EC9C.roa
Signing time: Thu 02 Oct 2025 10:10:32 +0000
ROA not before: Thu 02 Oct 2025 10:10:25 +0000
ROA not after: Mon 10 Nov 2025 10:10:25 +0000
asID: 141159
IP address blocks: 156.233.224.0/24 maxlen: 24
156.233.225.0/24 maxlen: 24
156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
156.233.236.0/24 maxlen: 24
156.233.237.0/24 maxlen: 24
156.233.238.0/24 maxlen: 24
156.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97904 (0x17e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 10:10:25 2025 GMT
Not After : Nov 10 10:10:25 2025 GMT
Subject: CN=68de4f98-9b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5f:4c:3a:23:21:d0:f8:a7:26:98:15:07:10:
2b:fa:8a:55:ce:5f:9b:f4:ed:f4:ed:00:c2:c3:c3:
28:bf:56:73:56:59:0f:83:84:2e:b8:2a:e4:ec:27:
f7:24:b0:d0:77:93:fb:20:59:7d:a4:cc:60:66:59:
68:7b:0b:69:8c:86:54:c9:4c:5f:7b:17:0e:8e:59:
9f:37:73:c7:26:bc:4c:b6:4e:3b:e2:7d:cd:30:07:
f3:55:70:fe:c5:aa:c7:5f:9c:bd:cf:21:2a:13:51:
5c:48:12:8e:4b:c0:9b:b4:27:e0:0b:e9:6d:35:5d:
fb:6f:62:55:e8:f9:89:85:c7:c2:fa:f7:be:e4:4b:
d0:6c:45:85:8c:47:03:ba:95:c5:f5:7e:16:fd:62:
32:3e:0c:2d:3a:33:25:bc:bb:a9:49:27:35:6f:9e:
6e:1b:a2:2a:c3:3a:e1:bb:bf:27:dd:9f:a8:cd:0c:
a6:8c:23:d2:09:0e:e6:a3:08:fc:a4:5a:25:58:83:
8c:98:f1:6d:9f:97:28:7a:64:f8:11:5c:61:a0:0d:
a6:04:75:10:a5:c6:19:65:5e:ea:08:b8:da:d4:ff:
4c:00:51:24:58:c0:df:b6:6a:16:08:c5:79:37:b3:
80:5a:eb:0f:9e:6e:4f:6f:2b:53:fb:69:dc:36:17:
a5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8D:55:B2:BE:AA:7E:31:FA:7F:BA:60:C6:8D:E0:2A:78:7F:45:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075EBCBA9F7811F092247FBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/23
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:30:7b:94:5b:d5:49:c8:df:5f:8a:86:c9:12:ec:7d:0f:20:
d6:66:1f:4d:95:c2:71:8f:74:bc:eb:f7:80:36:c8:fa:5b:ee:
60:e5:aa:4a:1b:24:88:1c:14:8f:03:ff:4d:c6:28:80:ca:d0:
3e:d5:bf:a8:42:79:23:1a:31:6c:03:cd:57:7a:bf:59:4a:cc:
81:4e:b5:ed:98:20:3a:a0:06:9d:b2:7f:39:ec:72:ee:3f:1c:
b9:31:21:ac:ff:64:80:b4:05:5e:fb:0c:18:60:bf:0e:b3:73:
eb:4f:05:73:98:02:50:8c:ff:d8:fa:8c:d4:84:46:70:d4:5e:
76:7e:b9:2c:df:2a:23:a6:8d:04:e5:e7:34:f8:2d:ab:b6:bb:
c3:b7:4e:ae:2d:50:ea:ef:69:a1:69:e5:76:56:98:1e:97:b9:
0f:40:c4:d5:26:af:1c:86:ce:90:4f:1a:5e:4a:60:68:3b:c1:
ba:df:0b:f9:93:fa:d1:4c:6e:05:ab:15:ef:fe:0a:da:d1:64:
16:4d:12:f6:70:11:58:41:92:48:c0:14:f5:4e:5e:8f:8e:53:
29:89:e7:b2:f1:37:31:2c:a2:38:db:15:28:40:7f:18:1d:64:
c7:63:d8:ef:c2:ca:13:43:84:4d:c2:e1:e5:e5:a0:7d:26:77:
47:dc:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:35 2025 by rpki-client