Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF8791AA29911F0B8192B98DAE4EC9C.roa
File: EFF8791AA29911F0B8192B98DAE4EC9C.roa (raw, json)
Hash identifier: pUofdFe9PSoZCi76oiajZdfsDy5s1BEN4pptb29p4yc=
Subject key identifier: A2:52:BE:27:E8:98:14:43:C2:40:25:19:B1:66:CB:55:4F:B9:3A:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF8791AA29911F0B8192B98DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 09:50:49 +0000
ROA not before: Mon 06 Oct 2025 09:50:40 +0000
ROA not after: Mon 24 Nov 2025 09:50:40 +0000
asID: 21859
IP address blocks: 156.233.48.0/24 maxlen: 24
156.238.162.0/24 maxlen: 24
156.239.134.0/24 maxlen: 24
156.252.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98054 (0x17f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 09:50:40 2025 GMT
Not After : Nov 24 09:50:40 2025 GMT
Subject: CN=68e390f9-e850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:9d:0f:50:c3:63:b7:f3:d6:e6:16:29:33:
ec:d2:ab:8e:a5:7a:54:6e:57:c0:3c:a8:ad:97:59:
ce:ff:99:eb:e9:ca:c7:3f:12:38:de:32:6c:4e:05:
18:cf:0a:a3:df:20:7c:cc:1e:4a:db:d8:35:2a:c7:
81:74:e0:e8:18:4d:4c:65:c0:04:6e:ca:eb:ee:e6:
1a:d5:c2:94:67:2a:9a:d8:3a:57:5a:1e:df:b9:f6:
67:8d:57:8f:f8:e8:12:13:41:4c:5a:ed:4a:46:70:
f4:2b:a9:09:1e:65:d7:05:36:9e:d7:ef:da:a4:6a:
40:27:5d:fe:79:0b:21:1c:68:d7:5b:9d:5f:95:67:
d4:8c:7d:1a:9e:0a:04:93:0b:d0:09:96:90:a4:4f:
08:f8:58:d6:92:65:8f:52:1f:82:a1:6f:fa:ae:b0:
b5:1c:df:07:8f:09:8f:5d:6f:2e:9b:57:ad:25:bb:
e3:ba:59:40:a6:41:49:f6:d0:94:50:e0:a9:1b:cd:
30:25:27:10:f9:04:85:43:b9:c8:2a:5c:c4:55:8b:
b5:4e:a8:b0:27:74:c2:ae:ba:e5:91:7c:4f:3f:7e:
3e:08:0c:d0:ec:8c:9f:82:c3:e6:57:39:5f:2f:db:
14:21:17:da:de:36:2a:ad:ff:0f:47:59:53:e3:da:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:BE:27:E8:98:14:43:C2:40:25:19:B1:66:CB:55:4F:B9:3A:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF8791AA29911F0B8192B98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.48.0/24
156.238.162.0/24
156.239.134.0/24
156.252.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:3f:6e:59:81:b9:e2:9c:9b:3a:2e:85:04:00:47:ce:e6:6c:
df:cb:91:84:ac:39:88:0f:42:cb:79:c4:46:f2:0d:cd:f3:6c:
d4:ec:c2:d0:c5:1d:f7:ea:ed:fe:a7:ba:d6:0d:e1:ca:62:cb:
24:9a:91:60:d4:26:09:fb:91:93:5e:87:8f:0d:0a:c1:a9:3f:
02:56:74:a5:5c:47:14:0c:fe:95:9b:f2:51:f0:a4:c1:d1:9c:
ee:f5:a6:f2:6e:46:f1:75:8b:f8:ec:8d:50:34:1d:b5:cd:fb:
3c:b3:62:3a:ad:f6:6f:e9:ee:07:06:53:29:6f:1e:da:b4:ec:
e4:14:5c:ae:a8:f5:b3:af:02:26:6b:4b:ec:c8:c3:3e:c4:50:
e8:3a:48:92:e5:7f:1d:c5:51:19:99:a5:c7:d0:4f:b4:60:00:
12:70:b9:ef:72:c6:c7:53:28:67:15:06:8e:0c:f7:9a:f0:76:
9b:3b:36:59:2b:b2:2b:58:fb:42:46:1e:21:3d:8d:b5:fd:1a:
12:d9:b8:8c:7e:7b:2c:17:00:d5:6f:b6:17:e1:b2:10:6e:3e:
48:61:ff:a1:79:63:d6:68:9f:40:12:b6:2d:ce:8b:60:26:00:
48:c8:96:ed:cc:23:3b:ee:f3:a4:38:a6:4f:94:21:e3:2f:5a:
f5:91:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:27 2025 by rpki-client