Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01D868CA5BA11F0BA41BDDCDAE4EC9C.roa
File: F01D868CA5BA11F0BA41BDDCDAE4EC9C.roa (raw, json)
Hash identifier: X2pbv5VDqgNW9bcI+G0JsJ8VShMMiDJVNwm+tXC0mZI=
Subject key identifier: 58:20:EB:C9:FC:2F:AB:FC:FA:BE:7C:FC:F2:64:99:38:D9:86:D5:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01D868CA5BA11F0BA41BDDCDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 09:24:36 +0000
ROA not before: Fri 10 Oct 2025 09:24:32 +0000
ROA not after: Mon 17 Nov 2025 09:24:32 +0000
asID: 22773
IP address blocks: 156.233.60.0/23 maxlen: 24
156.233.63.0/24 maxlen: 24
156.233.126.0/24 maxlen: 24
156.238.188.0/24 maxlen: 24
156.238.190.0/23 maxlen: 24
156.239.57.0/24 maxlen: 24
156.239.58.0/23 maxlen: 24
156.239.61.0/24 maxlen: 24
156.239.62.0/23 maxlen: 24
156.249.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98286 (0x17fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 09:24:32 2025 GMT
Not After : Nov 17 09:24:32 2025 GMT
Subject: CN=68e8d0d4-df76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:b4:0c:45:6b:11:5b:f4:a2:9f:85:6a:ba:
36:8b:eb:14:49:63:bb:dc:76:89:ef:53:59:49:e4:
78:cd:f3:57:47:72:68:9a:7b:db:da:53:4e:f4:34:
ab:a2:6e:05:dc:0c:1c:b5:c4:93:bd:6f:56:5b:fb:
2e:39:87:f0:ba:06:9c:0e:27:31:b9:4a:f2:a6:97:
ce:cd:69:e3:fa:9a:8f:fe:3c:80:f5:0b:ec:3b:a7:
48:42:84:8e:6b:79:e4:d7:59:4c:05:8d:5b:c7:f0:
60:f5:59:9d:de:de:3c:c3:72:a0:79:e1:3e:32:32:
15:7c:e2:19:b5:15:e3:3b:82:07:30:d7:f8:42:12:
71:9e:42:a4:50:92:4c:c5:10:9e:b5:32:9f:47:d1:
f3:af:06:16:91:0f:da:17:83:4e:fb:2b:15:fa:99:
e9:19:bd:25:79:2c:64:06:1c:42:0e:3d:7b:5e:9e:
41:27:4f:d3:4e:72:59:18:ce:ad:65:78:c9:b8:36:
02:0e:b6:99:57:bc:a6:1a:62:aa:57:05:4b:36:7d:
70:89:23:b2:13:7d:61:8b:99:bc:d9:9d:52:8c:09:
28:62:d2:91:3f:cb:28:ec:93:2e:a1:14:6c:0d:55:
59:ca:2d:7d:3d:d8:ef:73:3e:b9:9e:31:40:7c:60:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:EB:C9:FC:2F:AB:FC:FA:BE:7C:FC:F2:64:99:38:D9:86:D5:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01D868CA5BA11F0BA41BDDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.60.0/23
156.233.63.0/24
156.233.126.0/24
156.238.188.0/24
156.238.190.0/23
156.239.57.0-156.239.59.255
156.239.61.0-156.239.63.255
156.249.48.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:cc:93:9f:9c:53:a0:14:5f:83:ee:d2:bb:3b:be:96:65:db:
64:cf:4a:3a:46:4f:7d:ce:32:85:5b:ee:46:96:75:85:05:ef:
97:71:08:73:2d:a9:46:34:b7:f4:66:be:74:40:ba:01:8c:58:
ba:04:02:2b:57:82:43:a8:c1:b3:90:b0:99:c8:5f:e8:51:32:
e4:26:7a:d7:74:72:37:61:9d:0c:b8:01:a1:f7:1b:ad:8b:c8:
cd:72:d0:d3:fd:3e:4d:d0:4d:1b:56:37:b3:e7:fd:ca:ae:e3:
84:41:d9:e4:67:d1:01:3d:04:9f:19:d5:74:c1:30:d3:40:48:
9d:c7:14:f4:8d:22:65:c6:98:45:cd:ec:2e:fb:bb:4a:b9:81:
ad:b6:f8:e2:b4:8d:70:a0:30:62:2e:e6:e5:82:da:cc:d5:c3:
56:c6:1f:96:c1:ab:af:dc:7d:14:0a:79:5c:4c:fb:53:57:6b:
91:6a:c7:90:09:6c:78:5a:7d:f9:42:ff:76:cc:46:c5:42:53:
86:de:02:d4:fa:5a:cc:9b:12:b5:ce:67:38:94:49:42:8e:c0:
a1:9b:cf:d2:fb:b6:96:ff:81:99:ef:d3:54:51:2f:a7:1b:b6:
1f:6d:a7:04:ed:56:4a:bd:c6:7e:5f:a1:4b:6a:3a:ca:46:24:
d5:26:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:20 2025 by rpki-client