Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E93DA200B31D11F08795CB8DDAE4EC9C.roa
File: E93DA200B31D11F08795CB8DDAE4EC9C.roa (raw, json)
Hash identifier: m59Wi50cUOdh8PgK1y7VAJ6giKRfj37PRJ8Xtfb+qxk=
Subject key identifier: DB:90:0D:53:AB:C4:3A:BE:8C:A1:62:1C:D5:CD:66:06:4B:D3:A8:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E93DA200B31D11F08795CB8DDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 10:15:50 +0000
ROA not before: Mon 27 Oct 2025 10:15:45 +0000
ROA not after: Mon 01 Dec 2025 10:15:45 +0000
asID: 44559
IP address blocks: 156.233.52.0/24 maxlen: 24
156.233.53.0/24 maxlen: 24
156.233.55.0/24 maxlen: 24
156.233.57.0/24 maxlen: 24
156.233.59.0/24 maxlen: 24
156.233.62.0/24 maxlen: 24
156.243.191.0/24 maxlen: 24
156.243.216.0/24 maxlen: 24
156.243.217.0/24 maxlen: 24
156.243.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99021 (0x182cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:15:45 2025 GMT
Not After : Dec 1 10:15:45 2025 GMT
Subject: CN=68ff4656-d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:16:3e:81:80:f7:20:be:52:b5:be:f0:b8:
6c:3d:3f:a9:6b:fb:5d:9f:8b:81:ae:bb:50:ab:a3:
9c:19:7d:da:5f:52:81:8f:aa:01:9f:99:39:25:04:
ae:bb:13:e0:23:f2:ed:80:09:05:3e:48:6c:6a:1a:
c6:35:6e:db:1f:1d:e1:81:73:e9:c0:a2:d7:d9:2e:
38:19:39:52:68:60:6f:7d:13:3c:8e:5b:60:7d:93:
c3:14:49:ec:9d:bb:3a:24:96:ed:6f:1b:82:93:fa:
1b:61:ad:f5:37:f3:db:1a:1d:17:30:52:2b:46:eb:
8a:27:2d:bf:ca:d9:98:2c:f3:09:af:d2:68:e9:0e:
92:57:9f:b5:85:a4:e9:5e:0f:71:53:4e:a1:64:a3:
51:87:08:96:c4:2a:47:c4:cc:a9:91:35:32:77:7e:
1c:5a:84:55:74:8a:c8:28:58:86:9d:5f:28:b1:a6:
74:c4:a8:57:71:de:70:32:8e:dd:96:30:84:d2:f2:
59:c7:f8:15:61:c3:ef:85:91:f3:b7:49:39:bf:21:
7c:a4:8f:1e:2f:8e:16:53:89:c6:88:ff:65:e4:e7:
90:76:04:ce:d7:dd:58:21:85:8b:51:66:f2:87:8b:
ab:e7:17:00:9e:7e:2f:85:ee:c9:6a:f9:be:08:6c:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:90:0D:53:AB:C4:3A:BE:8C:A1:62:1C:D5:CD:66:06:4B:D3:A8:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E93DA200B31D11F08795CB8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.52.0/23
156.233.55.0/24
156.233.57.0/24
156.233.59.0/24
156.233.62.0/24
156.243.191.0/24
156.243.216.0/23
156.243.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:be:45:13:42:d1:0f:1b:59:f5:46:3e:cd:58:74:af:10:4b:
04:10:18:5e:3d:9a:e7:44:1d:b4:5d:32:4e:e1:cf:07:99:76:
e5:21:37:52:be:ea:48:74:e2:5d:5a:b8:46:f5:cc:b8:2d:5f:
ae:e9:ec:fd:b7:4b:77:d5:1b:0a:5e:32:38:cc:04:8b:ff:e4:
d3:08:c7:90:f8:86:45:b8:9b:4e:e1:55:ce:76:f3:42:bc:8e:
3d:0a:a0:6f:68:0f:be:e3:09:f4:2f:8f:95:55:5d:7b:65:8e:
17:14:d8:32:c0:52:5d:c4:a4:bd:7b:4b:e1:aa:55:9a:7b:dc:
e7:c0:1f:49:99:44:1d:83:03:89:0e:67:ba:9d:e5:61:3f:ef:
ed:d8:49:6f:c6:3b:db:87:99:13:b4:ab:3c:ed:b1:cb:be:25:
c7:01:4f:8a:aa:d6:ab:c4:68:52:34:8f:b3:d3:6a:9d:d0:cd:
5e:a0:e6:97:6b:79:17:6c:46:56:e6:51:c4:93:11:bf:e2:9a:
1b:18:d1:93:6c:11:8d:e4:4d:42:dc:23:7f:b1:ba:ff:de:e3:
34:c6:aa:4b:4a:73:01:2a:ac:bc:ae:e7:7c:83:4f:c1:ce:64:
c0:d2:8f:f9:53:41:f1:e4:09:9e:c4:b2:2f:15:6d:e9:75:24:
6f:64:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:50:23 2025 by rpki-client