Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33B077EB32311F099B8CBB0DAE4EC9C.roa
File: F33B077EB32311F099B8CBB0DAE4EC9C.roa (raw, json)
Hash identifier: BcX3AXrzmi3bdHQrcRJ2f529/ijsLhuGsuin48megMs=
Subject key identifier: A9:63:7E:DB:E1:31:A5:AF:DA:7D:9D:BC:9C:8A:EA:F2:C2:85:CB:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33B077EB32311F099B8CBB0DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 10:59:04 +0000
ROA not before: Mon 27 Oct 2025 10:58:55 +0000
ROA not after: Mon 01 Dec 2025 10:58:55 +0000
asID: 44559
IP address blocks: 156.239.140.0/24 maxlen: 24
156.239.142.0/24 maxlen: 24
156.239.143.0/24 maxlen: 24
156.239.154.0/24 maxlen: 24
156.239.155.0/24 maxlen: 24
156.243.32.0/24 maxlen: 24
156.243.33.0/24 maxlen: 24
156.243.80.0/24 maxlen: 24
156.243.132.0/24 maxlen: 24
156.243.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99033 (0x182d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:58:55 2025 GMT
Not After : Dec 1 10:58:55 2025 GMT
Subject: CN=68ff5078-14b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:52:10:6f:57:c0:bf:7e:14:14:44:4c:92:
7b:b8:8e:e6:22:1b:45:8d:09:77:92:b3:87:cb:58:
75:74:da:fb:00:f9:d1:61:75:89:4e:b7:4a:f6:06:
c9:50:6b:2c:86:2e:6f:4c:98:06:e6:90:c3:88:81:
2d:47:14:70:e3:9c:4f:e0:5d:64:63:e4:0c:f4:c2:
3a:f5:e9:26:78:97:6f:74:be:7b:8d:6c:96:b1:9b:
8c:4e:c8:7b:e8:36:f1:3c:6c:69:2e:43:6e:1f:31:
91:79:ac:99:0d:60:4b:3e:44:a0:da:99:c5:c0:a6:
30:63:ba:87:7b:50:9f:95:ac:7e:2a:04:fc:25:68:
61:12:ec:f0:f6:c7:0c:b5:a4:11:d8:73:42:53:b1:
14:76:15:54:89:17:3c:26:22:29:8c:c5:18:df:cb:
a6:ba:dd:3e:c7:22:03:3a:3e:55:65:06:e2:e0:21:
1d:fb:94:4f:e2:92:bd:bd:61:06:04:cb:b3:e7:b3:
2a:05:77:f6:0d:c0:6c:a8:d8:87:1d:b4:8b:19:37:
9a:8d:23:c3:47:3a:28:05:82:1a:bc:71:5e:40:50:
31:02:7b:a1:a4:9f:96:4e:c0:0c:10:e4:a7:65:b3:
73:d6:8c:bb:d1:11:71:06:b4:ed:f4:17:9a:50:99:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:63:7E:DB:E1:31:A5:AF:DA:7D:9D:BC:9C:8A:EA:F2:C2:85:CB:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33B077EB32311F099B8CBB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.140.0/24
156.239.142.0/23
156.239.154.0/23
156.243.32.0/23
156.243.80.0/24
156.243.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:d5:f1:04:fd:56:98:66:66:ce:0a:99:06:79:56:b2:ca:47:
05:37:77:25:ba:56:a2:05:80:99:00:d2:03:d6:76:59:e7:2d:
c8:fa:ec:77:4f:3b:55:71:95:5c:c7:07:1a:81:f4:c2:41:35:
46:31:8e:26:15:cb:b4:df:b0:cf:dc:cc:92:bc:f3:85:4d:f7:
e1:87:4c:30:ac:c1:76:1c:ba:9e:48:be:bb:ee:2d:66:a2:13:
64:b3:ed:6f:88:05:36:1b:99:4d:9e:ed:da:c6:b5:4a:90:54:
46:6c:d6:84:39:43:0e:40:2c:c9:78:a2:54:c1:7c:22:de:cf:
47:63:e1:cd:7c:83:70:10:b8:36:0e:a4:21:7f:ec:ec:1a:13:
93:08:f6:a0:92:7c:b3:3c:fc:cf:48:23:c5:16:d7:dd:e2:a2:
5d:54:fa:fa:f7:9c:35:bb:d8:20:7e:0f:a3:dd:00:10:d1:a9:
82:fd:3b:dc:e9:16:fc:90:78:a9:62:5c:87:96:d7:91:f5:29:
55:1b:11:f7:ae:82:4b:d2:c3:92:18:28:84:5c:1b:52:b5:c9:
c4:0c:da:97:2b:eb:32:a2:f8:76:ef:fc:19:a7:a1:01:0c:1b:
5e:3b:25:ed:19:2a:27:30:4a:be:63:91:ad:bf:6b:a1:3c:68:
d1:8e:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:50:28 2025 by rpki-client