Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B011EBAB00A11F08E7E3EDADAE4EC9C.roa
File: 0B011EBAB00A11F08E7E3EDADAE4EC9C.roa (raw, json)
Hash identifier: xjIcwzRnbrW3NiAf9a02GBgRAruRl6oIr9I/lUQlbT4=
Subject key identifier: 24:F8:8F:57:41:30:72:C5:21:72:3C:5A:25:BC:FF:9C:25:36:66:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018257
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B011EBAB00A11F08E7E3EDADAE4EC9C.roa
Signing time: Thu 23 Oct 2025 12:16:03 +0000
ROA not before: Thu 23 Oct 2025 12:15:55 +0000
ROA not after: Fri 28 Nov 2025 12:15:55 +0000
asID: 44559
IP address blocks: 156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.160.0/24 maxlen: 24
156.246.166.0/24 maxlen: 24
156.246.167.0/24 maxlen: 24
156.246.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98903 (0x18257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 12:15:55 2025 GMT
Not After : Nov 28 12:15:55 2025 GMT
Subject: CN=68fa1c83-da9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:29:20:78:c1:26:e8:a8:81:89:5b:02:e9:
a6:01:8b:ae:01:bb:11:17:24:a2:0b:ae:e5:59:ac:
2e:ca:94:3e:29:7e:9f:b3:fe:63:d9:13:ff:54:2e:
ff:09:34:97:c5:2c:ad:5a:2f:be:83:66:3c:7d:27:
1e:05:b9:a3:8b:6c:a7:18:c6:05:0a:98:68:dc:85:
89:54:7d:c2:4a:52:1a:a9:a6:f8:8a:35:dc:c0:52:
d7:61:1e:21:9d:37:3e:f6:d6:45:f4:51:69:59:ed:
e5:e2:a6:bd:4d:75:7a:89:b4:82:e6:67:00:35:16:
2b:4c:c0:5b:b6:d8:82:92:da:f6:5e:69:4b:b2:74:
3a:76:ba:8d:93:0b:01:d2:ca:77:61:9b:54:5a:fb:
59:a2:f5:7d:0a:11:e7:c0:3f:8c:5c:43:ee:7a:4a:
e1:28:30:42:7c:7d:ad:79:ce:65:aa:40:bd:0a:bb:
9d:f8:af:ab:5d:51:dd:0d:dd:ad:9b:d0:f9:28:9f:
5f:4c:ad:ce:cc:dd:81:9c:e5:cc:62:3c:8d:8f:75:
15:ee:b0:b7:52:03:f7:9a:18:af:01:7d:d1:c7:d6:
8b:ac:02:ff:4d:1f:32:97:4f:7f:3b:37:01:31:8d:
51:2f:8d:05:4a:96:73:c5:24:91:6e:d1:4d:91:4c:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:8F:57:41:30:72:C5:21:72:3C:5A:25:BC:FF:9C:25:36:66:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B011EBAB00A11F08E7E3EDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.154.0-156.246.160.255
156.246.166.0-156.246.168.255
Signature Algorithm: sha256WithRSAEncryption
b6:38:7d:65:b9:a0:5a:e2:df:02:17:26:43:98:12:ea:05:97:
a5:4b:8f:d6:14:cd:d1:1c:44:96:cb:d5:10:91:ab:da:73:8e:
13:5e:46:1a:7a:5f:09:08:27:9f:3d:e2:9d:4d:c3:19:86:c9:
3a:4c:e3:48:ca:b1:56:0e:0a:f4:15:2a:3f:af:5b:e1:76:93:
1f:cd:ed:52:1c:29:da:12:8f:f2:5e:16:cc:d3:d8:5e:25:70:
52:c9:2b:f2:e1:40:26:d4:2c:30:e8:11:2b:ed:2c:c0:10:35:
1b:75:f0:91:f1:89:33:58:67:a4:6b:ce:57:9d:c1:06:02:44:
a4:1e:a0:ba:ce:58:2f:01:87:32:b0:bb:0d:43:cb:0a:a3:b7:
bc:82:ce:4c:f6:d4:9b:b6:5f:21:2e:df:d3:f5:f8:46:ec:93:
29:55:a1:00:fb:25:5f:61:f8:fb:f3:16:c0:d1:4d:39:2b:63:
53:aa:8a:d0:70:45:ca:4d:8a:15:fc:f1:c0:d5:81:32:8f:23:
a6:29:2f:b3:96:43:89:94:c5:8f:7e:ac:a3:6d:8e:12:5d:6f:
47:35:1a:eb:4f:ad:bf:60:f9:bb:f5:73:eb:24:a6:98:38:f8:
22:6f:18:3d:af:69:77:2c:59:f4:44:85:66:57:e0:38:de:05:
25:0d:c4:b8
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAYJXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDIzMTIxNTU1WhcNMjUxMTI4MTIxNTU1WjAYMRYw
FAYDVQQDEw02OGZhMWM4My1kYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvkgpIHjBJuiogYlbAummAYuuAbsRFySiC67lWawuypQ+KX6fs/5j2RP/
VC7/CTSXxSytWi++g2Y8fSceBbmji2ynGMYFCpho3IWJVH3CSlIaqab4ijXcwFLX
YR4hnTc+9tZF9FFpWe3l4qa9TXV6ibSC5mcANRYrTMBbttiCktr2XmlLsnQ6drqN
kwsB0sp3YZtUWvtZovV9ChHnwD+MXEPuekrhKDBCfH2tec5lqkC9Crud+K+rXVHd
Dd2tm9D5KJ9fTK3OzN2BnOXMYjyNj3UV7rC3UgP3mhivAX3Rx9aLrAL/TR8yl09/
OzcBMY1RL40FSpZzxSSRbtFNkUy40wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFCT4
j1dBMHLFIXI8WiW8/5wlNmYwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQjAxMUVCQUIwMEExMUYwOEU3RTNFREFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGc9poDBACc9qAwDAMEAZz2
pgMEAJz2qDANBgkqhkiG9w0BAQsFAAOCAQEAtjh9ZbmgWuLfAhcmQ5gS6gWXpUuP
1hTN0RxElsvVEJGr2nOOE15GGnpfCQgnnz3inU3DGYbJOkzjSMqxVg4K9BUqP69b
4XaTH83tUhwp2hKP8l4WzNPYXiVwUskr8uFAJtQsMOgRK+0swBA1G3XwkfGJM1hn
pGvOV53BBgJEpB6gus5YLwGHMrC7DUPLCqO3vILOTPbUm7ZfIS7f0/X4RuyTKVWh
APslX2H4+/MWwNFNOStjU6qK0HBFyk2KFfzxwNWBMo8jpikvs5ZDiZTFj36so22O
El1vRzUa60+tv2D5u/Vz6ySmmDj4Im8YPa9pdyxZ9ESFZlfgON4FJQ3EuA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:49 2025 by rpki-client