Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F69C2E442C911F0BD5E5D97DAE4EC9C.roa
File: 0F69C2E442C911F0BD5E5D97DAE4EC9C.roa (raw, json)
Hash identifier: GEMsguGEvIcluel/BCnXvayOgjmDfHPmpZfjM7yYlHg=
Subject key identifier: B6:C8:E1:EA:AE:FC:BF:29:E1:60:20:6D:8F:E9:0A:92:7E:17:19:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F69C2E442C911F0BD5E5D97DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 11:26:17 +0000
ROA not before: Fri 06 Jun 2025 11:26:12 +0000
ROA not after: Sun 31 Aug 2025 11:26:12 +0000
asID: 399077
IP address blocks: 156.251.0.0/24 maxlen: 24
156.251.5.0/24 maxlen: 24
156.251.10.0/24 maxlen: 24
156.251.27.0/24 maxlen: 24
156.251.47.0/24 maxlen: 24
156.251.48.0/23 maxlen: 24
156.251.50.0/24 maxlen: 24
156.251.51.0/24 maxlen: 24
156.251.52.0/24 maxlen: 24
156.251.53.0/24 maxlen: 24
156.251.54.0/24 maxlen: 24
156.251.55.0/24 maxlen: 24
156.251.56.0/24 maxlen: 24
156.251.57.0/24 maxlen: 24
156.251.58.0/24 maxlen: 24
156.251.59.0/24 maxlen: 24
156.251.60.0/24 maxlen: 24
156.251.61.0/24 maxlen: 24
156.251.62.0/24 maxlen: 24
156.251.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88566 (0x159f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 11:26:12 2025 GMT
Not After : Aug 31 11:26:12 2025 GMT
Subject: CN=6842d059-4045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:9a:27:2c:d2:80:34:14:f8:37:97:fc:1c:
00:92:0e:92:6e:0f:99:d4:18:11:f7:78:97:6f:82:
17:7a:ae:d5:1b:b0:f1:45:b3:67:01:55:2b:37:77:
33:5c:64:83:1e:35:00:56:89:93:ff:c0:af:e3:87:
42:92:e3:b7:b4:f4:af:cc:62:b6:fe:bd:03:1a:b7:
e8:ae:2f:54:20:38:db:46:ea:5f:27:25:3e:00:40:
3b:0d:63:b0:dd:31:ee:99:83:4a:df:8f:a7:b7:ed:
f2:96:f2:20:5c:96:63:d8:a8:2e:2d:1c:e9:f7:e4:
99:62:7d:af:0f:d4:b9:b2:7a:7b:69:0d:05:30:72:
f1:d1:2f:03:87:2a:50:48:c5:78:90:f8:e7:71:0f:
5e:40:e6:f1:7f:fa:0b:83:56:de:64:e5:ed:07:65:
0e:a2:17:02:ae:a7:89:72:3a:94:8c:0e:d8:99:cb:
46:de:6e:31:cd:02:9d:06:21:6e:d0:d1:c2:c1:2d:
51:25:7d:fa:0a:2b:4e:01:7b:1c:70:38:74:cb:db:
a1:81:75:22:7f:ed:88:a7:2e:7d:d1:68:51:db:4e:
fd:36:6f:9f:04:33:95:5b:4e:32:c3:e7:68:5c:51:
86:bf:0e:b0:c4:e0:bf:a6:45:e2:c2:2c:2b:14:05:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:E1:EA:AE:FC:BF:29:E1:60:20:6D:8F:E9:0A:92:7E:17:19:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F69C2E442C911F0BD5E5D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.0.0/24
156.251.5.0/24
156.251.10.0/24
156.251.27.0/24
156.251.47.0-156.251.63.255
Signature Algorithm: sha256WithRSAEncryption
68:23:7e:fe:43:fd:36:65:95:8e:e5:55:ee:e2:2c:6d:4c:cf:
35:33:03:fc:a8:b5:b8:d6:c9:aa:21:9b:ab:1e:20:c0:16:af:
f0:8d:6e:93:80:2f:44:f8:f5:e5:bc:8f:65:35:55:67:f4:9c:
cc:91:31:12:e5:bb:5b:50:e9:fd:9f:9d:45:33:11:ee:1e:6d:
13:40:d0:d0:c5:ce:7f:bf:94:3f:cd:95:6f:36:94:c4:72:45:
ad:83:20:04:78:b5:86:5a:f7:af:6b:39:40:f6:03:19:65:6f:
2a:c9:e0:79:4d:18:36:82:53:1b:5a:8b:2c:95:da:dd:63:a5:
9c:a8:6b:e2:1c:30:16:c4:63:0c:de:b3:33:f3:b5:4a:ba:5e:
7b:15:79:51:0d:2a:34:a9:ca:b0:d7:7d:e2:e5:97:e5:6b:57:
d3:d4:ac:bd:11:71:a2:f0:23:b6:b5:51:5a:83:c2:10:25:4c:
e1:84:9f:b8:f9:75:9b:97:83:89:fd:b4:0d:8e:92:50:e3:30:
59:31:d6:37:5b:aa:40:2d:11:98:c3:97:ab:4c:93:58:92:7c:
cf:6e:ae:64:07:46:05:cd:7e:65:91:e3:7f:29:5a:7f:4e:30:
c5:8f:f3:b8:1d:b1:a9:b9:e4:cb:36:7a:71:f0:93:3b:f5:b9:
88:83:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:05 2025 by rpki-client