Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C5422BAB31C11F09D43EA80DAE4EC9C.roa
File: 1C5422BAB31C11F09D43EA80DAE4EC9C.roa (raw, json)
Hash identifier: ihTQjqPkSLGo7YEHhrAfc0Q/BFEvQblqOdg4dnI1VXs=
Subject key identifier: C3:9F:D5:B4:CD:87:40:D3:ED:38:F9:FC:5D:C5:CF:45:3E:90:7D:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C5422BAB31C11F09D43EA80DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 10:02:57 +0000
ROA not before: Mon 27 Oct 2025 10:02:52 +0000
ROA not after: Fri 28 Nov 2025 10:02:52 +0000
asID: 44559
IP address blocks: 156.246.169.0/24 maxlen: 24
156.246.170.0/24 maxlen: 24
156.246.171.0/24 maxlen: 24
156.246.172.0/24 maxlen: 24
156.246.173.0/24 maxlen: 24
156.246.174.0/24 maxlen: 24
156.246.175.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99017 (0x182c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:02:52 2025 GMT
Not After : Nov 28 10:02:52 2025 GMT
Subject: CN=68ff4351-64a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:b4:e7:77:75:9d:af:ad:34:c7:51:50:73:
f7:d3:6d:0d:f4:16:e2:6c:ee:20:3f:62:2c:54:eb:
fe:8a:69:ed:3b:73:da:73:05:79:50:2e:c7:22:dd:
75:56:40:36:b8:60:fc:07:4f:b3:b4:58:f1:3d:6c:
99:ce:67:dd:0a:13:78:a5:a5:6a:11:fd:86:fe:f5:
c6:3b:45:49:c5:48:4f:5f:df:9f:47:15:89:a6:26:
7d:65:08:e8:9b:6b:ea:bd:b0:9b:06:46:5d:c9:68:
32:33:37:06:54:40:b9:35:a8:96:0f:7d:4f:4d:de:
fc:bd:79:7b:1c:31:16:87:68:b0:90:23:2e:e4:c3:
39:c7:73:b2:d1:e4:3b:78:5d:04:5f:77:78:35:ac:
d8:e4:4f:73:b3:c3:b0:6b:69:67:4f:5c:c4:dc:2f:
44:64:af:85:d9:c6:89:52:ab:e9:8e:2d:e8:ea:d4:
28:23:9b:fc:59:c6:42:3e:96:01:8c:1c:06:2f:04:
5f:24:c4:b8:4f:a8:f7:2c:b6:85:14:27:e3:0d:98:
9f:ae:5f:b4:30:ec:51:5d:65:74:83:5c:6c:19:12:
5e:cc:8b:3c:4f:c3:c5:e3:19:dd:1e:57:00:db:ab:
73:64:09:34:7a:15:83:14:d8:46:7f:35:ea:b9:00:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9F:D5:B4:CD:87:40:D3:ED:38:F9:FC:5D:C5:CF:45:3E:90:7D:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C5422BAB31C11F09D43EA80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.169.0-156.246.178.255
Signature Algorithm: sha256WithRSAEncryption
3a:01:cc:eb:88:1b:62:34:9d:f3:23:ce:e5:ee:eb:99:f3:10:
43:e2:3c:11:0d:70:f0:f8:61:27:62:3b:53:72:7b:b8:02:da:
ed:09:c5:fc:57:ff:ba:57:ee:44:e2:d7:da:e1:1e:94:4c:2e:
19:6f:57:cc:76:88:ca:06:3d:72:71:76:89:92:b4:31:d0:c3:
14:d3:55:6d:61:d2:b7:ed:a5:42:ba:3d:4d:16:4c:86:d9:fb:
fa:4d:38:a9:d2:e6:92:30:f2:74:0b:30:9b:f3:78:9c:30:7f:
c9:c7:78:b1:48:fb:51:2c:1c:91:59:03:0a:36:7c:f5:2f:ba:
c5:04:b5:fb:00:dd:6d:0a:5c:33:9c:75:df:95:13:e2:d5:c4:
2a:e4:6e:96:4d:b8:ff:96:49:10:38:e9:3e:07:91:f7:cd:1d:
e9:4e:1a:6b:f4:d7:1c:e4:21:ac:f4:da:7c:d6:f5:41:00:86:
83:28:e8:e2:03:b0:06:13:8f:72:ca:9e:66:25:ad:81:aa:8a:
7d:0f:59:cf:1a:76:4f:b1:18:d5:f6:40:9b:e6:3f:15:5d:a5:
d5:f2:f6:1f:23:01:27:f2:36:a1:e9:ea:f2:08:c1:3f:b1:4c:
4e:d9:4e:1d:21:5f:60:c8:ac:75:b6:f4:df:da:d9:43:45:c8:
a7:fe:dc:5b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAYLJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI3MTAwMjUyWhcNMjUxMTI4MTAwMjUyWjAYMRYw
FAYDVQQDEw02OGZmNDM1MS02NGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAria053d1na+tNMdRUHP3020N9BbibO4gP2IsVOv+imntO3PacwV5UC7H
It11VkA2uGD8B0+ztFjxPWyZzmfdChN4paVqEf2G/vXGO0VJxUhPX9+fRxWJpiZ9
ZQjom2vqvbCbBkZdyWgyMzcGVEC5NaiWD31PTd78vXl7HDEWh2iwkCMu5MM5x3Oy
0eQ7eF0EX3d4NazY5E9zs8Owa2lnT1zE3C9EZK+F2caJUqvpji3o6tQoI5v8WcZC
PpYBjBwGLwRfJMS4T6j3LLaFFCfjDZifrl+0MOxRXWV0g1xsGRJezIs8T8PF4xnd
HlcA26tzZAk0ehWDFNhGfzXquQA7WwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMOf
1bTNh0DT7Tj5/F3Fz0U+kH3OMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQzU0MjJCQUIzMUMxMUYwOUQ0M0VBODBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9qkDBACc9rIwDQYJKoZI
hvcNAQELBQADggEBADoBzOuIG2I0nfMjzuXu65nzEEPiPBENcPD4YSdiO1Nye7gC
2u0JxfxX/7pX7kTi19rhHpRMLhlvV8x2iMoGPXJxdomStDHQwxTTVW1h0rftpUK6
PU0WTIbZ+/pNOKnS5pIw8nQLMJvzeJwwf8nHeLFI+1EsHJFZAwo2fPUvusUEtfsA
3W0KXDOcdd+VE+LVxCrkbpZNuP+WSRA46T4HkffNHelOGmv01xzkIaz02nzW9UEA
hoMo6OIDsAYTj3LKnmYlrYGqin0PWc8adk+xGNX2QJvmPxVdpdXy9h8jASfyNqHp
6vIIwT+xTE7ZTh0hX2DIrHW29N/a2UNFyKf+3Fs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:59 2025 by rpki-client