Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F064B7EB4C211F098742BF4DAE4EC9C.roa
File: 3F064B7EB4C211F098742BF4DAE4EC9C.roa (raw, json)
Hash identifier: chOSmHG7SDpWbNplKm5P04Ziqler/g5RNev2V8Gw+Yo=
Subject key identifier: A1:03:32:DE:D4:3A:12:CC:88:7A:66:6B:4C:AF:E5:2A:8D:34:90:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F064B7EB4C211F098742BF4DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 12:24:43 +0000
ROA not before: Wed 29 Oct 2025 12:24:30 +0000
ROA not after: Fri 05 Dec 2025 12:24:30 +0000
asID: 151407
IP address blocks: 156.248.8.0/21 maxlen: 24
156.248.8.0/22 maxlen: 24
156.248.8.0/23 maxlen: 24
156.248.8.0/24 maxlen: 24
156.248.9.0/24 maxlen: 24
156.248.10.0/23 maxlen: 24
156.248.10.0/24 maxlen: 24
156.248.12.0/22 maxlen: 24
156.248.12.0/23 maxlen: 24
156.248.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99260 (0x183bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 12:24:30 2025 GMT
Not After : Dec 5 12:24:30 2025 GMT
Subject: CN=6902078b-98c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:46:31:ca:da:21:c1:19:7a:39:af:a1:48:
57:26:f6:87:5a:55:3b:ad:ff:c7:08:a2:8a:b2:46:
be:af:2b:69:d1:9b:d0:74:25:72:81:32:37:45:6f:
a7:28:b6:79:59:84:78:e9:22:9a:66:f1:94:6f:66:
1a:f7:52:79:5a:17:79:c0:21:97:81:85:fa:6e:10:
b8:48:96:26:b5:4f:52:33:66:7d:59:6e:6f:c6:35:
4b:62:86:c8:b9:9c:dd:fe:eb:8f:5b:a6:56:a1:e3:
df:8e:42:dc:dc:03:b4:80:19:99:dc:57:dc:42:b7:
24:e6:5a:ab:d3:ec:80:52:f9:f9:a0:20:38:10:a6:
1d:15:c6:ac:7b:fb:ec:62:47:85:b2:5f:03:39:22:
c5:f5:ee:15:9b:4c:32:20:bc:d0:6b:35:c8:fd:97:
c4:1c:cc:9f:e7:74:f6:45:bb:72:87:33:01:4f:5f:
be:30:5f:7a:9f:ae:4d:46:d6:d1:ae:aa:95:08:61:
42:ab:b2:41:ae:b3:40:26:21:d9:2f:c2:7d:3e:39:
28:6f:86:48:4c:3c:47:4a:2a:b7:3e:e2:68:f1:ef:
87:22:35:1a:40:a9:f9:c7:a3:50:de:d9:6f:16:c4:
37:c9:2e:71:7f:74:43:4e:49:7c:7d:c0:52:54:67:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:32:DE:D4:3A:12:CC:88:7A:66:6B:4C:AF:E5:2A:8D:34:90:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F064B7EB4C211F098742BF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.8.0/21
Signature Algorithm: sha256WithRSAEncryption
60:31:70:11:41:e0:de:fa:2f:81:60:96:3e:23:a0:29:2f:86:
fe:96:08:bd:fc:ae:d3:c1:72:cc:2e:7b:4f:2b:96:ad:7d:56:
45:52:66:36:56:68:3c:95:91:e1:2c:20:1d:77:52:23:87:65:
24:29:f1:af:e6:65:fe:19:ce:e6:d0:54:73:f4:63:02:ec:9e:
7c:a5:35:7e:5b:14:e8:58:f0:8b:cb:1d:14:a9:0c:df:fb:73:
ae:8d:a1:e9:1a:6e:62:12:b0:5f:15:59:37:dd:bd:c8:4c:fc:
e7:7a:ce:c3:4f:9a:63:08:3f:93:1b:ba:73:fe:6c:a8:e1:4b:
eb:0e:46:bd:12:d6:db:6f:d4:17:61:f7:3e:e1:2b:82:29:11:
6f:fb:58:b9:46:28:6e:8a:ee:3c:ba:70:35:d9:3f:1b:32:40:
f0:c0:eb:7a:18:ce:db:5e:2b:b0:53:ce:5a:d3:b2:dc:36:7e:
e4:3d:49:42:8d:03:1d:07:ac:c9:46:e4:11:d4:55:46:7f:0e:
ee:9d:c6:c7:f6:1d:3e:8b:29:e5:38:1b:78:45:5f:2a:50:cb:
d5:7a:c7:71:60:76:fe:7b:5b:80:a1:ac:75:f3:24:fe:ca:92:
72:91:ec:3d:a3:de:90:59:13:82:cc:31:0a:83:c0:2c:bd:93:
70:10:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:14 2025 by rpki-client