Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41064398B00811F0BAB63FCDDAE4EC9C.roa
File: 41064398B00811F0BAB63FCDDAE4EC9C.roa (raw, json)
Hash identifier: XlZml1f3YhCEg7KL27t8eH20e+8OI1+n1mzSTR3LF5s=
Subject key identifier: C4:55:AD:80:F7:BA:82:46:DB:CD:8B:89:4D:ED:00:33:28:7A:A7:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018253
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41064398B00811F0BAB63FCDDAE4EC9C.roa
Signing time: Thu 23 Oct 2025 12:03:15 +0000
ROA not before: Thu 23 Oct 2025 12:03:10 +0000
ROA not after: Fri 28 Nov 2025 12:03:10 +0000
asID: 44559
IP address blocks: 156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.190.0/24 maxlen: 24
156.246.191.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.193.0/24 maxlen: 24
156.246.194.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.196.0/24 maxlen: 24
156.246.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98899 (0x18253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 12:03:10 2025 GMT
Not After : Nov 28 12:03:10 2025 GMT
Subject: CN=68fa1983-2c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:b6:82:c4:3c:27:8d:bc:6c:b8:c0:9d:ec:
ff:56:91:91:48:96:0d:c9:ee:f1:3c:2a:77:f2:92:
7e:96:eb:cc:f9:03:e8:84:c8:9a:fe:a7:83:d0:a4:
7e:1c:ce:a4:ea:1d:d8:4d:1d:ff:9c:d9:63:2b:08:
2d:ad:a6:b6:e2:8a:b8:e6:80:03:86:f6:25:20:cc:
89:18:48:cd:83:2b:c1:bf:43:03:40:bd:33:cf:e0:
4b:65:71:34:ea:b2:35:01:b7:99:e7:d9:db:fd:16:
5d:9d:04:02:97:66:e3:7f:99:99:d1:fa:ba:02:95:
2a:b6:a6:2a:27:ca:1c:e9:a1:ad:2c:62:da:eb:70:
c5:bf:b5:d8:97:43:93:dd:60:a8:ff:f3:7c:cb:48:
e8:39:e2:38:ff:94:58:a6:98:1d:77:bf:58:1b:8c:
37:b5:db:d8:f5:42:e0:f2:f7:24:39:c0:ff:03:6a:
a5:8c:79:24:6c:a3:6c:fd:f5:40:0b:90:15:72:5d:
94:64:a9:71:99:4f:9c:19:6b:f3:1a:14:b6:cb:f0:
99:05:90:11:b7:3c:eb:8d:eb:83:aa:8a:51:65:d0:
69:80:67:e5:05:73:ea:c4:c0:2f:cf:5c:ed:c2:dc:
13:d3:7a:26:a4:c5:f9:4d:9e:32:7c:d0:f2:58:8c:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:AD:80:F7:BA:82:46:DB:CD:8B:89:4D:ED:00:33:28:7A:A7:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41064398B00811F0BAB63FCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.188.0-156.246.197.255
Signature Algorithm: sha256WithRSAEncryption
58:c5:70:d8:ad:9c:a7:85:ad:e8:29:dc:05:1c:66:8d:9a:50:
4c:4a:51:ae:83:4b:6a:e7:a1:02:fc:99:46:d7:25:fa:5b:e0:
17:d6:61:5c:a4:0f:80:7b:5a:fa:8e:41:58:b7:29:38:b5:b2:
da:78:ce:f9:f8:7f:46:52:76:31:56:cf:a2:4e:e2:5f:97:00:
fd:d9:e4:ad:0c:6a:1d:44:b6:72:f3:99:76:d1:c0:4f:67:94:
de:04:03:00:71:37:ee:cc:a1:0d:a9:75:9e:9e:5f:9e:ff:ff:
b6:c7:7b:2d:dc:11:73:69:0a:24:20:c5:80:a3:da:c1:b2:06:
b5:b8:64:2d:b6:78:a7:bc:f5:76:dd:8a:af:09:90:d1:58:93:
87:8e:7e:3f:34:de:59:ba:b5:ca:25:c5:5d:22:3e:45:9c:e0:
d1:5d:dc:6d:de:d9:ca:5c:02:99:9a:97:5f:d0:d9:98:ce:a2:
b1:75:ed:a1:7e:0a:00:c5:b3:47:31:56:05:1c:d9:e8:04:d3:
bd:0e:8c:3b:01:0c:59:72:b3:9b:74:1e:b8:05:5b:2b:da:7f:
85:36:b6:8d:fa:ef:4a:62:10:46:57:46:49:66:31:7f:9d:d8:
19:16:46:0c:73:e6:93:69:de:b9:52:ad:e3:cc:90:7a:43:5e:
e6:4d:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:52 2025 by rpki-client