Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60BD7108B00711F0BF96D5C8DAE4EC9C.roa
File: 60BD7108B00711F0BF96D5C8DAE4EC9C.roa (raw, json)
Hash identifier: YPhMVEkl+0JQCHdyAzNjQdVhidgWj0D+teic3EImktU=
Subject key identifier: F7:33:3A:E9:A0:33:C4:8E:D3:D2:A1:48:D6:E7:4C:4D:E3:19:10:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018251
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60BD7108B00711F0BF96D5C8DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 11:56:59 +0000
ROA not before: Thu 23 Oct 2025 11:56:51 +0000
ROA not after: Fri 28 Nov 2025 11:56:51 +0000
asID: 44559
IP address blocks: 156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98897 (0x18251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 11:56:51 2025 GMT
Not After : Nov 28 11:56:51 2025 GMT
Subject: CN=68fa180b-6dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:73:a5:ba:1d:ca:09:2c:d5:2b:63:42:5d:
0b:f9:97:71:b0:f3:d4:25:3f:06:b6:da:cb:26:8c:
e6:88:33:72:94:4f:7f:8e:95:52:aa:bd:0d:7e:ca:
ac:d2:98:64:0d:ea:38:64:75:79:43:9b:a8:d9:fc:
50:c1:4a:03:51:13:c9:3f:f2:60:f0:4d:2f:60:03:
45:03:64:27:45:2c:12:38:e3:cc:4a:72:15:fa:7f:
95:0d:d6:48:38:38:d4:91:43:39:15:23:40:b5:1c:
8b:1d:e4:ad:ea:8e:f7:89:8d:49:8b:2b:d8:a1:6c:
a6:f3:f6:ea:fc:fd:39:40:4d:ee:ff:18:52:86:f3:
aa:d6:a1:eb:82:86:be:60:36:61:bc:fe:b0:a7:6c:
a9:ad:e8:54:ec:bb:10:89:7c:fc:b1:f5:36:3d:f8:
6b:20:18:5c:3f:5f:a5:fb:f6:7c:1b:75:0a:6b:68:
71:52:a4:ec:38:a0:f6:31:14:34:80:71:f9:00:a6:
8b:aa:32:78:c9:84:5b:62:c7:2a:84:d6:64:ac:14:
a0:3b:04:44:d6:03:01:10:75:a7:ad:c5:ac:8b:7a:
65:2f:93:fc:5a:a8:c4:66:95:5f:00:77:97:c5:b5:
08:58:2c:9f:c9:e4:93:d0:d3:c9:56:da:66:04:b8:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:33:3A:E9:A0:33:C4:8E:D3:D2:A1:48:D6:E7:4C:4D:E3:19:10:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60BD7108B00711F0BF96D5C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.209.0-156.246.218.255
Signature Algorithm: sha256WithRSAEncryption
0a:58:c2:bd:e0:30:3b:98:3c:58:cd:98:67:c2:22:94:bd:ae:
49:d4:87:69:33:11:52:2d:e9:c5:c9:5b:41:24:0f:78:c1:d8:
e7:e3:74:4d:2e:12:cf:ba:6c:4e:4e:3a:6d:70:c9:f9:d7:b8:
c0:5c:4e:46:67:3d:ab:41:98:e3:d6:17:8a:aa:d1:05:10:a6:
d6:2b:60:08:49:e7:c2:3e:dc:7f:00:92:a8:15:84:b0:58:59:
eb:83:5d:cf:da:04:c9:18:9e:7b:e3:27:66:c4:c5:33:45:1c:
07:cd:b2:81:f9:9d:18:6d:e2:5d:55:dc:29:4a:25:0f:32:cb:
30:b5:8c:67:de:98:8b:49:b9:6f:ad:e4:fe:90:3b:ab:08:af:
42:d7:51:8f:82:c3:22:90:ad:41:21:96:6e:21:53:3e:71:b0:
56:12:93:1c:a5:f6:c6:28:12:cc:cd:a0:13:7d:1b:c0:8f:62:
a8:c3:8a:3f:33:57:49:da:5c:0b:4c:73:75:c0:e7:5e:48:8b:
a9:86:13:cf:6d:04:e4:bf:02:1d:d2:df:1f:6e:33:f3:ea:01:
36:b8:32:e2:8e:fa:27:9f:b6:a8:0f:b6:56:b8:87:b6:18:95:
1b:86:53:f2:64:d6:9c:49:00:ab:da:9f:00:b8:a6:b2:e8:c2:
3a:4b:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:06 2025 by rpki-client