Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/744E53BEB00611F08B6CDBC0DAE4EC9C.roa
File: 744E53BEB00611F08B6CDBC0DAE4EC9C.roa (raw, json)
Hash identifier: q68u8QcdN7PVr49kkAUntISCSVgftHmusqhyWrzhHaQ=
Subject key identifier: 72:3D:0E:DC:29:37:52:23:17:14:6A:2D:1C:C7:4F:52:6B:B6:E2:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01824F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/744E53BEB00611F08B6CDBC0DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 11:50:22 +0000
ROA not before: Thu 23 Oct 2025 11:50:14 +0000
ROA not after: Fri 28 Nov 2025 11:50:14 +0000
asID: 44559
IP address blocks: 156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.206.0/24 maxlen: 24
156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98895 (0x1824f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 11:50:14 2025 GMT
Not After : Nov 28 11:50:14 2025 GMT
Subject: CN=68fa167e-f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:29:7b:70:63:d7:94:7c:e2:dd:1a:3f:27:
c0:0c:e2:8d:9e:ef:96:fe:8c:3a:53:cc:2e:31:47:
11:30:cf:da:3f:ee:05:9a:b4:ef:d4:7c:f1:41:cd:
e5:f9:06:7a:09:34:6b:d2:bd:13:2e:c1:73:03:66:
4b:ad:67:cb:2f:a1:63:4c:74:0f:5c:37:54:5a:5f:
54:0b:e9:c0:db:a5:73:66:5f:da:e1:48:96:8b:3b:
1c:b6:44:cc:54:f0:b0:6f:23:eb:d8:70:7e:72:8b:
90:10:aa:35:fc:3f:0c:7f:c0:53:96:b3:37:81:6c:
6c:45:17:a9:33:d8:b2:f3:51:19:17:e2:e3:36:cb:
93:28:2f:f0:a6:cc:9f:9c:1d:66:7a:aa:30:91:d6:
de:36:1b:54:81:87:54:c8:00:73:a0:5f:df:0d:4f:
d3:76:f8:42:43:f8:92:67:46:92:0d:55:41:7f:ec:
a9:7b:8f:85:df:81:0f:0a:b9:ea:79:0d:f7:72:55:
f8:43:46:c4:e0:11:d5:2e:fb:92:e4:32:68:61:31:
d3:2c:9b:45:2b:34:de:74:e5:03:5d:d6:4e:88:b7:
32:31:e8:61:d5:da:eb:ae:2a:b0:97:ce:6e:f8:cc:
61:db:8a:4a:39:37:d2:dd:5f:c7:4c:2f:13:84:a0:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:0E:DC:29:37:52:23:17:14:6A:2D:1C:C7:4F:52:6B:B6:E2:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/744E53BEB00611F08B6CDBC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.199.0-156.246.208.255
Signature Algorithm: sha256WithRSAEncryption
9a:e2:19:8a:c4:b3:4f:b2:ca:7d:2c:1e:9f:a2:9c:64:8a:1b:
60:30:12:9a:d2:3d:e8:2e:a1:6f:31:b3:2f:32:b3:8d:b0:c2:
a1:b1:a2:91:cd:a3:2f:08:91:64:29:c7:0a:3d:d2:cb:92:71:
00:d6:06:21:48:b2:ba:cb:55:bd:8e:4a:90:33:f5:39:7a:e0:
18:a3:6c:2e:97:13:67:75:2e:73:2c:cc:e2:2f:b8:02:d6:60:
92:1b:a0:b6:95:21:55:f1:76:b8:6a:39:7c:d7:d2:b4:11:7c:
b1:11:65:8c:91:ab:5a:fd:ca:db:23:be:e6:f4:a0:3b:62:2d:
7f:4b:82:91:bf:f8:ce:dc:57:59:ec:33:20:c3:fa:43:ad:be:
c9:18:2c:01:c6:18:db:1a:4f:8d:08:06:42:e4:d8:58:e3:18:
ae:cc:20:ca:92:23:db:3f:42:c3:6c:1a:1a:27:bc:fc:00:7c:
f9:5c:77:2d:bd:b8:16:90:89:d9:43:45:7d:e0:12:3c:96:ec:
0e:2b:0f:1a:3e:96:cb:70:6f:e3:64:9c:d2:10:67:b9:11:d5:
e5:84:78:98:b0:ec:0e:6a:b9:db:93:49:0a:06:5a:72:85:17:
13:7f:e6:19:73:11:fe:d2:36:18:94:fe:43:bb:69:cb:11:8a:
64:ab:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:59:10 2025 by rpki-client