Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85300DD0B31211F089A8B1C3DAE4EC9C.roa
File: 85300DD0B31211F089A8B1C3DAE4EC9C.roa (raw, json)
Hash identifier: mRnsXda4PVwOASfqxcuEhfrfDXKOZqDjN/4E6njKt5o=
Subject key identifier: 7B:06:0A:0C:E7:94:4F:3B:1C:D7:2B:E8:F6:36:26:7E:43:A2:8A:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85300DD0B31211F089A8B1C3DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 08:54:18 +0000
ROA not before: Mon 27 Oct 2025 08:54:12 +0000
ROA not after: Sun 30 Nov 2025 08:54:12 +0000
asID: 32043
IP address blocks: 156.249.128.0/22 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99001 (0x182b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 08:54:12 2025 GMT
Not After : Nov 30 08:54:12 2025 GMT
Subject: CN=68ff333a-3c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:ff:03:3f:58:9b:0f:ab:13:49:c1:58:bc:
ac:da:92:18:d1:3f:4b:15:8b:7c:89:04:83:67:7a:
19:4c:23:5b:9f:a2:57:79:53:6c:8f:f9:a0:ef:55:
60:31:af:f7:7a:c4:4f:49:10:64:6c:21:20:64:ff:
c2:5e:37:7c:0b:d9:60:16:bf:ca:ab:fe:d9:1c:16:
8e:d9:14:66:ec:ab:ae:4c:83:bb:9a:32:0f:4e:d1:
5e:29:32:40:38:be:76:06:57:d3:6f:5f:ad:d3:6a:
09:ea:99:67:9d:8e:0e:56:2e:94:20:fe:89:26:3e:
4b:89:3e:4f:1d:fe:52:2b:c5:35:f7:f8:cf:08:34:
f5:1c:d9:f4:b4:16:22:c5:6e:a2:4c:79:06:cc:c7:
a0:f4:96:c6:5a:85:b2:d3:ca:73:f6:93:23:12:9a:
4f:c1:ee:6a:de:78:1f:ed:20:86:33:d2:2d:b0:9e:
53:fb:60:1a:a6:33:1e:28:3e:63:80:c8:fe:ef:86:
5e:4f:e2:3c:50:d6:60:b5:a8:bd:9f:93:c9:ef:e9:
a2:4e:52:ee:a1:67:06:08:bb:6e:37:ca:01:dd:87:
0e:a3:52:c0:97:71:63:bc:ae:a9:4b:cf:f5:49:58:
9e:70:11:18:d0:82:fe:29:81:88:0f:66:6b:44:f1:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:0A:0C:E7:94:4F:3B:1C:D7:2B:E8:F6:36:26:7E:43:A2:8A:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85300DD0B31211F089A8B1C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.128.0/22
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d0:bc:11:86:8c:0f:66:3e:d9:57:dc:c5:87:a3:85:8b:07:
ab:4d:58:cd:6f:24:68:97:63:13:06:62:24:bd:8c:3b:cd:8d:
6a:71:71:60:ea:2f:3c:8c:1d:90:1c:8a:a8:22:70:d2:8d:d1:
22:66:35:ee:75:e5:e6:6b:49:1b:9c:5c:da:fe:ec:50:3e:d4:
fe:05:aa:ec:20:63:ad:b4:e9:ce:d6:4e:45:9e:34:11:2f:b0:
d9:08:2c:93:be:ee:dc:5e:42:63:6e:7b:74:60:44:52:6c:a0:
09:b9:7b:ca:46:21:25:0a:0a:60:fd:9c:93:fb:d2:cd:54:08:
e8:92:6c:16:db:88:3f:af:85:d1:76:74:7a:95:a6:cf:1f:5e:
15:45:5c:17:9d:33:80:53:43:bd:38:26:ee:0b:f6:3e:8a:3b:
31:f5:b5:a3:ff:31:c0:57:95:92:eb:10:cd:1b:da:85:da:b4:
68:fc:ca:b1:7c:83:a9:41:70:c9:7b:64:11:40:c9:b4:12:d6:
26:cf:e5:fc:e2:e7:f0:2e:19:73:32:33:31:19:ea:d0:24:ba:
9c:22:36:56:62:62:1c:11:47:90:53:5b:b8:0f:d2:e1:f3:6e:
85:07:5f:20:b0:eb:90:b9:65:5a:e5:a9:6c:cf:46:9c:2c:15:
17:56:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:31 2025 by rpki-client