Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/953BDAB2B33311F0B1DA449DDAE4EC9C.roa
File: 953BDAB2B33311F0B1DA449DDAE4EC9C.roa (raw, json)
Hash identifier: Nl3d+//4fN2lzBsg1DHCUr2aWjNLC+J5F4dJoIQzO0o=
Subject key identifier: 01:7E:4F:C2:FC:12:86:E7:B7:06:60:9A:40:A8:63:7B:AF:59:71:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0182F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/953BDAB2B33311F0B1DA449DDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 12:50:58 +0000
ROA not before: Mon 27 Oct 2025 12:50:53 +0000
ROA not after: Sun 30 Nov 2025 12:50:53 +0000
asID: 401783
IP address blocks: 156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99058 (0x182f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 12:50:53 2025 GMT
Not After : Nov 30 12:50:53 2025 GMT
Subject: CN=68ff6ab2-3d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:17:89:4b:73:2e:95:fc:c2:17:72:cd:9d:
f7:2e:30:f5:74:18:0c:9e:07:3d:0e:eb:50:1f:82:
17:b9:a5:f2:ec:0e:46:ec:3d:42:19:64:7c:27:37:
f6:72:5f:df:29:df:b2:dd:59:e2:05:2b:be:cb:96:
87:36:ec:cf:03:35:53:54:9a:71:6d:ca:92:c3:94:
43:67:99:4f:9f:3b:72:58:e1:be:71:c8:77:ca:39:
6c:37:eb:71:ac:ea:35:e9:95:13:1a:6e:4c:a4:5e:
1f:4a:06:58:35:b0:8f:1f:eb:93:3f:45:66:79:38:
c0:65:84:7a:6a:32:df:2e:7d:33:ea:9c:81:ec:0b:
5b:c2:d9:95:af:2d:43:4a:b7:9b:cb:66:92:1b:7d:
9e:eb:a1:eb:f8:d0:69:c4:16:16:62:ae:e0:dd:bb:
ed:be:2a:26:af:f9:a8:8e:aa:b6:2c:e5:55:e9:28:
b2:65:3d:10:71:9d:7f:22:6d:7e:93:05:fd:0b:9f:
0f:c0:5b:b7:6d:81:60:b7:ae:f4:ee:79:4c:9b:a6:
84:60:63:ea:c9:1a:1e:f2:72:c7:e2:2d:0c:53:6f:
00:17:91:44:08:e1:91:6e:f0:0d:0e:24:5f:15:ea:
5e:6d:4f:34:18:89:c1:b3:7d:45:35:01:85:6d:58:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:4F:C2:FC:12:86:E7:B7:06:60:9A:40:A8:63:7B:AF:59:71:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/953BDAB2B33311F0B1DA449DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.187.0/24
156.249.190.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4d:1e:7d:43:97:df:ac:36:d9:b3:88:ea:e9:b0:2a:8a:90:
88:58:d0:64:6b:77:be:4c:f2:86:91:ee:70:08:ee:00:b1:3c:
26:94:a5:d0:d9:86:47:2b:e4:56:4a:08:de:0d:0d:09:72:64:
52:bd:ef:72:6c:e5:90:4c:3c:a5:c7:9a:6b:9e:0f:11:2c:a4:
4a:f7:07:ba:36:21:2d:4e:81:ff:0f:92:8d:75:09:be:3b:eb:
95:ee:de:f1:9e:f5:bf:da:1e:93:04:07:6f:c9:a8:d4:ee:3d:
2d:69:54:c2:f5:a7:5f:c3:8b:7b:c1:e0:81:35:12:5b:74:1c:
50:18:f9:19:32:01:c9:ba:0b:e4:7c:17:ad:58:e1:8a:94:e8:
37:2a:ec:1d:1a:df:29:ec:03:5a:ee:27:1f:b4:5f:46:c9:51:
ae:88:32:03:36:3d:7b:c5:f0:34:68:1c:98:5d:57:01:a6:0b:
af:0b:f0:9c:11:f8:ce:e1:82:94:de:10:90:67:5f:31:49:e8:
ee:b8:98:a4:3b:04:4e:45:4d:34:fe:64:9c:43:7d:45:40:a7:
cd:9b:ed:ed:98:a0:5e:a7:fa:6a:bc:00:40:ab:3e:1f:87:c2:
ad:e4:b2:7a:51:86:f4:2b:97:a9:1d:10:aa:9a:6a:96:c7:8a:
07:9a:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:32 2025 by rpki-client