Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D094A8687D11F08C68217BDAE4EC9C.roa
File: D3D094A8687D11F08C68217BDAE4EC9C.roa (raw, json)
Hash identifier: HwU8kHZD5YC/IYkpMDeyDGc6GDpCI4+ct8kAfsG+lZE=
Subject key identifier: FD:A6:FC:FB:4B:2E:BF:F0:07:56:0C:15:4D:26:E8:19:B2:0F:AE:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016745
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D094A8687D11F08C68217BDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:03:29 +0000
ROA not before: Thu 24 Jul 2025 11:03:24 +0000
ROA not after: Thu 28 Aug 2025 11:03:24 +0000
asID: 44559
IP address blocks: 156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.190.0/24 maxlen: 24
156.246.191.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.193.0/24 maxlen: 24
156.246.194.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.196.0/24 maxlen: 24
156.246.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91973 (0x16745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 11:03:24 2025 GMT
Not After : Aug 28 11:03:24 2025 GMT
Subject: CN=68821300-7c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:b2:be:36:3e:33:fd:22:23:b8:7e:61:86:
4f:10:4b:9c:97:a9:5c:47:c4:8b:48:63:5d:07:04:
c5:a9:b4:d5:13:48:d0:05:5c:6d:00:14:cd:07:3e:
c4:ac:8a:73:7b:87:6a:02:ff:e3:89:a4:87:6c:78:
a7:7e:5b:8a:4f:22:1a:b2:45:93:fc:de:f8:de:aa:
b2:8e:e3:82:4d:b7:4c:01:5a:23:9f:01:78:35:6b:
e1:f4:19:89:b6:79:d8:b1:41:ee:b8:05:d8:8f:41:
fd:9b:bc:cc:7d:3a:0e:1d:87:dc:90:e4:c7:c2:ff:
40:20:b3:a3:49:f1:68:ef:2a:18:bd:0a:36:80:48:
05:f9:ff:8f:21:11:9d:69:a5:36:0c:23:e5:60:a5:
d8:5c:46:2f:10:c3:0e:55:93:9a:d2:50:cc:63:e5:
9d:39:27:df:db:fa:77:57:14:b7:c0:99:dc:72:5a:
36:06:2f:d7:f5:fe:af:d1:75:2c:1b:b6:8d:f9:37:
4c:4a:86:82:6e:31:31:aa:42:3d:68:5d:d8:14:98:
cc:bb:51:e7:a3:e2:0e:c2:b3:ae:87:da:78:d3:21:
51:80:33:8a:1f:d8:62:fa:7c:e0:0e:4e:1a:10:2c:
8c:4d:96:e8:ca:08:8a:a5:e7:fa:1f:ac:64:d9:4f:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:FC:FB:4B:2E:BF:F0:07:56:0C:15:4D:26:E8:19:B2:0F:AE:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3D094A8687D11F08C68217BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.188.0-156.246.197.255
Signature Algorithm: sha256WithRSAEncryption
44:42:2a:96:f5:66:a8:d7:f2:d6:c7:fa:70:a2:e3:0b:88:2e:
c4:9a:c7:8c:d2:fc:ef:d1:f6:5b:b4:06:47:9d:90:32:1e:18:
a8:84:b5:72:05:6b:4c:99:87:3f:3d:c8:e4:39:a7:cd:01:68:
1d:59:81:63:85:84:7c:f2:a2:f6:94:bd:12:51:c0:17:c2:f2:
05:a6:17:22:31:7f:c3:d3:57:ad:35:b5:d3:d5:d6:6e:cc:75:
36:cc:59:5b:73:9c:ce:24:56:ea:4c:1d:55:fb:17:bd:bb:11:
0b:82:f0:00:7a:2c:6e:7c:7b:73:4a:77:0a:80:46:2c:08:0e:
5d:4b:33:19:c0:02:95:6a:a7:ac:19:fc:a6:e6:28:85:50:93:
f4:fb:df:23:e7:75:da:51:58:ab:bd:6a:64:01:8b:ee:50:ab:
9e:ca:87:c1:a9:c4:37:1b:ee:ca:19:70:c8:37:75:4f:a5:d4:
7d:63:9e:a4:eb:cd:2f:3b:40:28:02:f1:b9:9a:fd:9f:a8:c4:
a5:a7:5f:8e:30:29:ec:b4:2c:d7:23:2a:9d:13:12:ae:ad:6f:
52:ae:b0:4f:31:7f:cb:3f:21:f1:c1:02:4b:33:95:8e:47:5d:
a1:48:3d:b2:d8:d6:c5:07:19:1e:44:2d:80:c5:30:38:76:2c:
50:1c:42:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:35 2025 by rpki-client