Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B1818D45E4A11F0A9E40FEEDAE4EC9C.roa
File: 0B1818D45E4A11F0A9E40FEEDAE4EC9C.roa (raw, json)
Hash identifier: yAgMnVkHl64qKUa9QTOYgyk1A/48MW55vXKLMjblsJs=
Subject key identifier: EC:2B:77:F2:61:73:19:A5:7D:75:09:E7:41:5C:E8:C8:84:27:04:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016492
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B1818D45E4A11F0A9E40FEEDAE4EC9C.roa
Signing time: Fri 11 Jul 2025 11:27:36 +0000
ROA not before: Fri 11 Jul 2025 11:27:30 +0000
ROA not after: Sat 16 Aug 2025 11:27:30 +0000
asID: 22773
IP address blocks: 156.238.143.0/24 maxlen: 24
156.238.145.0/24 maxlen: 24
156.238.146.0/24 maxlen: 24
156.238.147.0/24 maxlen: 24
156.238.148.0/24 maxlen: 24
156.238.149.0/24 maxlen: 24
156.238.150.0/24 maxlen: 24
156.238.151.0/24 maxlen: 24
156.238.152.0/24 maxlen: 24
156.238.153.0/24 maxlen: 24
156.238.154.0/24 maxlen: 24
156.238.155.0/24 maxlen: 24
156.238.156.0/24 maxlen: 24
156.238.157.0/24 maxlen: 24
156.238.158.0/24 maxlen: 24
156.238.159.0/24 maxlen: 24
156.238.160.0/24 maxlen: 24
156.242.16.0/24 maxlen: 24
156.242.17.0/24 maxlen: 24
156.242.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91282 (0x16492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 11:27:30 2025 GMT
Not After : Aug 16 11:27:30 2025 GMT
Subject: CN=6870f528-ebe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:45:10:c3:97:64:ad:35:3e:f5:c8:24:81:
df:f5:63:54:18:94:de:3c:bd:ce:66:3f:a7:b3:db:
25:ea:70:6e:63:67:64:45:70:cb:a4:8e:ee:32:c2:
fe:ae:c1:49:05:e1:a6:f7:ad:80:8f:44:d8:d6:07:
18:73:05:f1:97:ac:f8:d9:b6:87:77:53:03:fa:ac:
f8:63:dd:11:2e:96:09:41:94:a0:ab:74:d7:65:54:
35:97:5a:d0:10:35:61:0c:cb:14:a7:10:5c:f1:4d:
d3:f4:e3:92:3d:dc:c5:ed:93:66:53:97:8c:b7:ed:
9a:6e:1d:d6:bb:1c:b9:44:c6:24:27:1f:9d:e9:18:
8e:77:09:ac:10:dd:84:f5:cb:3d:9a:ee:0c:65:7d:
a8:f4:94:3d:a8:8a:68:58:8f:af:3c:9a:9e:e4:96:
c7:f5:44:e4:ba:35:aa:21:0a:5f:3b:0b:3b:0d:a8:
9b:bb:df:de:18:3d:c0:90:02:cd:c2:ff:48:fe:be:
8f:ab:cc:88:40:77:24:30:62:94:54:e6:f0:12:5a:
8a:78:9c:e1:7b:ad:4f:37:e7:d4:fc:1f:d6:f1:9c:
79:a3:de:96:a7:38:80:b8:d3:68:b5:a3:80:21:bf:
2e:fc:fd:26:06:ae:b5:b4:d3:8e:e0:e4:59:13:a8:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2B:77:F2:61:73:19:A5:7D:75:09:E7:41:5C:E8:C8:84:27:04:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B1818D45E4A11F0A9E40FEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.143.0/24
156.238.145.0-156.238.160.255
156.242.16.0-156.242.18.255
Signature Algorithm: sha256WithRSAEncryption
63:af:3a:da:4a:fd:0a:ad:e9:1a:4a:25:f8:98:ba:3a:c3:2a:
dc:f9:7c:37:a4:d9:c2:b2:99:c3:89:70:80:b7:c4:9d:fa:8a:
f7:62:de:67:af:86:99:ff:d0:10:a1:e6:16:a2:e4:b1:a6:cf:
9a:11:46:43:41:4b:5e:bd:07:98:fa:d3:1b:f1:fe:df:0a:ca:
19:89:e1:f1:6f:ab:d3:51:4a:f4:f5:1b:df:7e:e0:1a:bb:a3:
7c:ce:b0:4e:b9:e6:78:e9:5b:c2:74:b8:b8:aa:2b:bb:7f:75:
09:0d:47:9d:27:8f:9b:35:ef:49:f5:ab:ef:bd:96:97:43:31:
52:f6:7b:5c:60:f1:b4:ca:db:1f:5f:4b:0f:3f:6e:ee:16:c8:
28:6a:5c:83:77:fb:c2:0b:2e:e0:4d:df:1e:73:39:b8:9c:c0:
68:db:0f:fb:66:00:36:8a:68:65:81:dd:44:c1:8d:36:5f:39:
1e:8e:50:65:4a:33:3b:75:fd:ce:01:1e:10:d1:cb:12:d4:67:
cc:e3:29:f7:76:48:4a:cc:c4:7e:c8:9f:7d:49:bb:12:d0:e7:
08:62:e1:b8:44:38:cc:1d:c3:4b:ca:38:87:4f:e7:63:e2:29:
10:dc:5e:91:f0:b6:88:1d:96:2b:64:61:9d:c1:14:1a:d8:8c:
b5:32:98:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:43:07 2025 by rpki-client