Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41325D3C617211F0989E1686DAE4EC9C.roa
File: 41325D3C617211F0989E1686DAE4EC9C.roa (raw, json)
Hash identifier: f3fHecJ5u0paePlmAcYU+Pj56aVD4lP7o+FPxoM/oMc=
Subject key identifier: A4:20:55:3E:D2:F7:29:D1:27:1C:A9:95:21:D6:4A:C7:52:31:F0:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01653F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41325D3C617211F0989E1686DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 11:53:00 +0000
ROA not before: Tue 15 Jul 2025 11:52:53 +0000
ROA not after: Sat 16 Aug 2025 11:52:53 +0000
asID: 22773
IP address blocks: 156.242.23.0/24 maxlen: 24
156.242.28.0/24 maxlen: 24
156.242.29.0/24 maxlen: 24
156.242.30.0/24 maxlen: 24
156.242.31.0/24 maxlen: 24
156.242.48.0/24 maxlen: 24
156.242.49.0/24 maxlen: 24
156.242.50.0/24 maxlen: 24
156.242.52.0/24 maxlen: 24
156.242.53.0/24 maxlen: 24
156.242.54.0/24 maxlen: 24
156.242.55.0/24 maxlen: 24
156.242.56.0/24 maxlen: 24
156.242.57.0/24 maxlen: 24
156.242.58.0/24 maxlen: 24
156.242.59.0/24 maxlen: 24
156.242.60.0/24 maxlen: 24
156.242.61.0/24 maxlen: 24
156.242.62.0/24 maxlen: 24
156.242.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91455 (0x1653f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 11:52:53 2025 GMT
Not After : Aug 16 11:52:53 2025 GMT
Subject: CN=6876411c-0331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:09:70:a8:5a:11:1c:c3:8d:a9:b4:45:4e:
41:0b:7c:83:f9:d3:12:06:da:9c:ad:28:4d:ad:69:
10:c7:6e:73:6d:32:83:05:ae:b9:b1:d1:2a:9d:b4:
2e:ba:38:76:d7:33:9e:5a:c4:ab:45:16:fe:5a:05:
74:4b:5b:a6:e5:cb:6c:34:fd:7a:4e:85:c4:31:03:
24:79:72:0b:be:db:14:95:56:9d:81:c9:68:fd:b4:
4f:ba:e9:83:4d:56:97:83:60:7b:c7:bf:a0:56:ba:
08:f8:68:b7:ad:ac:6f:3c:80:3c:c6:74:09:bd:d3:
c5:33:6c:70:63:51:6e:0b:56:47:f1:6f:77:08:d0:
a4:28:ee:98:a5:af:a2:53:d3:72:54:57:30:77:d2:
14:c2:cf:ca:f9:7b:2b:7a:73:34:de:e9:4f:f0:03:
9e:c0:59:74:09:11:56:9a:3f:04:16:99:c0:d5:cd:
19:d9:ed:75:6b:66:b6:ce:40:3d:8c:39:66:87:b2:
f5:22:68:b0:55:25:76:96:87:16:bb:de:12:db:ab:
32:c1:99:9b:c2:e9:99:7d:0b:b6:7e:8e:4c:c0:58:
13:ef:0c:a7:06:71:1a:ce:1c:64:41:bb:d6:14:79:
3a:03:f4:0f:2b:d8:7c:9f:ec:d2:87:85:43:b7:28:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:55:3E:D2:F7:29:D1:27:1C:A9:95:21:D6:4A:C7:52:31:F0:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41325D3C617211F0989E1686DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.23.0/24
156.242.28.0/22
156.242.48.0-156.242.50.255
156.242.52.0-156.242.63.255
Signature Algorithm: sha256WithRSAEncryption
46:11:a5:2e:6f:9f:7f:00:69:18:a2:56:67:a4:07:de:75:9b:
77:10:7f:b1:5b:48:d8:31:5d:94:42:08:02:52:f2:9a:dc:af:
ea:8d:b7:bc:e2:6d:ce:77:40:20:82:0c:70:fe:ee:f0:0b:b0:
a5:09:ea:f9:46:f3:97:3d:5b:89:0c:f2:54:85:ad:8b:d9:14:
83:e9:0d:0f:27:0e:51:ed:5b:18:00:cf:c4:21:01:91:7e:70:
43:a9:17:f3:ba:f8:9f:2d:03:c8:c7:07:55:5b:dd:fe:d1:8a:
74:5f:97:a6:14:1c:5b:bc:73:1b:d3:3a:c6:17:e7:58:ef:7f:
a5:4d:88:f3:84:e9:cc:a4:f1:b9:bc:fa:ad:f7:05:c5:2e:0b:
2f:aa:e5:c5:cb:2a:cb:ad:3c:34:30:f5:26:43:cd:63:85:da:
ef:1f:cd:2b:d7:14:50:6d:db:e5:5f:a6:23:da:4b:6f:b1:24:
e5:46:33:8a:23:72:2e:66:1b:ed:c6:4c:44:b2:2d:85:bf:24:
91:5d:58:bf:df:7b:1a:d2:28:3d:c8:a1:5c:22:bb:30:94:17:
74:22:c0:94:42:2f:f5:b3:92:0f:e0:1f:83:3c:5f:5a:b4:0b:
5c:37:cc:f0:56:71:d0:52:0d:13:05:d5:32:af:3d:65:ae:83:
b2:7b:c7:ef
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAWU/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE1MTE1MjUzWhcNMjUwODE2MTE1MjUzWjAYMRYw
FAYDVQQDEw02ODc2NDExYy0wMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqMQJcKhaERzDjam0RU5BC3yD+dMSBtqcrShNrWkQx25zbTKDBa65sdEq
nbQuujh21zOeWsSrRRb+WgV0S1um5ctsNP16ToXEMQMkeXILvtsUlVadgclo/bRP
uumDTVaXg2B7x7+gVroI+Gi3raxvPIA8xnQJvdPFM2xwY1FuC1ZH8W93CNCkKO6Y
pa+iU9NyVFcwd9IUws/K+XsrenM03ulP8AOewFl0CRFWmj8EFpnA1c0Z2e11a2a2
zkA9jDlmh7L1ImiwVSV2locWu94S26sywZmbwumZfQu2fo5MwFgT7wynBnEazhxk
QbvWFHk6A/QPK9h8n+zSh4VDtyiEuQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFKQg
VT7S9ynRJxyplSHWSsdSMfA7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MTMyNUQzQzYxNzIxMUYwOTg5RTE2ODZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAnPIXAwQCnPIcMAwDBASc8jAD
BACc8jIwDAMEApzyNAMEBpzyADANBgkqhkiG9w0BAQsFAAOCAQEARhGlLm+ffwBp
GKJWZ6QH3nWbdxB/sVtI2DFdlEIIAlLymtyv6o23vOJtzndAIIIMcP7u8AuwpQnq
+Ubzlz1biQzyVIWti9kUg+kNDycOUe1bGADPxCEBkX5wQ6kX87r4ny0DyMcHVVvd
/tGKdF+XphQcW7xzG9M6xhfnWO9/pU2I84TpzKTxubz6rfcFxS4LL6rlxcsqy608
NDD1JkPNY4Xa7x/NK9cUUG3b5V+mI9pLb7Ek5UYziiNyLmYb7cZMRLIthb8kkV1Y
v997GtIoPcihXCK7MJQXdCLAlEIv9bOSD+AfgzxfWrQLXDfM8FZx0FINEwXVMq89
Za6DsnvH7w==
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:26 2025 by rpki-client