Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B6B4D083F511F0BF1B6299DAE4EC9C.roa
File: 03B6B4D083F511F0BF1B6299DAE4EC9C.roa (raw, json)
Hash identifier: eUs0CUjMfOx74pdZevm/D4O+jTBTmFlIzaOklqJ395c=
Subject key identifier: 3F:46:01:4C:73:AF:83:97:A6:CB:A4:C7:46:53:BE:3F:AD:C8:1E:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01726C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B6B4D083F511F0BF1B6299DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:54:40 +0000
ROA not before: Thu 28 Aug 2025 09:54:33 +0000
ROA not after: Sun 28 Sep 2025 09:54:33 +0000
asID: 44559
IP address blocks: 156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94828 (0x1726c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 09:54:33 2025 GMT
Not After : Sep 28 09:54:33 2025 GMT
Subject: CN=68b02760-43d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:9d:76:96:0d:59:67:61:80:5e:eb:23:34:
5a:f7:ed:03:be:1e:ed:e5:a8:3a:b8:52:6f:9d:d7:
48:2c:55:e5:2c:60:e4:51:c2:a9:4f:88:1c:e2:c8:
3b:73:ff:ab:b3:30:4b:18:da:2a:83:24:08:28:f9:
03:de:bb:c7:a1:b6:e9:3d:21:bc:a9:22:80:ac:aa:
94:98:a7:59:47:b2:2b:58:f3:e9:bf:73:ae:c4:0e:
a8:e8:e3:b5:ab:54:96:cf:3f:f6:12:ba:34:e9:73:
f6:ec:6e:24:f4:70:78:bc:c9:e4:22:5f:2b:2e:62:
71:b4:a3:49:50:a1:05:e9:eb:08:9e:1f:d8:f2:b7:
a7:c9:97:ea:92:06:4a:84:2d:e5:de:58:17:a5:dd:
fb:bf:d9:66:91:c3:c5:3e:4f:b3:4d:2f:57:1a:ba:
c9:66:ff:5f:7b:85:7a:ff:cb:f4:ff:61:84:6c:c1:
9f:2e:7c:d0:1e:b8:25:4c:27:32:e4:0b:c4:59:95:
24:03:06:18:a8:fc:a8:e6:38:73:8a:f1:bd:97:37:
27:55:7e:c0:c2:67:c1:29:a8:d1:59:27:02:13:d3:
b4:98:59:a7:d8:1c:40:1c:d2:76:86:57:17:39:c5:
d3:26:8b:4b:30:37:07:49:41:be:07:32:3c:eb:cc:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:46:01:4C:73:AF:83:97:A6:CB:A4:C7:46:53:BE:3F:AD:C8:1E:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03B6B4D083F511F0BF1B6299DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.239.0-156.246.255.255
Signature Algorithm: sha256WithRSAEncryption
94:ac:53:ad:bc:38:57:f7:e6:50:54:6d:81:69:56:02:c1:50:
d3:c9:09:12:44:3e:f2:de:c7:bc:13:2d:b4:65:33:9d:bf:46:
67:49:0e:9c:7b:22:f9:b4:4c:a9:6c:62:fa:ab:9b:cd:1f:ed:
6c:4b:ef:be:c8:55:fb:f0:d0:f6:db:12:88:8e:b8:7b:38:33:
de:df:8b:d3:27:de:9a:28:eb:9b:16:56:67:fa:5f:9a:b3:7a:
1a:8e:de:58:61:b8:37:ed:80:90:e3:b0:c8:71:a7:7d:c4:05:
32:06:18:01:7f:b2:97:2e:53:50:f8:be:c0:6a:a3:e9:37:0d:
71:c2:8a:05:f3:a2:23:d9:9d:aa:46:11:dc:d6:f4:ed:ed:3c:
99:3e:a1:28:4d:66:a7:cd:a8:64:76:ea:eb:65:c3:18:b2:cc:
14:55:72:d4:25:b5:d4:4e:ce:f7:d7:32:2e:6c:ed:e6:c4:52:
cf:65:58:99:87:5d:a8:4f:29:81:46:f1:b3:2c:f7:ae:6a:83:
21:d8:99:ef:f5:d4:71:27:aa:b1:13:69:1e:69:50:a2:9f:2e:
0d:5b:a6:a8:b4:c5:fd:67:54:a0:1d:06:53:d4:b4:83:66:9e:
93:12:6b:13:ee:7c:78:cc:1f:50:14:48:be:78:3e:b4:15:79:
83:98:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:19:50 2025 by rpki-client