Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D1029A48EE411F0A86F81EBDAE4EC9C.roa
File: 0D1029A48EE411F0A86F81EBDAE4EC9C.roa (raw, json)
Hash identifier: wnuoRGooB8BN42pSmM78Jhrf+PkhBayyLOFR/VdCH6g=
Subject key identifier: 70:B2:11:FD:54:5B:2C:D3:16:AF:ED:3F:1F:6F:CF:2A:BC:98:5E:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D1029A48EE411F0A86F81EBDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 07:50:57 +0000
ROA not before: Thu 11 Sep 2025 07:50:52 +0000
ROA not after: Fri 17 Oct 2025 07:50:52 +0000
asID: 22773
IP address blocks: 156.233.41.0/24 maxlen: 24
156.233.42.0/24 maxlen: 24
156.243.96.0/22 maxlen: 24
156.243.130.0/24 maxlen: 24
156.244.144.0/20 maxlen: 24
156.248.0.0/24 maxlen: 24
156.248.4.0/24 maxlen: 24
156.248.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96918 (0x17a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 07:50:52 2025 GMT
Not After : Oct 17 07:50:52 2025 GMT
Subject: CN=68c27f61-6b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:43:cb:d3:b1:99:44:d5:83:c2:b7:fe:93:
a7:5d:fe:85:86:b1:e0:09:ad:0d:6b:1b:67:79:5e:
58:3b:ac:1b:90:44:12:c9:a2:a1:3b:19:6a:d0:d7:
75:b8:8d:d2:81:ad:75:1b:8f:cc:46:96:77:77:3c:
80:63:59:0f:53:0a:ea:40:72:25:36:0c:40:5a:72:
5d:58:f9:76:33:d5:1d:6c:0a:6d:13:9a:eb:b5:02:
a0:07:93:d0:3d:ef:d3:b4:46:3d:d4:11:89:4a:67:
c8:61:82:7e:c8:28:eb:d0:51:b3:f7:cb:70:fb:38:
3c:71:7b:da:3c:2b:3b:5f:2f:e8:81:6c:87:1f:a0:
a3:71:00:aa:c8:f3:5d:c6:6b:39:6a:16:e2:bf:18:
0d:9b:9b:1b:38:53:32:16:6a:80:3b:4e:4e:2e:79:
92:14:34:f9:45:63:55:11:78:61:e7:41:5b:29:fa:
3e:47:87:3b:0f:a0:59:c2:bd:08:5f:ac:5b:d8:b7:
61:c0:5a:d1:dd:89:0c:bf:88:57:8d:62:86:4e:01:
f3:47:ff:92:43:2f:61:7f:86:6c:d7:df:a2:d6:8d:
11:2c:0d:8c:9f:6f:64:62:a5:59:05:c9:67:2b:7b:
4d:94:e9:ee:84:89:d0:f8:69:89:d9:dd:9b:02:e8:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B2:11:FD:54:5B:2C:D3:16:AF:ED:3F:1F:6F:CF:2A:BC:98:5E:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D1029A48EE411F0A86F81EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.41.0-156.233.42.255
156.243.96.0/22
156.243.130.0/24
156.244.144.0/20
156.248.0.0/24
156.248.4.0/24
156.248.92.0/22
Signature Algorithm: sha256WithRSAEncryption
73:59:98:bc:dd:a2:4c:db:99:0c:9f:35:6b:50:0c:c0:0a:58:
fd:39:cb:b2:ce:31:36:be:cc:9f:fd:19:a3:dd:f0:fb:38:a8:
d4:7e:bc:2f:a2:87:89:8e:a7:5a:1b:d0:30:a3:3a:34:b3:aa:
5d:94:29:e3:cb:6d:02:15:72:70:ce:6e:fa:d3:f9:4f:32:d2:
4a:85:b3:c1:7d:a8:78:8b:f2:e6:79:9e:87:c6:91:08:86:8a:
94:15:e7:6b:5e:be:25:33:58:e9:f2:47:b1:d7:07:49:0f:f9:
d3:72:ff:fd:8d:d4:b3:ac:ae:07:54:35:b6:80:df:52:3b:94:
cb:04:70:d6:9f:70:3c:b9:c1:3f:58:dc:59:8a:91:2f:d9:68:
a5:18:49:3b:f8:3a:76:09:d4:61:f6:2d:f8:eb:ca:7f:df:d2:
ce:02:f3:cf:43:0a:26:bf:cd:35:ee:bd:3b:c0:e1:37:83:c9:
76:45:67:34:d5:b1:97:57:ec:f8:83:c2:25:a3:20:1b:b4:c1:
07:65:68:cc:fe:20:f0:3d:55:d3:74:5c:cc:66:de:3d:20:2e:
c7:c8:0b:37:c1:ce:b1:15:54:e4:6f:21:ce:9e:87:f3:33:1d:
d8:4f:82:96:4c:f5:18:46:25:2d:81:d1:b7:f6:4d:da:a8:22:
ba:ba:21:50
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAXqWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTExMDc1MDUyWhcNMjUxMDE3MDc1MDUyWjAYMRYw
FAYDVQQDEw02OGMyN2Y2MS02YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArylDy9OxmUTVg8K3/pOnXf6FhrHgCa0NaxtneV5YO6wbkEQSyaKhOxlq
0Nd1uI3Sga11G4/MRpZ3dzyAY1kPUwrqQHIlNgxAWnJdWPl2M9UdbAptE5rrtQKg
B5PQPe/TtEY91BGJSmfIYYJ+yCjr0FGz98tw+zg8cXvaPCs7Xy/ogWyHH6CjcQCq
yPNdxms5ahbivxgNm5sbOFMyFmqAO05OLnmSFDT5RWNVEXhh50FbKfo+R4c7D6BZ
wr0IX6xb2LdhwFrR3YkMv4hXjWKGTgHzR/+SQy9hf4Zs19+i1o0RLA2Mn29kYqVZ
BclnK3tNlOnuhInQ+GmJ2d2bAuhozQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFHCy
Ef1UWyzTFq/tPx9vzyq8mF6wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRDEwMjlBNDhFRTQxMUYwQTg2RjgxRUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBACc6SkDBACc6SoDBAKc82AD
BACc84IDBASc9JADBACc+AADBACc+AQDBAKc+FwwDQYJKoZIhvcNAQELBQADggEB
AHNZmLzdokzbmQyfNWtQDMAKWP05y7LOMTa+zJ/9GaPd8Ps4qNR+vC+ih4mOp1ob
0DCjOjSzql2UKePLbQIVcnDObvrT+U8y0kqFs8F9qHiL8uZ5nofGkQiGipQV52te
viUzWOnyR7HXB0kP+dNy//2N1LOsrgdUNbaA31I7lMsEcNafcDy5wT9Y3FmKkS/Z
aKUYSTv4OnYJ1GH2Lfjryn/f0s4C889DCia/zTXuvTvA4TeDyXZFZzTVsZdX7PiD
wiWjIBu0wQdlaMz+IPA9VdN0XMxm3j0gLsfICzfBzrEVVORvIc6eh/MzHdhPgpZM
9RhGJS2B0bf2TdqoIrq6IVA=
-----END CERTIFICATE-----
Generated at Thu Sep 18 17:59:52 2025 by rpki-client