Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1219A24A840D11F089ABEBB4DAE4EC9C.roa
File: 1219A24A840D11F089ABEBB4DAE4EC9C.roa (raw, json)
Hash identifier: jh/xEOGjg4LH/j77WtFTs+n+e8KPQisGTvAaimaiquU=
Subject key identifier: 57:C2:91:4A:A6:77:D0:C6:47:28:19:EE:1D:69:9D:87:63:F7:68:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01729B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1219A24A840D11F089ABEBB4DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 12:46:53 +0000
ROA not before: Thu 28 Aug 2025 12:46:47 +0000
ROA not after: Tue 30 Sep 2025 12:46:47 +0000
asID: 62468
IP address blocks: 156.245.248.0/21 maxlen: 24
156.245.248.0/24 maxlen: 24
156.245.249.0/24 maxlen: 24
156.245.250.0/24 maxlen: 24
156.245.251.0/24 maxlen: 24
156.245.252.0/24 maxlen: 24
156.245.253.0/24 maxlen: 24
156.245.254.0/24 maxlen: 24
156.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94875 (0x1729b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 12:46:47 2025 GMT
Not After : Sep 30 12:46:47 2025 GMT
Subject: CN=68b04fbd-53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:c8:2d:70:74:bf:5c:8c:49:c7:aa:82:f3:
c7:ae:fb:17:02:27:02:c0:26:ec:04:1e:eb:2e:a6:
59:da:ba:2d:d2:ed:98:2d:50:2c:aa:dc:34:6d:3d:
74:c9:42:ae:d2:36:8a:83:07:d7:42:8a:e0:28:38:
fc:64:17:c5:6c:6a:d9:fe:be:4e:6f:4e:a7:56:d9:
24:32:a2:a0:d1:75:04:fc:97:af:83:f3:14:14:61:
c6:dd:d1:7f:3f:ef:d3:2a:7f:77:53:ab:fa:a1:01:
a7:b4:5b:c2:08:f8:2a:e8:af:14:a0:7c:fc:c8:e2:
b2:1f:7e:68:0c:9a:e3:f9:86:1d:b1:03:ba:7c:f3:
f2:0f:af:78:0a:57:74:43:d4:e6:59:8b:ca:53:7a:
d4:36:b4:21:06:31:ae:5a:5a:13:41:d8:3c:15:99:
60:dc:5e:28:99:da:cb:eb:51:a4:ca:3b:19:ad:b9:
b9:08:01:c3:17:6d:bb:2d:e1:68:45:14:6b:2a:c5:
23:98:8c:37:0f:a5:52:48:0b:88:66:e1:67:86:b7:
4a:eb:18:66:f2:d1:64:c2:eb:b6:bd:79:a8:5f:6c:
de:81:e8:df:00:94:68:a0:c3:59:14:60:ae:06:9d:
d2:f7:43:57:d3:c1:36:dd:bc:24:76:51:7a:15:d8:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:91:4A:A6:77:D0:C6:47:28:19:EE:1D:69:9D:87:63:F7:68:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1219A24A840D11F089ABEBB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:8e:15:d3:dc:90:f4:f0:8f:8a:09:3c:c0:7f:f3:5a:40:9a:
32:51:4f:77:93:5f:e2:5b:82:3e:37:a8:5d:d0:7f:1f:7e:32:
4e:44:00:49:e2:dd:22:6d:da:36:3e:d2:41:3d:84:35:80:3e:
c5:8e:ba:cd:fb:c1:35:92:2f:6c:34:c3:4e:20:16:82:a0:48:
e2:f9:47:52:f1:7f:8e:1c:2d:3b:20:a1:ff:12:ad:9a:87:a9:
09:b8:d2:37:7d:4d:4f:51:0d:bc:39:32:ca:b7:2d:d3:63:61:
4b:c4:ae:8c:4b:c2:2d:71:4d:d0:4a:64:8a:ca:25:f4:f6:5d:
5b:12:46:c9:87:d3:97:bd:11:48:35:27:ce:8a:23:be:22:9f:
f5:18:2e:7e:f6:90:9d:d7:9a:46:aa:64:9e:e1:89:00:f4:4d:
fd:6e:b4:0f:a3:53:ca:00:19:26:81:66:6c:07:66:33:19:88:
32:78:55:70:56:af:20:2b:a4:4c:5c:fc:f1:31:e7:a5:3b:d5:
d6:2e:1a:f4:4d:a0:3d:e9:ff:8c:98:db:55:77:47:6b:6f:89:
ac:05:87:52:94:e1:3b:ca:04:e4:de:78:f3:e7:27:9c:a3:b3:
4b:b3:5e:22:99:4e:41:88:ed:e9:28:c0:7c:99:3f:fe:c2:14:
d1:26:55:20
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXKbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MTI0NjQ3WhcNMjUwOTMwMTI0NjQ3WjAYMRYw
FAYDVQQDEw02OGIwNGZiZC01M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzKLILXB0v1yMSceqgvPHrvsXAicCwCbsBB7rLqZZ2rot0u2YLVAsqtw0
bT10yUKu0jaKgwfXQorgKDj8ZBfFbGrZ/r5Ob06nVtkkMqKg0XUE/Jevg/MUFGHG
3dF/P+/TKn93U6v6oQGntFvCCPgq6K8UoHz8yOKyH35oDJrj+YYdsQO6fPPyD694
Cld0Q9TmWYvKU3rUNrQhBjGuWloTQdg8FZlg3F4omdrL61GkyjsZrbm5CAHDF227
LeFoRRRrKsUjmIw3D6VSSAuIZuFnhrdK6xhm8tFkwuu2vXmoX2zegejfAJRooMNZ
FGCuBp3S90NX08E23bwkdlF6FdgrjwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFfC
kUqmd9DGRygZ7h1pnYdj92h1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMjE5QTI0QTg0MEQxMUYwODlBQkVCQjREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPX4MA0GCSqGSIb3DQEBCwUA
A4IBAQA6jhXT3JD08I+KCTzAf/NaQJoyUU93k1/iW4I+N6hd0H8ffjJORABJ4t0i
bdo2PtJBPYQ1gD7FjrrN+8E1ki9sNMNOIBaCoEji+UdS8X+OHC07IKH/Eq2ah6kJ
uNI3fU1PUQ28OTLKty3TY2FLxK6MS8ItcU3QSmSKyiX09l1bEkbJh9OXvRFINSfO
iiO+Ip/1GC5+9pCd15pGqmSe4YkA9E39brQPo1PKABkmgWZsB2YzGYgyeFVwVq8g
K6RMXPzxMeelO9XWLhr0TaA96f+MmNtVd0drb4msBYdSlOE7ygTk3njz5yeco7NL
s14imU5BiO3pKMB8mT/+whTRJlUg
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:22:18 2025 by rpki-client