Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20DAEFBA9D7511F0A1BD7DA9DAE4EC9C.roa
File: 20DAEFBA9D7511F0A1BD7DA9DAE4EC9C.roa (raw, json)
Hash identifier: KcY+yXsS/tOFz/amlsL0AuMz3+vt+dvMZ0/5e15dnjw=
Subject key identifier: B6:73:1F:31:1F:90:97:D3:EA:50:A1:54:84:06:14:DA:5A:84:F3:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017DFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20DAEFBA9D7511F0A1BD7DA9DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:44:44 +0000
ROA not before: Mon 29 Sep 2025 20:44:39 +0000
ROA not after: Tue 04 Nov 2025 20:44:39 +0000
asID: 151407
IP address blocks: 156.248.8.0/21 maxlen: 24
156.248.8.0/22 maxlen: 24
156.248.8.0/23 maxlen: 24
156.248.8.0/24 maxlen: 24
156.248.9.0/24 maxlen: 24
156.248.10.0/23 maxlen: 24
156.248.10.0/24 maxlen: 24
156.248.11.0/24 maxlen: 24
156.248.12.0/22 maxlen: 24
156.248.12.0/23 maxlen: 24
156.248.12.0/24 maxlen: 24
156.248.13.0/24 maxlen: 24
156.248.14.0/23 maxlen: 24
156.248.14.0/24 maxlen: 24
156.248.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97787 (0x17dfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 20:44:39 2025 GMT
Not After : Nov 4 20:44:39 2025 GMT
Subject: CN=68daefbc-8cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ce:7b:33:3f:5d:a8:b0:ab:14:bc:d3:20:48:
af:e8:53:14:73:21:1e:0c:33:6f:73:09:9a:9e:ad:
11:f3:05:fc:c9:25:d5:46:20:fc:06:de:7b:bd:fa:
6c:c2:25:03:5a:4c:a2:c8:57:15:8c:b5:c5:62:59:
1e:0e:4f:8d:46:c6:6a:5a:b7:ce:61:4f:e9:ba:d3:
2f:9d:8f:cd:1f:1f:52:c5:d7:2d:8a:d9:a5:c8:91:
3b:d9:f3:41:b4:76:3e:bc:c3:0d:c8:19:8d:eb:c1:
2d:8c:33:3a:de:1d:61:ad:2e:b8:cc:20:af:07:3e:
44:03:ba:2f:a1:52:89:7e:4e:46:59:3b:f3:f1:73:
7f:bb:2e:32:e7:d5:77:5a:75:ed:e0:87:ba:09:fc:
42:27:67:0d:5b:aa:3c:35:4b:3b:76:11:10:99:f3:
6f:bd:2d:30:91:8f:10:77:66:e0:d9:3a:6a:fb:fa:
9d:1e:e6:29:5d:f8:d1:ac:30:b8:2c:ad:20:e1:c2:
b7:a8:2f:30:ce:6c:8b:4e:9a:91:2c:7e:4c:cd:cd:
ed:1f:c6:6b:a7:32:b1:50:0e:28:5d:15:fd:b0:58:
68:fc:4b:24:10:9c:13:05:ed:7f:4b:80:04:21:8b:
0f:87:d0:bf:0f:9c:d5:55:42:d2:b6:25:63:82:53:
5f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:1F:31:1F:90:97:D3:EA:50:A1:54:84:06:14:DA:5A:84:F3:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20DAEFBA9D7511F0A1BD7DA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.8.0/21
Signature Algorithm: sha256WithRSAEncryption
00:ae:b1:8c:7c:6b:c1:bf:ef:df:6a:69:c6:8a:15:2e:1b:a3:
da:d7:fb:c8:06:10:b5:9c:cf:28:ee:67:ce:cd:f4:fe:d5:5c:
b9:62:93:e5:eb:7d:8b:08:d3:d4:50:2a:56:8d:60:53:e9:05:
7d:48:2e:b0:ae:eb:4b:aa:6d:52:71:af:12:79:82:4c:b7:fe:
db:47:70:85:9a:60:7c:d4:1e:87:1b:17:d2:72:17:73:a1:e8:
91:00:c9:82:8a:6e:fb:e3:36:36:e3:b0:da:b9:61:34:26:04:
0d:b6:78:97:31:c7:eb:dd:e2:76:ea:c5:3b:23:fb:c9:d6:49:
96:5e:f6:8c:da:41:f8:59:b3:3e:5c:bd:2f:34:05:e9:5d:84:
ee:28:9d:03:ad:81:c7:98:d4:b6:30:30:5c:30:df:4c:7e:2d:
29:8d:49:3a:df:ad:0c:17:e2:1f:21:ff:a1:1a:be:41:b6:04:
c1:53:cb:89:df:2a:0d:ba:42:33:a3:50:7a:54:49:2a:29:5f:
f8:00:fd:d1:6e:1f:d8:ec:a2:c0:ef:0b:b4:1f:72:ea:86:3b:
e0:e2:3c:e6:87:80:ca:dd:31:f8:cc:c3:dc:58:43:3e:16:6c:
4a:db:c5:77:1e:e2:79:e5:63:dc:46:2a:b7:e5:3a:b5:d6:29:
19:f6:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:58 2025 by rpki-client