Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D7DFD8889611F0A18414C5DAE4EC9C.roa
File: 22D7DFD8889611F0A18414C5DAE4EC9C.roa (raw, json)
Hash identifier: i6DKASKBNC96jPj94dVE5He+nNLHhdFtALQmr7N0kXU=
Subject key identifier: AE:76:1A:C2:AF:BF:55:EA:C1:A4:AB:C0:66:0E:14:83:50:1E:B3:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017748
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D7DFD8889611F0A18414C5DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:18:06 +0000
ROA not before: Wed 03 Sep 2025 07:18:02 +0000
ROA not after: Mon 01 Dec 2025 07:18:02 +0000
asID: 399077
IP address blocks: 156.251.40.0/24 maxlen: 24
156.251.41.0/24 maxlen: 24
156.251.42.0/24 maxlen: 24
156.251.43.0/24 maxlen: 24
156.251.44.0/24 maxlen: 24
156.251.45.0/24 maxlen: 24
156.251.46.0/24 maxlen: 24
156.251.47.0/24 maxlen: 24
156.251.50.0/24 maxlen: 24
156.251.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96072 (0x17748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 07:18:02 2025 GMT
Not After : Dec 1 07:18:02 2025 GMT
Subject: CN=68b7ebae-bd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:c8:ce:c4:e1:48:92:66:c1:fd:28:71:f0:
a1:9a:9b:85:d2:a3:cc:42:c4:96:39:9c:8b:7f:1c:
2d:d0:f5:d1:cf:bf:f7:bf:d7:38:72:13:95:d7:93:
b3:db:7d:67:ea:c1:b7:6e:70:ab:55:fe:aa:b0:ee:
fd:4a:90:3b:33:18:5f:c0:a7:a7:1e:ca:b2:56:fe:
64:34:5a:0b:72:f3:b5:ff:dd:e2:8c:b5:2e:0b:df:
34:02:b4:d5:da:d1:86:e0:03:70:f5:0c:c3:96:b5:
7a:4e:9b:63:7f:96:0e:f6:f9:34:de:12:79:37:1b:
2b:0a:a9:9c:8a:f5:a9:71:f7:55:06:23:27:5d:c2:
58:f0:b8:46:82:e4:1a:cf:71:a6:3e:a2:9c:a4:45:
24:65:42:41:aa:b7:35:20:9f:14:80:d0:af:39:9b:
7b:80:0b:4d:dd:b4:8c:9b:c4:99:a4:d6:27:9b:d9:
45:a1:8d:31:17:d2:c9:ed:9c:12:4d:89:74:a6:22:
49:bc:05:17:0d:29:b9:dc:80:4d:53:3b:0e:04:7c:
1a:f5:48:fd:95:b5:43:42:9a:cc:bc:c3:29:2e:11:
2f:19:64:d0:e1:4b:17:cc:15:04:95:93:12:40:c0:
7d:8f:d3:65:9e:47:16:27:bc:4a:9c:3d:f6:c4:11:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:1A:C2:AF:BF:55:EA:C1:A4:AB:C0:66:0E:14:83:50:1E:B3:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22D7DFD8889611F0A18414C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.40.0/21
156.251.50.0/23
Signature Algorithm: sha256WithRSAEncryption
26:dc:51:dd:5f:69:82:66:a8:d5:6a:2e:e6:18:34:d2:a1:33:
fd:bf:da:00:e3:8d:b8:55:24:ba:b8:5b:ea:7a:2f:5b:b0:8c:
ec:13:76:d3:90:67:57:79:0b:91:d0:72:f8:51:9d:f3:32:d2:
1b:dd:88:fe:64:7c:1b:6a:ed:a2:58:8f:4a:a7:16:7b:3a:ae:
06:9a:b9:ba:4c:b7:af:97:dc:30:cd:f2:27:a9:5c:4d:73:cf:
9c:0c:dd:2c:9e:86:c2:b3:55:d7:8c:76:e2:17:5d:31:bc:8c:
2e:0f:f4:11:5a:8a:05:f3:96:6f:37:c1:88:4c:f0:85:a5:32:
e1:ad:84:75:03:0a:31:b1:b2:a7:31:f3:78:72:19:42:ac:0f:
61:46:47:d0:61:f5:23:0d:b8:c9:1d:a4:72:ad:1a:4a:62:7a:
cc:95:77:a4:9a:6a:d6:5a:4a:05:93:81:90:79:de:0e:77:18:
15:ba:24:66:ea:06:95:cd:92:6f:c3:86:ac:1b:65:1f:ca:df:
cd:ce:88:14:9d:57:e2:93:0d:b8:0e:16:80:d4:e2:bd:05:11:
f0:79:d9:37:a0:13:36:d8:7f:54:ef:4d:b2:fb:e9:25:bd:6f:
34:f4:e3:b7:e9:d7:b3:0b:e1:de:c9:f4:56:a6:20:48:f6:42:
5a:b2:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:26 2025 by rpki-client