Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27A258BC83F611F09DA932A0DAE4EC9C.roa
File: 27A258BC83F611F09DA932A0DAE4EC9C.roa (raw, json)
Hash identifier: k6AJnKwE9LlonWhITqBIhAuFmAqSb7u5rwDyw6AuywI=
Subject key identifier: 65:5A:D8:4C:C2:6F:49:86:63:29:5C:AF:BB:33:A8:7D:DC:92:E7:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01726E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27A258BC83F611F09DA932A0DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 10:02:50 +0000
ROA not before: Thu 28 Aug 2025 10:02:45 +0000
ROA not after: Sun 28 Sep 2025 10:02:45 +0000
asID: 44559
IP address blocks: 156.246.219.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
156.246.229.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
156.246.234.0/24 maxlen: 24
156.246.235.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94830 (0x1726e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 10:02:45 2025 GMT
Not After : Sep 28 10:02:45 2025 GMT
Subject: CN=68b0294a-791f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:ab:e9:e2:3e:8c:c7:47:8b:3a:02:6c:d5:
67:9e:d2:3a:c8:b5:61:39:f4:73:20:1d:55:50:39:
25:bd:ff:01:ef:5f:5c:02:1e:11:17:be:c3:41:3c:
70:26:69:2c:2d:17:df:5c:32:44:f0:2c:18:62:ad:
24:38:12:ca:10:4d:f8:a4:c8:a0:af:58:a8:96:6b:
fc:a6:b2:2f:ee:de:ef:d0:52:98:48:f5:0b:4c:07:
50:f2:4c:cb:c0:de:b4:7c:9b:47:43:ed:06:6d:32:
2a:65:70:c5:71:c2:9b:3e:2e:0a:ed:81:e7:32:31:
21:91:94:de:94:73:e1:38:8c:b9:68:10:36:64:3f:
14:e1:86:45:e1:8a:b2:76:13:be:b8:1d:e7:1c:c0:
73:8b:77:f1:38:45:cc:be:e8:60:22:29:e6:7f:d0:
e4:2d:a2:68:c2:7f:74:39:62:59:ca:1b:30:38:2a:
5e:a9:60:20:75:98:de:0b:a5:8d:67:7e:70:4c:c9:
ae:18:6d:97:06:fd:c5:ac:e3:88:3f:bb:e3:95:fe:
c1:ca:53:00:b3:8b:55:2b:7f:2f:4c:5a:a5:08:ad:
d3:4f:31:88:bf:a0:d0:33:9c:86:ec:a7:58:26:8d:
fd:9b:6b:e4:1a:01:aa:1c:11:0a:21:72:37:35:8a:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:D8:4C:C2:6F:49:86:63:29:5C:AF:BB:33:A8:7D:DC:92:E7:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27A258BC83F611F09DA932A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.219.0-156.246.238.255
Signature Algorithm: sha256WithRSAEncryption
2a:e4:31:69:16:dd:c8:ac:27:3e:b3:c0:1b:39:dc:fd:91:98:
a5:98:4f:36:3b:55:3c:13:74:23:a2:1e:4d:cb:6f:5d:81:13:
94:ce:13:19:e6:fc:f6:73:e0:40:fa:93:b5:fd:33:2b:1f:a1:
90:ef:3d:44:93:24:a2:5b:f7:f8:14:bc:36:d9:2b:fe:d2:7b:
97:7d:a4:49:98:d8:4e:7b:ae:dc:c0:8d:a3:7c:67:44:c3:33:
a8:1d:c5:60:05:3d:60:09:7a:f8:a6:15:c6:91:d0:89:fb:49:
62:d1:66:b8:27:05:8e:bc:9c:0b:bc:f9:42:ae:5b:e8:ce:df:
03:5d:4b:0c:ab:24:90:a5:5e:cc:e7:c6:27:15:d0:9c:8e:0b:
a6:b2:f5:f4:c0:ba:02:2e:0c:c6:23:72:ac:42:00:71:30:c0:
11:e2:6a:ce:a3:ff:6a:06:62:94:6a:52:a8:cc:d7:55:f6:5b:
12:b2:4e:39:00:c2:c3:5a:4d:a0:06:97:38:55:66:3e:10:58:
ff:92:97:0a:1e:90:8b:b3:68:ff:68:91:02:39:3a:13:d2:3f:
02:f1:6a:eb:0c:86:7e:3b:bf:0e:1f:95:1f:2d:17:bc:6b:9c:
7a:51:8c:84:da:7c:fc:69:85:d9:15:c7:23:5a:15:47:7f:c3:
e1:34:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:31 2025 by rpki-client