Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32EB66A08D6011F0B5702EE0DAE4EC9C.roa
File: 32EB66A08D6011F0B5702EE0DAE4EC9C.roa (raw, json)
Hash identifier: PP2wgjsf+5C2vCX79OfoHSyi9K424QGHlTE6hrSxdgY=
Subject key identifier: 74:74:5E:61:1E:BF:52:52:33:9A:1E:03:97:87:99:64:9C:65:D9:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017A14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32EB66A08D6011F0B5702EE0DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 09:34:36 +0000
ROA not before: Tue 09 Sep 2025 09:34:31 +0000
ROA not after: Thu 16 Oct 2025 09:34:31 +0000
asID: 22773
IP address blocks: 156.238.171.0/24 maxlen: 24
156.238.189.0/24 maxlen: 24
156.239.56.0/24 maxlen: 24
156.239.149.0/24 maxlen: 24
156.239.150.0/24 maxlen: 24
156.239.151.0/24 maxlen: 24
156.239.152.0/24 maxlen: 24
156.239.153.0/24 maxlen: 24
156.242.0.0/24 maxlen: 24
156.242.1.0/24 maxlen: 24
156.242.54.0/24 maxlen: 24
156.242.55.0/24 maxlen: 24
156.242.56.0/24 maxlen: 24
156.242.57.0/24 maxlen: 24
156.242.58.0/24 maxlen: 24
156.242.59.0/24 maxlen: 24
156.242.60.0/24 maxlen: 24
156.242.61.0/24 maxlen: 24
156.242.62.0/24 maxlen: 24
156.242.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96788 (0x17a14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 09:34:31 2025 GMT
Not After : Oct 16 09:34:31 2025 GMT
Subject: CN=68bff4ac-324c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:16:cb:62:0a:ec:66:a4:ac:fe:ee:44:7e:
44:77:a9:2c:3c:7e:40:f6:d4:e7:c5:da:a9:c8:00:
77:4c:7d:a9:7e:35:eb:4c:53:b7:9b:d7:a2:81:8f:
6c:2f:bd:34:aa:43:65:c7:26:85:bc:41:cb:05:37:
3d:00:02:af:4c:d0:0c:45:76:9e:35:35:ce:63:39:
2f:09:a3:e0:d0:1c:76:cc:b0:5a:67:a2:e8:3f:ad:
bc:55:80:d8:b6:d1:9c:95:2e:29:b4:66:96:18:9c:
14:08:b4:bf:4b:84:da:74:fa:ce:89:ed:69:51:45:
a6:dc:85:8b:3e:ad:f1:8a:c4:d0:2f:b4:91:76:28:
ee:23:cf:d0:0b:a3:51:aa:14:bc:f7:e1:5b:18:f4:
fc:c4:6a:a9:11:39:c7:32:c4:d3:c6:eb:e3:30:28:
f3:cd:ff:6f:e4:d9:ac:d9:0a:f7:6e:6b:04:89:cf:
5d:14:12:1e:e4:78:ef:cb:76:a1:38:f3:3b:cc:0c:
99:56:42:54:df:2a:ce:60:e8:a1:1e:bf:89:f0:b9:
63:7d:cd:d9:56:18:d1:5f:db:d7:5f:19:63:af:de:
46:fe:bc:dc:61:b6:23:26:8a:4b:63:17:f9:99:5e:
43:03:77:fa:43:da:27:ba:11:09:d6:94:8a:43:21:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:5E:61:1E:BF:52:52:33:9A:1E:03:97:87:99:64:9C:65:D9:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32EB66A08D6011F0B5702EE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.171.0/24
156.238.189.0/24
156.239.56.0/24
156.239.149.0-156.239.153.255
156.242.0.0/23
156.242.54.0-156.242.63.255
Signature Algorithm: sha256WithRSAEncryption
4d:06:34:4e:45:b4:0f:19:2d:38:8f:82:2a:48:ad:a8:78:27:
82:cc:1f:fa:f7:a7:bc:3f:a1:3a:1e:93:f8:14:a7:c3:b9:d5:
a0:62:70:d8:a1:c7:e8:03:16:b6:1d:04:33:d2:04:dc:a9:86:
12:49:83:22:00:77:02:4a:49:74:5b:69:2e:a7:89:24:fa:9c:
d7:ad:76:3d:e8:55:77:b8:ee:35:26:47:27:6d:40:02:bd:74:
d5:0a:37:e9:bf:44:03:b3:f4:ce:d4:2a:5a:87:d2:cf:0b:da:
a5:c0:4a:d4:e5:61:4b:de:fa:ea:2e:ee:0f:86:80:15:c3:13:
6e:fb:4c:4d:d9:b9:a2:0d:c6:6e:c9:59:56:25:5e:d9:46:b0:
51:15:0f:16:d2:18:25:0f:a9:3e:2c:bf:21:08:e8:16:55:47:
ee:09:47:bf:75:98:58:29:fe:65:e4:4d:ab:cc:b0:82:f0:a1:
f4:48:6f:52:b5:b3:13:32:d1:63:e2:4f:12:99:15:b9:6c:4b:
27:50:c6:42:84:a5:79:3d:d5:fb:73:c3:ae:08:9d:07:4a:7c:
36:16:c9:6c:dd:2a:a4:cd:f9:86:bd:bb:f6:77:d8:a6:06:53:
ed:71:66:4c:8f:03:d2:f6:d6:64:eb:cf:b1:1d:89:0b:a5:63:
ba:a3:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:30:45 2025 by rpki-client