Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF2D0B487F011F0BD65F597DAE4EC9C.roa
File: 4FF2D0B487F011F0BD65F597DAE4EC9C.roa (raw, json)
Hash identifier: uGwnGK8QnGtonrfti53ocgy7cajLVtL9SAv3nl2N2Gc=
Subject key identifier: B8:0E:F7:A3:11:A1:E5:32:32:48:A2:D8:02:AD:8F:7E:EF:65:52:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017662
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF2D0B487F011F0BD65F597DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 11:31:05 +0000
ROA not before: Tue 02 Sep 2025 11:31:01 +0000
ROA not after: Fri 10 Oct 2025 11:31:01 +0000
asID: 141159
IP address blocks: 156.233.224.0/24 maxlen: 24
156.233.225.0/24 maxlen: 24
156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
156.233.236.0/24 maxlen: 24
156.233.237.0/24 maxlen: 24
156.233.238.0/24 maxlen: 24
156.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95842 (0x17662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 11:31:01 2025 GMT
Not After : Oct 10 11:31:01 2025 GMT
Subject: CN=68b6d579-3538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:0c:60:af:6b:95:4d:a4:c9:a4:e7:08:40:
13:0a:f4:98:b2:c3:e3:01:d2:6f:76:47:a9:32:79:
22:3f:61:08:f4:6c:5f:8f:ee:50:20:e7:d6:47:bf:
fe:a9:3f:0c:4c:02:cb:73:78:f3:5a:40:2f:bc:ca:
6d:fe:26:a2:66:ee:63:f0:22:bb:49:7d:cd:42:d6:
39:2f:2a:e3:14:7c:44:4b:d3:c1:e7:f3:c2:6a:cf:
ea:0b:21:b1:d1:cf:50:b0:57:a7:02:93:bb:75:c0:
b8:d8:cf:72:4e:96:df:69:20:89:bd:ab:37:83:44:
d1:c2:84:4d:65:6c:dd:58:db:50:f7:5f:a2:76:67:
79:15:2f:b2:01:a3:38:f7:fb:09:28:cb:e6:82:83:
0f:82:af:d7:aa:f1:2d:a0:e4:41:b7:83:f8:f2:c1:
1a:1a:05:63:6d:9d:7f:a4:2e:78:79:95:47:87:cb:
c7:2b:9d:e6:2e:45:c7:f6:93:62:8f:af:40:c2:47:
f0:60:13:3d:6e:a7:3f:03:8c:65:82:b8:1e:09:26:
1f:c5:05:7e:e1:06:6b:c3:e9:1e:a3:8a:33:76:e5:
fc:c1:62:07:c4:15:da:17:98:9b:49:fc:b4:ec:38:
9a:1f:c8:e3:91:a5:03:13:bc:4f:20:35:49:2e:68:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:F7:A3:11:A1:E5:32:32:48:A2:D8:02:AD:8F:7E:EF:65:52:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF2D0B487F011F0BD65F597DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/23
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:00:d3:2c:83:f8:ae:21:d9:ad:d7:00:6d:ae:e7:fd:6f:1f:
b9:6d:32:e3:de:e6:a5:f8:91:e6:8c:da:ed:2e:e5:1c:b1:51:
d0:d3:ca:52:6d:9b:e4:30:8b:a2:d6:e3:30:36:78:19:9b:a9:
63:f4:97:5b:db:1b:17:7d:9d:1e:d1:5b:3b:dd:c5:61:41:4a:
f2:e4:01:d0:f8:87:7f:3f:6a:89:5a:47:61:da:fe:75:d0:ad:
c4:86:90:63:5e:c6:1f:4b:04:67:9d:a2:48:f9:97:90:0e:be:
7f:bb:b1:0b:bf:8e:82:fd:99:46:07:0b:bb:f7:e8:29:42:0f:
be:7a:68:cf:20:61:7e:fd:8d:23:d4:a8:e3:da:fa:45:4f:eb:
74:1d:a9:6f:17:4a:cc:e2:10:78:a8:27:ae:97:f8:75:d4:38:
bf:36:db:06:90:e2:32:11:32:62:04:09:df:6d:e7:b2:cf:f4:
4a:4f:2e:7a:d3:10:fc:ec:48:3c:c0:66:ca:93:b5:99:15:63:
c0:55:d9:e5:e2:16:4a:82:45:d0:16:fd:a9:35:87:45:9b:60:
40:e8:6f:ac:ba:8c:86:90:44:9d:84:36:07:79:ff:8d:70:80:
e9:ff:f2:6d:21:f2:03:d3:ee:33:1a:95:91:58:0d:d2:85:5b:
d0:70:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:10:53 2025 by rpki-client