Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DA0B6009DCF11F0B6D39C82DAE4EC9C.roa
File: 5DA0B6009DCF11F0B6D39C82DAE4EC9C.roa (raw, json)
Hash identifier: Stt3rFN9mOPvnhfb9TpTTBjQAfmdw2nLEOWb1yO76CU=
Subject key identifier: DC:01:88:E9:00:92:BD:05:EC:9B:58:7B:81:09:6B:23:C9:12:1A:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017E13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DA0B6009DCF11F0B6D39C82DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 07:30:41 +0000
ROA not before: Tue 30 Sep 2025 07:30:36 +0000
ROA not after: Tue 28 Oct 2025 07:30:36 +0000
asID: 44559
IP address blocks: 156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.206.0/24 maxlen: 24
156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97811 (0x17e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 30 07:30:36 2025 GMT
Not After : Oct 28 07:30:36 2025 GMT
Subject: CN=68db8721-e8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:07:41:05:43:ad:ac:60:bc:5b:e0:cf:99:
31:dc:df:47:14:22:4d:21:a2:73:d0:c9:47:1a:cc:
b0:f8:f7:54:21:34:a1:54:dd:8e:d6:51:29:30:fd:
45:03:60:4c:34:e2:7d:7f:26:64:10:c6:1b:25:27:
e3:3c:30:95:10:9f:11:26:37:48:69:09:7c:75:67:
fa:1d:d2:a6:20:65:53:47:07:0c:ad:43:00:c8:bd:
33:28:9d:09:05:fd:58:08:e3:b9:07:1f:8a:d7:d7:
87:b4:61:79:39:84:d9:1d:02:0a:13:d8:63:5e:db:
6f:af:ac:50:60:8d:0d:a8:48:c8:b2:70:a7:4c:30:
e9:eb:35:7a:13:e1:e0:ff:a9:11:46:ca:f2:02:46:
54:3d:f8:87:c2:7c:f5:06:bc:13:6b:19:36:be:ba:
30:b9:bd:95:c6:66:1d:02:89:22:d1:c0:dc:2d:2e:
3b:e5:ed:b7:79:1a:5e:76:32:a3:1b:6b:ed:2c:98:
05:f9:69:da:1c:e6:31:4d:b9:77:9d:00:42:80:10:
bd:1f:70:35:fd:6f:8b:77:fb:50:d2:30:fe:df:73:
6d:f2:78:da:e0:91:3a:a9:3b:73:ae:03:64:0f:c8:
dc:81:0a:2a:3f:4a:cf:81:de:c3:97:69:72:0d:88:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:88:E9:00:92:BD:05:EC:9B:58:7B:81:09:6B:23:C9:12:1A:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DA0B6009DCF11F0B6D39C82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.199.0-156.246.218.255
Signature Algorithm: sha256WithRSAEncryption
1d:13:0b:68:ce:f2:aa:c1:1b:8f:ab:21:ef:f6:f4:7d:b4:c3:
8b:89:bb:30:0b:36:4e:dd:d3:6b:81:0c:09:18:dc:9f:2e:a4:
9e:35:3d:26:25:31:99:50:ec:c2:ea:2f:98:54:6e:7b:9c:b5:
3e:bc:d9:4a:0c:e0:6f:36:9f:bc:82:9c:99:b1:32:47:72:1e:
24:a5:03:d9:50:0d:60:97:7b:85:a3:1e:bd:c1:9a:80:5a:fa:
60:67:24:71:58:47:55:40:74:14:22:51:08:d7:f6:54:f2:34:
2c:b9:b6:ae:35:06:f8:45:a7:c1:d7:51:a1:09:ef:e3:97:94:
b6:d6:d1:b9:78:9f:98:ed:5b:38:90:d5:0c:90:d1:fd:53:77:
57:2c:4a:33:d4:ad:5a:95:3c:36:30:e7:66:be:b4:84:ba:bd:
fd:b5:f7:03:e3:02:ba:07:d6:0f:35:57:84:34:60:52:81:ce:
96:5a:cd:ec:65:c1:7d:50:40:e7:99:3f:73:36:76:cb:3a:2a:
89:69:51:f4:10:71:70:5e:01:09:84:00:30:6f:a1:d9:94:59:
e3:13:83:66:e6:b7:c2:fb:fd:f5:42:cd:da:e8:d1:8f:34:f3:
d3:fc:12:27:9d:b0:0a:c3:fa:a8:33:e5:66:f5:58:fe:cc:c6:
05:58:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:53 2025 by rpki-client