Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F08C8483EF11F0886C33F4DAE4EC9C.roa
File: 61F08C8483EF11F0886C33F4DAE4EC9C.roa (raw, json)
Hash identifier: +BOCXLAHURJ4zdsRa1dI4Xoxg2eE+7vhQy+HS14LkkE=
Subject key identifier: 8E:C5:AA:BF:4D:74:A7:1D:8C:3F:E0:DB:8F:6B:0E:D4:A5:7F:CB:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01725F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F08C8483EF11F0886C33F4DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 09:14:22 +0000
ROA not before: Thu 28 Aug 2025 09:14:13 +0000
ROA not after: Sun 19 Jul 2026 09:14:13 +0000
asID: 132471
IP address blocks: 156.229.32.0/23 maxlen: 24
156.229.32.0/24 maxlen: 24
156.229.33.0/24 maxlen: 24
156.229.34.0/23 maxlen: 24
156.229.34.0/24 maxlen: 24
156.229.35.0/24 maxlen: 24
156.229.36.0/24 maxlen: 24
156.229.37.0/24 maxlen: 24
156.229.38.0/24 maxlen: 24
156.229.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94815 (0x1725f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 09:14:13 2025 GMT
Not After : Jul 19 09:14:13 2026 GMT
Subject: CN=68b01ded-207f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:ce:a7:37:48:3b:8a:eb:31:af:08:4e:ac:
d3:be:5d:23:69:66:ab:eb:b2:73:59:4b:55:56:ef:
3a:dc:d6:c0:aa:ee:89:f3:f6:39:cd:eb:f7:f6:6d:
85:95:05:f7:73:7b:a6:eb:70:31:cf:3f:8a:f9:9b:
9e:14:a5:5c:2c:02:a9:93:54:0b:b1:2b:3e:09:5b:
22:73:10:c0:64:04:35:6a:5c:e1:d3:7e:09:e2:04:
f3:bd:cd:c0:08:7c:88:c4:8c:63:7d:73:98:8b:fb:
7b:2b:5e:09:06:45:3a:45:ce:6c:37:16:ea:9b:e9:
49:68:30:0e:8f:50:c2:5e:34:53:80:64:eb:a1:45:
ca:f8:54:10:c3:e6:ef:31:5c:87:50:c3:01:f9:15:
2a:6c:85:d9:6d:5f:e5:77:9d:90:12:aa:2b:77:bb:
38:84:4e:7a:98:08:65:33:80:c6:98:9f:19:1b:b1:
0c:ab:c4:92:74:e5:ce:48:5c:8a:b0:dd:40:17:0d:
58:99:2f:8d:83:7b:3d:f1:3a:5f:cc:43:98:a2:96:
1c:9d:2a:0c:06:dd:77:d9:52:98:6e:5e:f5:f7:de:
8f:9b:b3:fa:b8:89:5c:d6:03:21:5c:6c:51:74:3c:
90:a5:67:72:85:b4:08:96:67:9d:e7:d4:6c:dc:d1:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C5:AA:BF:4D:74:A7:1D:8C:3F:E0:DB:8F:6B:0E:D4:A5:7F:CB:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F08C8483EF11F0886C33F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.32.0/21
Signature Algorithm: sha256WithRSAEncryption
23:b8:fd:3a:6c:d6:57:34:fd:e5:35:f4:4c:ed:fe:5c:d4:14:
fe:e5:07:2c:ba:ac:4f:49:cf:c8:fb:54:f1:60:bb:2a:30:b4:
f3:ce:01:5e:1b:b1:46:d0:09:2d:f0:75:90:38:4d:19:69:5e:
a7:35:11:e4:ad:28:93:79:aa:ea:64:ce:82:cd:07:d5:c3:b9:
69:17:e3:c7:49:9b:a0:f5:77:d5:36:2f:ec:23:7d:18:2b:b7:
c6:26:e7:3c:d9:03:9a:45:b8:db:b2:a9:4b:e9:0c:a2:dc:e2:
e6:38:87:e1:28:0d:06:86:59:98:bd:ea:12:da:04:3c:83:33:
78:f9:32:15:15:0c:ce:70:f2:c0:ef:0b:aa:a9:64:ba:93:af:
d9:14:de:82:8a:de:02:62:c4:83:d5:a0:65:f3:a2:58:18:21:
65:be:fd:3a:3d:c8:09:fc:88:99:90:aa:f7:97:4f:23:1f:e7:
22:47:74:2d:c7:d4:2d:69:10:b1:36:89:00:62:df:d8:19:67:
ba:b2:ff:60:9b:cf:8b:7b:15:b0:fe:20:98:c0:c9:17:cb:4c:
d9:92:58:94:62:54:f9:34:ba:2f:9d:3c:2e:20:fa:90:e2:f8:
91:1b:fd:d9:86:17:ea:ca:88:63:01:25:4d:34:24:cb:9f:15:
8e:0e:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:56 2025 by rpki-client