Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDFE9AC42CB11F09BD638A6DAE4EC9C.roa
File: 6BDFE9AC42CB11F09BD638A6DAE4EC9C.roa (raw, json)
Hash identifier: E3uzIz4/fkxnpOtmvkJ/RxjOKbEvuenLvWL8H+i1lDE=
Subject key identifier: 91:C8:44:B0:5F:37:D6:E8:2A:CE:E7:76:F3:60:FB:08:23:80:19:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0159FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDFE9AC42CB11F09BD638A6DAE4EC9C.roa
Signing time: Fri 06 Jun 2025 11:43:11 +0000
ROA not before: Fri 06 Jun 2025 11:43:06 +0000
ROA not after: Sun 31 Aug 2025 11:43:06 +0000
asID: 399077
IP address blocks: 156.251.9.0/24 maxlen: 24
156.251.11.0/24 maxlen: 24
156.251.12.0/24 maxlen: 24
156.251.13.0/24 maxlen: 24
156.251.14.0/24 maxlen: 24
156.251.15.0/24 maxlen: 24
156.251.16.0/24 maxlen: 24
156.251.17.0/24 maxlen: 24
156.251.18.0/24 maxlen: 24
156.251.19.0/24 maxlen: 24
156.251.20.0/24 maxlen: 24
156.251.21.0/24 maxlen: 24
156.251.22.0/24 maxlen: 24
156.251.23.0/24 maxlen: 24
156.251.24.0/24 maxlen: 24
156.251.25.0/24 maxlen: 24
156.251.26.0/24 maxlen: 24
156.251.28.0/24 maxlen: 24
156.251.29.0/24 maxlen: 24
156.251.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 13:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88570 (0x159fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 11:43:06 2025 GMT
Not After : Aug 31 11:43:06 2025 GMT
Subject: CN=6842d44f-676a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:1d:9e:86:f8:04:c1:99:4e:8d:79:53:7d:
6f:10:7f:53:fd:aa:64:7f:ff:ca:67:b7:db:e4:d1:
99:fd:fb:5d:56:2a:49:5d:79:75:db:b4:14:b4:63:
c6:32:e6:b1:24:9a:8e:df:e7:86:c8:56:19:b2:8f:
48:ed:b7:07:54:6b:a8:81:c7:13:a8:97:1c:e2:aa:
dd:a3:84:d7:cd:b6:00:f4:e3:92:86:a4:63:12:3f:
d4:87:82:dd:1b:0c:3a:39:9c:cf:7c:b4:b6:f0:22:
4b:4b:f3:e6:f2:a7:2b:61:91:49:92:02:60:70:4f:
0b:f1:76:3d:31:57:9e:d5:18:33:fb:76:7a:02:25:
b9:41:c6:81:90:b7:c7:97:8a:ed:3f:22:f7:72:31:
ca:9c:f4:cb:aa:37:ba:d6:58:33:27:5d:d7:5d:18:
3a:91:a0:4a:4f:a5:0d:33:30:f7:e9:92:8a:34:47:
ff:50:85:68:37:38:a8:9e:49:03:59:d0:20:ba:fc:
4e:d9:8e:8a:9f:f1:34:a6:ba:5e:60:2b:57:8d:b7:
07:03:7a:51:a7:71:8a:13:05:e8:b3:9a:d9:2b:4e:
1a:34:a5:3f:7e:49:56:5b:60:19:92:fd:f4:e4:e9:
7f:4b:02:95:50:f4:0d:05:7a:0c:97:52:f5:e6:75:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:44:B0:5F:37:D6:E8:2A:CE:E7:76:F3:60:FB:08:23:80:19:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BDFE9AC42CB11F09BD638A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.9.0/24
156.251.11.0-156.251.26.255
156.251.28.0-156.251.30.255
Signature Algorithm: sha256WithRSAEncryption
2c:ad:85:9e:d8:64:f8:a4:74:94:ef:9a:ea:48:7e:a5:aa:24:
21:7c:71:1e:f6:6f:78:0b:26:a7:ef:4d:de:7a:08:d2:43:f1:
8c:f1:02:81:28:ab:1b:be:3f:b6:96:fd:4a:81:02:28:fe:d7:
fa:7b:d8:4e:f1:8d:fd:c1:da:eb:4b:b3:8b:a1:93:14:c3:f8:
bd:2c:c8:5b:ec:ff:f3:12:fe:1e:5e:9c:5d:f1:2b:22:63:8e:
15:e3:fb:71:70:a2:5f:4b:2a:c4:21:5e:0e:71:78:35:72:5e:
8f:28:86:00:a0:9b:69:aa:7a:14:32:db:45:d9:dc:9a:29:49:
67:1e:b3:4b:12:ed:28:8f:42:86:87:ce:35:cd:4f:87:7e:66:
39:52:fe:63:99:96:95:e9:6f:b3:30:97:10:2f:c1:5e:b1:96:
36:dc:9a:e3:ac:33:c7:22:28:8b:f9:59:b0:8d:d5:ad:c1:7d:
89:8f:cf:aa:71:e3:ed:ce:1b:6e:b2:4a:c2:bf:f6:43:ea:c3:
5b:04:87:85:3e:93:fc:60:16:58:85:09:f7:6b:35:c0:ab:cd:
c7:3e:e3:bd:24:46:fb:53:30:4f:45:67:74:3c:60:c8:cb:3b:
05:a2:a5:3b:e6:2c:0a:18:6e:9f:ff:3e:3d:88:8b:f6:38:81:
b9:da:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:56:07 2025 by rpki-client