Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89834C56946F11F084A78ACEDAE4EC9C.roa
File: 89834C56946F11F084A78ACEDAE4EC9C.roa (raw, json)
Hash identifier: fJT/U78O3YpkjBPLqNTtVl2BqFhm8INOQn+fMMdftOI=
Subject key identifier: CE:A7:3D:A0:90:04:78:17:97:50:23:A4:B3:0B:D7:89:2E:EB:55:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017BE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89834C56946F11F084A78ACEDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 09:12:02 +0000
ROA not before: Thu 18 Sep 2025 09:11:57 +0000
ROA not after: Thu 30 Oct 2025 09:11:57 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97257 (0x17be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 18 09:11:57 2025 GMT
Not After : Oct 30 09:11:57 2025 GMT
Subject: CN=68cbcce2-94a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:37:07:44:ff:a8:52:db:b6:8d:09:6b:2d:
7f:85:52:04:fc:74:6a:f9:9e:17:c7:98:d3:05:74:
d4:72:74:7e:ed:c7:19:10:d7:0a:54:ab:79:a9:6b:
a3:7f:d7:7b:d5:7f:e5:a1:3a:30:de:22:f9:42:2f:
66:04:78:8b:77:b3:43:c5:f4:1e:85:6d:c0:5a:b9:
1f:22:ea:20:b6:15:2f:2f:c9:a4:d4:0a:e9:21:e6:
e7:a1:12:89:b3:38:4c:39:4d:a0:cc:b4:4d:d7:a2:
47:f8:f9:15:f6:e2:6b:c4:af:ca:b6:54:57:0d:1e:
19:2e:14:a3:3d:8a:5b:d5:35:b3:19:58:c5:40:d8:
6d:89:f6:35:4e:0f:5a:63:91:a7:be:21:47:e5:a1:
01:6d:35:35:75:7c:b0:65:32:33:75:c3:e1:04:1a:
f1:e1:20:51:ba:99:79:f7:eb:74:13:64:a3:86:73:
9c:e2:fe:b8:42:e9:56:44:f4:37:89:b0:50:fa:f7:
40:1c:9e:5f:d3:28:66:75:de:23:7f:6e:b7:52:d3:
4c:64:e1:7e:7c:74:47:3d:75:6e:62:74:99:14:29:
77:79:33:f8:f1:ea:8a:67:ba:11:92:46:0d:ce:e0:
f2:f5:5b:7a:e4:5a:ec:cf:59:4a:13:0e:4a:4e:a6:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:3D:A0:90:04:78:17:97:50:23:A4:B3:0B:D7:89:2E:EB:55:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89834C56946F11F084A78ACEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.188.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:74:bc:cf:9e:b2:0e:fd:26:26:8e:5c:fc:60:d0:72:84:1e:
65:40:e3:2a:23:76:7f:51:8b:14:11:df:3c:c8:5b:62:5f:4d:
43:ae:25:32:5e:d5:64:d8:78:2b:f9:8a:1c:00:ac:e1:5e:f1:
40:b0:33:37:0b:9a:a7:4a:bc:df:48:9f:5d:a5:36:b0:69:76:
63:14:0b:2b:cf:cd:ba:04:98:f7:30:d9:0d:26:d8:95:31:86:
50:55:d1:d7:11:45:84:88:fd:11:90:f3:7a:2c:5c:cf:02:86:
b4:46:8e:cd:95:7b:2e:78:9c:cb:de:ff:f3:c0:37:0e:e1:e3:
ac:ec:fc:fc:5a:dc:66:a1:f0:19:21:59:2b:3c:2c:04:bb:9b:
d4:ad:f9:6f:64:77:07:d6:39:b0:0c:78:a2:bb:48:d7:50:50:
7a:67:ad:b0:86:26:83:1c:f5:57:a6:26:44:2e:bc:ef:58:6d:
de:a7:98:ec:e6:2e:4e:e3:fc:40:30:58:2b:8e:89:fe:c6:94:
5a:79:b2:3f:06:b8:e5:85:e9:85:fe:a8:4a:d3:34:b6:42:d0:
4d:99:1d:05:2f:06:47:ea:ea:7a:17:89:7c:b8:41:b1:49:a6:
11:3f:1b:ad:aa:7c:f7:3f:39:e7:2c:5b:2f:e8:c6:24:09:94:
db:80:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:23 2025 by rpki-client