Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90040082AD9911F088289E99DAE4EC9C.roa
File: 90040082AD9911F088289E99DAE4EC9C.roa (raw, json)
Hash identifier: mE2RQQpr9V8xPJs3j4QAizjF0IzfYXyBmwNmV6mO3i8=
Subject key identifier: 79:51:91:DD:83:DF:F9:E1:6F:C3:C5:4B:B1:35:D6:79:15:CC:8D:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0181A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90040082AD9911F088289E99DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 09:45:51 +0000
ROA not before: Mon 20 Oct 2025 09:45:45 +0000
ROA not after: Sun 30 Nov 2025 09:45:45 +0000
asID: 62468
IP address blocks: 156.245.242.0/24 maxlen: 24
156.245.248.0/21 maxlen: 24
156.245.248.0/24 maxlen: 24
156.245.249.0/24 maxlen: 24
156.245.250.0/24 maxlen: 24
156.245.251.0/24 maxlen: 24
156.245.252.0/24 maxlen: 24
156.245.253.0/24 maxlen: 24
156.245.254.0/24 maxlen: 24
156.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98725 (0x181a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 09:45:45 2025 GMT
Not After : Nov 30 09:45:45 2025 GMT
Subject: CN=68f604cf-48e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:4b:df:86:4a:1e:1d:35:5e:7e:1e:fe:86:
ea:1b:7a:64:fc:63:b0:65:20:e7:79:a9:a6:74:1a:
3e:0f:a3:48:41:a5:42:b7:11:c5:5f:69:ac:a2:de:
80:df:b0:82:b7:3b:e6:b6:41:3e:21:06:10:de:dd:
46:7a:0e:80:97:75:aa:21:38:dc:81:91:93:5e:f4:
13:dc:44:16:2a:60:59:15:02:9e:2f:dd:17:4b:11:
b2:9a:d3:84:d9:cf:54:ca:81:db:13:b1:fe:a6:e7:
df:03:bb:7c:77:4b:19:15:d7:8c:72:6f:76:88:37:
4f:06:9f:eb:dc:86:5f:c3:8d:99:20:11:d6:b8:a6:
5f:c0:95:3a:35:73:fd:4c:2a:0b:1c:0a:9b:19:0b:
ab:8a:9e:23:f3:11:44:e5:56:32:8c:d2:29:63:1e:
75:6a:66:89:9a:31:e5:0b:f1:10:df:20:7b:ed:93:
be:7d:47:da:81:46:75:0a:9a:d6:d6:f2:95:7d:d2:
b2:e5:0d:8f:fd:ce:0c:ae:80:8f:68:62:ea:c6:23:
da:24:0e:41:49:4f:af:37:97:39:e8:3f:00:c6:8f:
e2:63:98:33:95:5c:63:89:a4:70:2e:c2:99:67:57:
ab:44:e3:97:4d:b9:6a:ad:9a:be:fa:c7:85:e6:b2:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:51:91:DD:83:DF:F9:E1:6F:C3:C5:4B:B1:35:D6:79:15:CC:8D:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90040082AD9911F088289E99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/24
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
29:5a:ff:5b:cd:16:c6:7b:f3:15:1a:ab:8f:d6:d6:fa:a3:9a:
82:17:e1:39:57:a6:d1:b3:d2:dc:3e:32:e2:b1:1f:c2:7f:12:
10:cb:d5:03:6c:de:19:08:c0:f2:91:75:cb:a2:51:ec:0a:78:
01:c9:f4:e7:e8:7e:b6:c3:e6:44:c4:35:9a:89:96:20:b2:a6:
e2:e4:f5:c1:82:5b:da:30:e3:62:fe:38:4e:f8:76:6e:b9:90:
f1:29:b8:60:c7:22:37:79:6a:88:bd:9a:1b:c7:7f:34:c6:eb:
b9:e7:89:74:41:2d:a4:fb:3c:b8:6f:00:11:75:5e:9d:05:70:
ed:42:8a:48:91:06:7d:6d:7b:98:a2:17:05:65:9b:b0:b3:1e:
81:00:43:10:9f:de:d8:d4:80:26:b8:2c:00:e8:3d:f9:88:21:
ac:06:15:2f:9d:c9:12:5e:ca:3f:90:d9:60:f7:ca:e4:6c:ae:
f5:cd:ed:f8:b7:50:7f:82:cd:3d:b5:7b:2f:14:55:05:e6:1b:
4e:14:07:0e:ea:67:0d:17:e8:76:37:fa:84:19:e5:b2:28:ed:
e2:80:43:95:44:c2:be:aa:8f:b4:13:6f:56:df:77:7a:bb:2d:
3e:2f:ff:6c:cb:c7:97:96:fe:34:ba:5c:05:6a:2e:48:be:c3:
c2:a6:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:57:54 2025 by rpki-client