Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/946C24C89AC611F0AAD314D6DAE4EC9C.roa
File: 946C24C89AC611F0AAD314D6DAE4EC9C.roa (raw, json)
Hash identifier: SXM4V83nvdnVLT0UpR3eBfbg95EllDH/domkIL9/pWA=
Subject key identifier: B4:CA:54:9B:FD:54:CD:CA:7A:8D:C0:B7:72:6F:6C:CA:69:AB:7B:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017D79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/946C24C89AC611F0AAD314D6DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 10:50:13 +0000
ROA not before: Fri 26 Sep 2025 10:50:09 +0000
ROA not after: Sun 09 Nov 2025 10:50:09 +0000
asID: 138915
IP address blocks: 156.244.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97657 (0x17d79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 10:50:09 2025 GMT
Not After : Nov 9 10:50:09 2025 GMT
Subject: CN=68d66fe5-c7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:b9:3f:14:02:fa:1d:69:1e:15:11:37:cd:
1c:2e:cc:28:56:48:3c:1f:3c:07:23:cc:e5:09:33:
08:8d:22:2a:c4:f0:61:96:14:fd:15:74:53:fa:cc:
46:ad:f2:a2:f1:a8:ce:14:9f:b6:96:b4:cf:b6:3b:
3c:b5:2b:a4:6b:72:30:53:a6:dc:17:a0:02:55:3f:
e3:bb:0b:ad:13:eb:82:cc:9f:ff:a2:ea:82:d0:8c:
08:80:8b:f6:eb:cf:e4:ad:c2:ca:a1:0d:db:0c:68:
e7:c7:8d:e9:e2:55:c8:a0:5f:d6:9d:26:a3:7b:72:
24:b9:5f:3c:ff:e4:5f:0b:0b:d1:1f:87:8e:9d:b8:
85:80:7f:cd:ff:78:29:d0:fc:97:9c:45:c3:da:08:
e9:42:46:14:3e:5f:7b:05:65:1e:3e:74:5c:f1:08:
dd:db:db:07:c9:a3:92:b1:32:17:d8:e4:6f:55:02:
86:c3:f2:2b:26:28:dc:a3:d4:d0:aa:07:ac:de:22:
bb:0b:3c:2f:d6:0e:68:34:3e:65:22:ae:a8:53:96:
1d:46:9e:fd:04:00:2e:0f:f9:79:c4:3e:e8:80:5c:
9c:85:08:9e:d6:5f:c4:98:12:25:f1:71:34:79:d4:
b4:2d:8c:49:3f:3b:85:8e:f3:8d:97:7b:94:95:5d:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:54:9B:FD:54:CD:CA:7A:8D:C0:B7:72:6F:6C:CA:69:AB:7B:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/946C24C89AC611F0AAD314D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.61.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fe:71:ca:a3:dc:e7:30:f7:cc:b7:9a:16:6a:a0:b1:48:c1:
6c:d4:3d:1d:5b:f3:d2:60:4f:7e:5c:78:a4:dc:8b:fd:a2:7a:
e8:ec:20:91:fe:7d:a3:17:f1:6a:2b:98:6b:8c:b0:ab:7c:9f:
15:29:4a:c1:22:82:fa:7b:27:45:cc:e7:1a:4e:95:21:6d:8f:
33:de:51:c4:4c:a6:d8:90:f4:b8:8d:a5:f5:4f:53:60:6e:0b:
09:d5:79:a6:4e:d2:45:8a:19:4f:ed:80:1d:46:3b:ba:5d:1d:
d6:27:88:c2:1f:68:da:2b:15:de:c8:37:cf:52:9e:6d:36:42:
5f:32:25:fc:b0:57:9c:c1:ee:dd:2f:ce:4d:13:b6:8b:7e:31:
a8:f0:f5:a2:e0:6a:f9:38:ab:c2:f6:25:7c:a9:07:fa:9e:ad:
c6:30:f7:82:97:79:2b:20:73:13:71:ea:c2:af:db:20:96:23:
2b:16:48:b5:d5:a3:a6:11:38:b3:77:36:fa:05:7b:c7:bb:2a:
24:2f:c4:e1:fe:ad:0e:7a:cc:20:3d:6a:90:fe:b3:06:aa:08:
25:c5:cb:b5:9d:eb:75:49:1e:fa:c5:02:d1:42:14:6b:82:1f:
78:d0:fe:5c:a8:db:3c:58:ca:92:98:85:8d:23:ee:ca:88:85:
ea:26:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:04 2025 by rpki-client