Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A49F21C6843F11F0BE2F697BDAE4EC9C.roa
File: A49F21C6843F11F0BE2F697BDAE4EC9C.roa (raw, json)
Hash identifier: eqfwex9Mf0x1JDtr/2teN51fbEERJcsXCGL3yty2Ca8=
Subject key identifier: 2A:A7:0D:1A:9E:B2:0F:D4:7B:69:88:43:E5:88:3B:0C:6E:D4:86:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A49F21C6843F11F0BE2F697BDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 18:48:53 +0000
ROA not before: Thu 28 Aug 2025 18:48:48 +0000
ROA not after: Wed 08 Oct 2025 18:48:48 +0000
asID: 62084
IP address blocks: 156.247.20.0/24 maxlen: 24
156.247.21.0/24 maxlen: 24
156.247.22.0/24 maxlen: 24
156.247.23.0/24 maxlen: 24
156.254.96.0/24 maxlen: 24
156.254.97.0/24 maxlen: 24
156.254.98.0/24 maxlen: 24
156.254.99.0/24 maxlen: 24
156.254.100.0/24 maxlen: 24
156.254.101.0/24 maxlen: 24
156.254.102.0/24 maxlen: 24
156.254.103.0/24 maxlen: 24
156.254.104.0/24 maxlen: 24
156.254.105.0/24 maxlen: 24
156.254.106.0/24 maxlen: 24
156.254.107.0/24 maxlen: 24
156.254.108.0/24 maxlen: 24
156.254.109.0/24 maxlen: 24
156.254.110.0/24 maxlen: 24
156.254.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94935 (0x172d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 18:48:48 2025 GMT
Not After : Oct 8 18:48:48 2025 GMT
Subject: CN=68b0a495-baab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:6d:8f:ca:dc:b7:3e:df:87:3d:09:eb:e1:
cd:e2:37:c2:57:88:8b:89:73:b0:e9:f4:8d:ff:c5:
7f:d4:73:f0:0b:c8:68:c5:46:2c:6a:b8:a3:69:06:
d5:cd:7d:ab:55:9f:93:ea:4e:9c:dc:9d:97:3e:f0:
3c:46:d8:e1:93:3c:7e:91:ad:46:3e:b9:9d:bb:95:
36:e2:d7:d3:b2:69:29:65:bc:bb:0b:3a:86:94:6e:
45:33:14:70:4d:96:62:1e:0c:e7:de:16:fc:b1:68:
56:83:60:29:82:1b:20:99:3e:4c:2d:3c:7b:93:cb:
a5:e4:e1:03:3d:92:c5:cb:4b:17:a2:68:10:6d:2b:
f5:27:61:15:17:73:12:82:53:df:e2:46:83:d6:a3:
51:71:0d:93:27:b2:a0:b1:5f:bc:9c:29:2b:26:c8:
70:2d:0f:4a:a7:d7:1a:03:df:6d:3b:61:8a:b8:ad:
67:68:9b:87:be:0f:df:6f:71:05:dd:1b:ef:4b:0b:
a4:5a:73:a9:53:c9:44:e9:55:a1:6e:a7:b0:23:4f:
d9:30:b6:82:6f:25:89:5f:88:2f:70:10:19:df:ba:
e9:b7:92:27:c0:85:fc:8b:37:de:ff:0e:50:c7:39:
25:61:ee:3d:da:11:32:57:df:13:a1:ad:53:cb:a3:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:0D:1A:9E:B2:0F:D4:7B:69:88:43:E5:88:3B:0C:6E:D4:86:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A49F21C6843F11F0BE2F697BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.20.0/22
156.254.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:96:d8:8e:15:03:7c:66:51:c6:ef:a9:54:74:b0:3a:d4:27:
cb:1f:12:eb:bf:b1:e2:3d:68:3c:2c:b2:1c:bb:6d:d4:b1:e7:
98:c2:43:39:e2:32:6a:3d:1d:6e:31:0c:37:b4:e3:6f:02:7f:
f1:f6:d6:0e:67:85:97:b4:8e:da:eb:75:c2:e8:08:84:6d:79:
9b:d5:a9:a0:0c:7f:43:d5:c7:c6:0b:1c:9a:ce:38:a0:08:a6:
39:5e:ce:3c:61:f8:5a:c4:69:36:5d:5f:fe:29:81:81:c8:54:
eb:f7:f8:cb:59:5b:94:23:61:ef:0b:50:7d:8b:fc:33:5e:bf:
b4:e1:af:a9:ad:a6:0e:7a:c2:5a:fc:c7:c9:ae:52:61:94:ff:
2e:6b:93:19:29:45:21:81:6c:79:ca:27:51:e9:be:5a:08:e9:
c5:57:d7:ea:d3:3e:84:af:0f:c3:af:a7:64:b9:8e:54:29:90:
bb:16:b1:28:bf:6f:3a:91:1c:7f:4d:3d:9f:b7:0f:f8:d7:92:
b9:b1:f4:61:10:7b:7f:01:bc:00:91:67:fa:a7:e9:61:0d:a6:
ff:98:ea:a3:96:11:48:89:f4:15:ac:51:68:56:c3:2c:df:8a:
2e:95:43:3a:ee:da:cd:d4:25:d2:db:18:2d:e1:a8:2e:cd:30:
ca:42:30:04
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAXLXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI4MTg0ODQ4WhcNMjUxMDA4MTg0ODQ4WjAYMRYw
FAYDVQQDEw02OGIwYTQ5NS1iYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArEFtj8rctz7fhz0J6+HN4jfCV4iLiXOw6fSN/8V/1HPwC8hoxUYsarij
aQbVzX2rVZ+T6k6c3J2XPvA8Rtjhkzx+ka1GPrmdu5U24tfTsmkpZby7CzqGlG5F
MxRwTZZiHgzn3hb8sWhWg2ApghsgmT5MLTx7k8ul5OEDPZLFy0sXomgQbSv1J2EV
F3MSglPf4kaD1qNRcQ2TJ7KgsV+8nCkrJshwLQ9Kp9caA99tO2GKuK1naJuHvg/f
b3EF3RvvSwukWnOpU8lE6VWhbqewI0/ZMLaCbyWJX4gvcBAZ37rpt5InwIX8izfe
/w5QxzklYe492hEyV98Toa1Ty6PWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqn
DRqesg/Ue2mIQ+WIOwxu1IafMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNDlGMjFDNjg0M0YxMUYwQkUyRjY5N0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnPcUAwQEnP5gMA0GCSqGSIb3
DQEBCwUAA4IBAQAbltiOFQN8ZlHG76lUdLA61CfLHxLrv7HiPWg8LLIcu23UseeY
wkM54jJqPR1uMQw3tONvAn/x9tYOZ4WXtI7a63XC6AiEbXmb1amgDH9D1cfGCxya
zjigCKY5Xs48YfhaxGk2XV/+KYGByFTr9/jLWVuUI2HvC1B9i/wzXr+04a+praYO
esJa/MfJrlJhlP8ua5MZKUUhgWx5yidR6b5aCOnFV9fq0z6Erw/Dr6dkuY5UKZC7
FrEov286kRx/TT2ftw/415K5sfRhEHt/AbwAkWf6p+lhDab/mOqjlhFIifQVrFFo
VsMs34oulUM67trN1CXS2xgt4aguzTDKQjAE
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:18:58 2025 by rpki-client