Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABCBE244844011F0B0BA1082DAE4EC9C.roa
File: ABCBE244844011F0B0BA1082DAE4EC9C.roa (raw, json)
Hash identifier: 69L720z+Xf3F+aHoro1Lni+k534FsMHHv4Xx74eAtkY=
Subject key identifier: 83:AB:08:94:10:DB:0E:02:9B:DD:CB:25:4F:AE:F8:DB:F8:55:07:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0172D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABCBE244844011F0B0BA1082DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 18:56:15 +0000
ROA not before: Thu 28 Aug 2025 18:56:09 +0000
ROA not after: Wed 08 Oct 2025 18:56:09 +0000
asID: 62084
IP address blocks: 156.238.24.0/24 maxlen: 24
156.238.25.0/24 maxlen: 24
156.238.26.0/24 maxlen: 24
156.238.27.0/24 maxlen: 24
156.238.32.0/24 maxlen: 24
156.238.34.0/24 maxlen: 24
156.238.35.0/24 maxlen: 24
156.238.36.0/24 maxlen: 24
156.238.37.0/24 maxlen: 24
156.238.38.0/24 maxlen: 24
156.238.39.0/24 maxlen: 24
156.246.23.0/24 maxlen: 24
156.246.87.0/24 maxlen: 24
156.247.16.0/24 maxlen: 24
156.247.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94937 (0x172d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 18:56:09 2025 GMT
Not After : Oct 8 18:56:09 2025 GMT
Subject: CN=68b0a64f-da88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:ee:eb:8d:d3:d8:a4:29:8b:47:02:9b:81:
6e:c0:44:cb:9e:ec:81:cf:55:19:be:57:4b:60:13:
cc:15:34:ed:8e:7d:d0:21:9d:33:ca:f8:cb:93:0a:
76:fc:fa:75:3e:93:61:53:9a:b0:16:eb:82:85:6c:
d6:b1:ed:37:e0:24:11:fa:c1:a3:08:97:a3:8f:c3:
79:f6:41:a5:1f:2a:fe:5e:5d:d5:1b:28:77:ce:72:
67:ad:6f:57:25:1a:5d:c3:c4:9f:ee:7c:d3:2e:6f:
15:e4:8d:5a:d6:78:46:f6:51:41:13:9e:27:5d:05:
ab:5a:c1:fb:72:6e:99:51:73:4c:46:d8:68:1b:92:
c5:43:5d:3b:3d:34:49:b8:94:b9:69:da:c9:2f:42:
d7:6a:57:3e:6f:6b:1b:1d:08:c8:23:5f:0c:cd:fc:
32:7b:7a:81:66:d1:08:85:4b:ad:54:c4:25:2b:e6:
2c:20:da:7b:f0:a8:7d:50:42:92:4f:27:00:52:08:
07:7f:3f:da:3c:f5:4c:2f:20:94:9c:3c:2c:74:ed:
d4:98:39:96:89:ad:d8:42:40:e7:52:65:fc:4d:31:
e1:b0:23:98:dd:3b:ac:05:24:2c:b8:88:8c:da:b0:
4b:07:77:ff:7d:37:09:27:44:b5:86:b5:7d:ed:14:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:08:94:10:DB:0E:02:9B:DD:CB:25:4F:AE:F8:DB:F8:55:07:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABCBE244844011F0B0BA1082DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.24.0/22
156.238.32.0/24
156.238.34.0-156.238.39.255
156.246.23.0/24
156.246.87.0/24
156.247.16.0/24
156.247.19.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cf:dc:e5:4f:e1:fc:90:67:fa:6c:d3:b5:99:31:e2:30:c2:
9f:30:04:85:76:cf:3d:c5:ee:cc:ca:82:bb:e1:a0:fb:8f:c8:
57:f5:b6:f6:f9:e2:8e:9d:cf:99:0c:cd:b4:f9:49:46:9e:6c:
2f:22:e7:20:49:63:84:83:50:7b:94:56:fc:20:63:7d:81:5a:
df:b0:8b:7f:30:c2:6c:91:eb:04:a0:12:0e:f7:9f:28:59:e0:
d3:af:9d:ff:bd:f7:5e:1c:6d:f3:63:0e:36:fd:92:d2:7a:4a:
64:c1:d1:77:43:00:f3:ae:ba:fc:f3:2f:b2:03:f9:70:9e:29:
50:2b:92:7f:57:ee:d9:13:c7:2b:75:2f:d8:1b:73:17:27:1c:
bb:d8:ec:83:73:4b:54:1b:36:17:b7:2e:28:fc:a4:ea:bd:58:
90:5c:b0:fe:3b:0d:b8:6b:85:ed:24:8b:0f:71:1f:17:4a:d9:
af:f4:99:67:24:76:02:b1:c4:51:be:d2:58:0e:8e:9d:3b:03:
ba:63:b5:b4:a0:5f:6d:6c:7c:f5:20:1f:1d:e0:50:d1:20:83:
b1:7a:a3:5d:4c:a1:8d:d4:03:bc:d8:8d:7c:2b:6b:48:cc:ed:
87:42:43:55:4d:8c:69:07:72:a0:19:fa:5f:52:a2:c0:3a:76:
66:39:6e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:19:00 2025 by rpki-client